Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: yoHdEhDqZpnb8vcPt8v/pOTo99LY0ykZ2Z5mCpegaVc=
Subject key identifier: E6:F3:90:B6:F4:99:F4:C9:AA:EC:F2:DA:DD:D4:FF:01:B1:8C:A5:5D
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 12EB2951330A6EFEC76E780332FCEDA360BC416E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 039A
Signing time: Tue 15 Sep 2026 20:43:11 +0000
Manifest this update: Tue 15 Sep 2026 20:38:11 +0000
Manifest next update: Wed 16 Sep 2026 21:19:11 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: KARCkZ3B6anB7TFammUPAkqQs5MoFeJ+Crocfl0//hQ=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:eb:29:51:33:0a:6e:fe:c7:6e:78:03:32:fc:ed:a3:60:bc:41:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 15 20:38:11 2026 GMT
Not After : Sep 16 21:19:11 2026 GMT
Subject: CN=E6F390B6F499F4C9AAECF2DADDD4FF01B18CA55D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:81:00:28:57:59:b2:71:be:4a:3d:41:aa:
73:01:ef:59:cf:8a:1b:75:bd:c7:22:7f:dd:a4:c1:
af:a8:cf:c7:f2:44:7f:8b:87:22:b6:d9:c6:1a:31:
22:d7:25:30:92:be:7c:e8:a7:60:69:8f:d6:9f:7d:
08:4d:11:57:e2:98:fa:6c:4d:79:b2:dc:ab:2c:cf:
f4:ba:e3:23:a6:b2:91:a1:9a:a5:28:29:12:5a:ba:
a3:9d:07:a3:7c:2a:92:a6:db:f3:e5:ad:29:12:6d:
d3:56:fe:64:1c:ff:ba:f5:ad:d9:0d:5c:c2:2b:1f:
c5:63:88:ae:4f:33:3c:f4:da:d6:54:10:fb:8d:f5:
60:60:f2:28:6c:43:6f:03:2c:84:a0:2c:36:5c:5c:
ae:b5:75:3f:57:84:cb:fd:ca:ea:2f:18:d9:c1:5b:
d1:f3:17:c2:c9:1a:59:57:3b:43:2e:6e:46:c1:ac:
de:0c:27:90:ed:b1:a7:2e:f8:51:0a:76:2f:38:61:
fb:22:de:2c:fc:4a:18:cb:e9:72:b9:5e:6a:0b:68:
4d:92:e2:96:fd:18:b4:36:f5:0e:2b:01:50:6f:7e:
43:9f:75:5c:d5:2f:8b:58:c6:1f:17:17:35:b3:11:
a6:e5:d0:aa:54:42:2e:94:a6:ee:50:20:cb:1e:28:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F3:90:B6:F4:99:F4:C9:AA:EC:F2:DA:DD:D4:FF:01:B1:8C:A5:5D
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:02:5d:11:20:e8:a2:ce:a6:1d:14:04:93:87:af:15:bd:63:
dc:01:49:dd:df:ab:a5:48:1a:2e:4e:13:e4:29:a2:8e:07:75:
85:74:aa:ec:91:4c:6c:a2:b9:c8:37:e0:7e:7e:b2:e1:03:ff:
17:82:19:22:ca:6f:b0:2c:61:96:e8:f3:26:f9:26:f4:15:0c:
76:b2:f3:c9:b1:1b:4e:4a:fa:04:24:ce:16:1e:05:a8:45:c9:
d0:83:19:66:dd:50:f2:d2:b1:e9:03:08:e6:6e:2d:cb:92:93:
a2:77:07:6f:37:ab:ec:5d:56:4c:08:3c:98:7d:ae:3b:75:e4:
45:26:11:c8:0b:5f:96:70:f2:b9:a6:ab:11:12:e9:24:10:a6:
14:43:b8:66:95:51:bb:37:ab:8e:a6:ed:81:19:b3:13:91:2d:
58:bf:f4:17:8b:bb:cf:88:f5:83:49:cd:d5:6d:c6:fd:62:6c:
a2:d4:34:f0:44:9b:c5:78:50:66:a1:10:44:f7:e4:72:7c:6e:
75:e4:96:c8:4e:39:09:44:bb:b4:cb:4c:71:fc:d1:da:07:fc:
46:92:23:d1:cf:70:9f:e4:44:e9:e3:e9:58:0b:4b:3d:13:b4:
0b:46:35:fc:8d:89:c2:12:e4:e2:69:ce:b2:c9:69:33:8d:de:
4b:5a:e4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 10:56:54 2026 by rpki-client