Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 0LzSNCzvpBpv4ShWp33BRBxXzeQ0TXLddtvIE2P3rD0=
Subject key identifier: 54:4B:B0:80:49:5F:6A:6D:D1:55:BB:09:09:26:86:94:29:1D:3D:4F
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4E07B62F858B7C4D32974AB73077E4E9FC11D4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 029D
Signing time: Tue 10 Mar 2026 07:30:02 +0000
Manifest this update: Tue 10 Mar 2026 07:25:02 +0000
Manifest next update: Wed 11 Mar 2026 10:44:02 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: VPYRixrMLXaLspgEvV3lwMjDYglGt8LXxk1sybzVp3Q=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 10:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:07:b6:2f:85:8b:7c:4d:32:97:4a:b7:30:77:e4:e9:fc:11:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 10 07:25:02 2026 GMT
Not After : Mar 11 10:44:02 2026 GMT
Subject: CN=544BB080495F6A6DD155BB0909268694291D3D4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:a3:4c:1e:c7:ea:7c:fd:cf:cb:c6:f0:a1:
3d:90:7d:20:97:99:54:c9:33:7a:89:33:f7:14:6f:
45:25:bc:8c:95:8d:cf:6e:f0:43:cf:78:46:67:66:
d2:53:0c:1e:52:f0:10:be:96:8c:7a:4a:d7:37:bf:
1f:39:51:49:30:86:0e:c6:14:22:87:d4:9e:5a:70:
aa:b3:9b:b0:89:11:a8:6a:86:4b:bf:c5:59:45:a1:
8a:c9:e0:1f:89:81:8e:6f:be:2e:55:26:92:04:6b:
59:10:ab:e2:72:95:66:2a:77:4a:56:82:1d:ac:61:
fa:44:76:27:15:7c:ac:28:53:b3:8f:15:53:0b:c9:
9a:70:45:8f:32:d7:a1:94:26:fd:5f:4a:42:8c:57:
c8:39:5c:a5:91:fb:67:55:58:30:b1:1b:62:1d:cd:
5e:5e:63:33:bc:eb:b0:48:4c:85:06:33:12:4f:52:
85:1f:fd:6c:3a:e8:23:05:3a:c0:7b:07:4c:c8:44:
2c:ef:21:50:52:f1:8c:11:27:1f:6d:a0:e9:2c:b7:
f3:7a:31:18:b1:0c:41:e3:b7:9f:59:65:44:cb:cc:
70:3a:20:6e:2d:f7:2b:86:93:7e:44:53:61:88:10:
5d:1b:a4:2c:5c:11:43:91:20:36:ba:1b:f6:23:3a:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4B:B0:80:49:5F:6A:6D:D1:55:BB:09:09:26:86:94:29:1D:3D:4F
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7e:ce:e6:f1:da:ce:bb:1d:38:a4:0f:c4:7b:6d:20:c7:63:
b7:c2:d8:8f:e8:cc:cd:74:22:d0:7b:79:5e:d4:74:ef:df:4c:
21:78:15:9a:99:4e:85:9c:f0:5f:99:cc:c7:5d:37:9f:40:b1:
e0:12:be:b3:0c:be:6e:df:87:fb:89:e0:ae:3b:07:cf:85:bd:
15:bb:e1:72:8a:55:f9:3b:1b:94:66:05:a0:7f:1b:37:fe:6d:
5a:4b:60:42:71:32:be:9d:88:b7:4e:a7:be:ed:96:e2:4a:d2:
09:d6:cf:52:88:2e:49:a5:99:32:3a:b1:88:d9:0e:45:b0:ba:
e1:20:8f:63:8b:70:c7:22:d3:76:2b:a3:a2:88:60:05:22:6e:
cb:a2:b1:11:29:e9:04:fd:55:f5:85:a3:b7:ef:7d:86:8a:ab:
13:38:6f:fd:7b:03:1e:d5:65:09:52:31:b9:1f:fa:70:75:fa:
84:2d:08:57:a7:9c:77:55:be:eb:ac:b4:ab:8a:cc:9d:b4:26:
e6:da:89:b5:65:46:54:6c:ed:54:c0:2f:30:ca:fe:08:be:6c:
10:d5:e3:fe:3b:86:c1:22:ec:00:69:d6:31:31:38:1a:23:3d:
4a:e1:56:4f:89:f7:9b:db:f8:bb:29:3b:d8:c4:12:53:8c:a5:
37:b2:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 04:23:49 2026 by rpki-client