Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: zQR005rr2fnfrhjXepLAjTEsUZhRhCiV0vVhk7aSn4s=
Subject key identifier: 59:C2:4A:CE:C0:9A:7E:51:E4:A1:D8:9A:58:83:2F:2C:F8:AA:14:47
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2568BE505139C7FF2B57C6BF76B5A05615C44FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0320
Signing time: Tue 16 Jun 2026 16:29:10 +0000
Manifest this update: Tue 16 Jun 2026 16:24:10 +0000
Manifest next update: Wed 17 Jun 2026 19:27:10 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: /Y/1sWOGON5m/mfnEr0oAgKEGYjQLFqhNVRS1U/7j4Q=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:68:be:50:51:39:c7:ff:2b:57:c6:bf:76:b5:a0:56:15:c4:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 16 16:24:10 2026 GMT
Not After : Jun 17 19:27:10 2026 GMT
Subject: CN=59C24ACEC09A7E51E4A1D89A58832F2CF8AA1447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:61:9d:dd:d5:8c:23:6c:2e:8c:71:93:45:
16:63:d5:59:23:04:e2:88:73:84:c0:53:3c:a1:b9:
98:ff:8e:97:b0:d4:fe:06:84:14:5c:19:7d:78:8f:
fb:62:40:f6:96:af:c5:5a:3d:43:ea:19:b8:12:7a:
7c:e0:a4:a6:ac:0d:97:8a:ba:17:fb:2b:46:e6:97:
fa:4d:f0:17:5a:a4:41:65:6a:d8:6f:1a:86:54:33:
e3:8e:8a:7e:ef:97:1b:5c:d0:ad:99:55:cb:4b:f3:
3f:80:8e:99:fa:f5:be:cf:f6:d2:90:e6:df:1b:7d:
77:8c:c3:a5:84:d4:93:84:4e:a8:60:09:25:a2:29:
8c:13:f0:0a:32:dd:48:c0:65:83:14:b3:b0:e5:9d:
f8:07:31:93:22:86:b5:75:7e:bd:d6:a0:b2:77:c4:
5e:6a:e6:04:1d:3b:2c:f1:dc:0f:2b:23:b2:a8:1a:
f8:93:b4:49:14:8c:93:dd:2f:ee:00:46:88:8d:0d:
f8:63:4c:fb:4a:6d:0f:c2:47:46:c7:e1:d4:4e:97:
ca:02:74:6a:61:79:3e:d0:1c:1d:1b:01:ba:58:37:
b3:c2:6c:9c:a1:27:eb:e1:3b:6e:42:97:6b:8b:1d:
66:67:85:02:6c:94:8c:82:2e:63:7f:ff:35:05:ec:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:4A:CE:C0:9A:7E:51:E4:A1:D8:9A:58:83:2F:2C:F8:AA:14:47
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:78:41:71:a4:d8:95:c9:64:27:34:33:cd:88:60:47:3d:12:
74:4d:4b:b3:d8:33:56:85:c4:9b:7d:61:03:44:b4:da:fd:b8:
00:fe:38:11:a3:f6:70:ac:2d:ca:3c:b8:92:78:a3:91:69:56:
a0:d7:8c:01:d3:ec:70:18:fe:b8:d7:ac:2b:9d:49:66:b7:cb:
11:f5:13:6b:2c:5b:f9:4c:88:63:1f:78:4a:69:ab:84:f3:e4:
80:e8:3a:e5:11:14:b0:29:2b:39:08:30:c3:86:98:e6:96:ed:
b9:99:05:13:93:4c:66:e2:4e:3d:ed:c9:a0:4f:77:a2:24:c3:
69:d3:85:72:a6:ce:e7:2e:68:9c:d6:2b:49:cd:cd:8d:0c:3e:
a8:73:dd:34:dd:20:39:7c:00:62:b5:60:22:19:04:29:06:ab:
5a:27:7c:e2:a2:b7:ec:c1:15:62:08:1f:6e:03:ae:dc:34:7f:
3d:9d:bb:53:fa:ff:49:73:e6:14:db:3e:1c:b3:3b:28:41:82:
49:ff:af:c0:b5:17:96:65:ca:bb:22:80:b5:35:08:e5:ab:b8:
a6:8a:64:83:b7:a7:eb:bf:62:74:42:c8:56:53:86:5b:eb:d2:
87:b1:47:bd:68:23:f5:09:8c:63:4e:eb:df:cf:2d:80:3f:87:
f0:bc:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 04:51:58 2026 by rpki-client