Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: PzgIxu/Z84dSJapA6nC+3Ggc6grYXYGxuIKZoFdTrhc=
Subject key identifier: B1:32:48:0D:4C:A3:73:D2:65:6B:09:13:68:EB:3E:4A:E2:F5:3F:CE
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 522553AEBD6FDB51D5A1261961636E88555D9308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02DC
Signing time: Mon 27 Apr 2026 04:06:33 +0000
Manifest this update: Mon 27 Apr 2026 04:01:33 +0000
Manifest next update: Tue 28 Apr 2026 05:00:33 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: KAK+Aqk6dV7f7Dz0ACUC7fI9MPwBZUAGkglCMgoEz4I=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:25:53:ae:bd:6f:db:51:d5:a1:26:19:61:63:6e:88:55:5d:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 27 04:01:33 2026 GMT
Not After : Apr 28 05:00:33 2026 GMT
Subject: CN=B132480D4CA373D2656B091368EB3E4AE2F53FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:0c:48:28:1e:02:be:c9:66:4d:c6:75:7f:
fb:9b:db:86:46:ec:a6:7f:44:2b:55:07:c5:5b:cb:
b8:91:44:f8:65:cd:33:d1:90:09:93:51:f8:56:b0:
6b:4e:57:4b:3c:cc:4e:cc:97:69:96:a3:76:dc:ac:
f3:34:9e:f0:2f:de:ac:ac:56:d8:e9:6e:99:b0:54:
f8:26:c7:3e:79:6b:14:df:9b:ee:dd:f7:84:fc:dc:
41:6f:4f:14:0b:25:05:9a:46:c8:80:e6:73:80:bb:
1b:d0:8b:67:c0:33:bc:50:c1:9c:19:d2:52:92:43:
40:16:b7:b0:a6:2e:b7:33:fc:33:de:c7:a9:ae:a3:
a2:f0:13:99:c5:e5:c7:77:7e:10:65:09:fc:70:3f:
62:66:32:80:eb:d0:f3:48:c6:b5:5f:00:15:06:c6:
c4:f5:51:1e:67:61:66:ae:45:c4:27:d0:80:12:b8:
8b:5b:50:b1:6d:fa:a4:0b:a4:4d:1e:ff:64:81:33:
e9:59:f6:cd:ce:98:5d:34:3b:74:b4:a1:66:e0:1e:
6e:eb:0c:6e:51:e8:97:ea:12:d1:e5:25:9a:73:6f:
4c:1c:ed:44:e4:f9:d5:98:67:ce:b2:6f:6f:7c:95:
9e:65:be:b5:a3:99:d5:0d:94:2f:ff:ba:41:17:91:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:48:0D:4C:A3:73:D2:65:6B:09:13:68:EB:3E:4A:E2:F5:3F:CE
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ce:43:30:f5:f2:d5:fa:e0:02:92:9d:0c:0e:3e:b2:59:67:
03:d3:53:8f:1d:f4:73:d1:fa:7f:46:c6:cf:0a:4d:cf:db:5b:
ad:70:95:0d:d2:1b:49:87:59:b2:64:fd:07:b0:db:ac:8d:5c:
da:32:5f:62:e8:15:3a:bb:2f:b1:65:a8:20:bb:25:21:45:aa:
d3:3f:60:be:05:df:4e:16:30:45:a7:e0:60:06:5d:7a:8c:f6:
64:ea:2e:53:aa:09:aa:b3:a9:6e:29:be:24:2d:90:d2:ff:b8:
78:9a:c3:17:a4:68:a6:2e:d5:41:21:3c:83:e7:fd:cc:ae:91:
d4:6f:93:3b:d5:fa:b1:cc:13:03:3a:37:24:9a:df:d5:11:be:
9c:43:82:53:7f:c9:1c:80:b4:36:72:3b:08:da:85:2c:4b:7c:
fe:74:8b:d7:ab:ae:cc:ca:cd:5b:c1:b4:6d:6e:61:ee:3d:93:
d8:c7:93:ea:90:d5:b0:97:58:7c:16:6b:e0:52:23:9a:69:1b:
b5:b3:1a:db:87:0a:e0:6a:a2:08:e8:c7:12:1d:3a:6a:67:9d:
f3:32:b8:36:e9:dd:29:48:81:d5:65:df:e2:d4:13:6f:7d:c4:
75:0a:08:77:99:47:73:31:36:d7:bb:ac:5a:ce:6e:22:76:4e:
cc:1d:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:53:18 2026 by rpki-client