Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: NTP9/gm+NhkEWr6KxZ16KBxCUdLtrQb9NtQTYqmIwz8=
Subject key identifier: 8E:D1:A9:9B:3F:5F:1D:47:2A:09:2B:49:0E:32:09:42:E5:16:18:9D
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 663D57881D4665B2E9B1014C7624DE22B68E41B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02E6
Signing time: Mon 04 May 2026 12:12:18 +0000
Manifest this update: Mon 04 May 2026 12:07:18 +0000
Manifest next update: Tue 05 May 2026 14:59:18 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Z5sf+ERFCfDjjFGamXahpYVp1s99hYlbJL53mV1L+bU=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 14:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3d:57:88:1d:46:65:b2:e9:b1:01:4c:76:24:de:22:b6:8e:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 4 12:07:18 2026 GMT
Not After : May 5 14:59:18 2026 GMT
Subject: CN=8ED1A99B3F5F1D472A092B490E320942E516189D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:08:89:72:85:ca:6c:82:58:d4:a8:6e:0b:
21:df:b6:d5:af:26:43:90:c7:d0:52:c2:c0:82:89:
1e:dd:d2:7c:db:1f:58:e6:dc:b1:43:44:f4:10:bf:
f2:77:94:5b:0f:e0:88:09:b6:9d:1e:fd:1d:f8:df:
91:13:d6:b3:80:05:01:f5:8e:65:e7:37:04:83:c7:
bd:d0:7d:4e:aa:fd:a7:a4:dc:50:37:0d:13:4d:a0:
87:d8:bd:1d:b9:d7:da:58:4a:13:94:58:62:e8:43:
3b:61:95:c4:fd:4f:1b:da:c2:d7:45:5e:92:3c:48:
53:8d:94:8a:97:5c:11:7b:f9:0b:7d:d4:b2:74:cf:
e6:da:44:20:29:bd:16:91:26:c9:4e:b5:3d:39:c6:
c8:56:b9:7d:21:c3:f2:ed:2c:34:70:f7:1a:85:c5:
c4:34:8d:33:cb:f1:9a:7e:f4:09:db:fb:a5:28:e5:
44:72:de:f4:d3:ba:77:37:5a:6a:a3:15:11:a6:38:
1e:98:9c:fb:98:90:5d:2d:e3:bf:c8:bc:f7:d6:e5:
66:8e:a4:2d:0e:e7:fd:20:90:9f:34:77:81:f9:de:
41:93:d1:ad:90:f9:01:e9:9e:ef:03:c6:c9:ab:31:
1f:aa:5f:8a:81:eb:1b:28:3f:26:00:75:bd:eb:73:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:A9:9B:3F:5F:1D:47:2A:09:2B:49:0E:32:09:42:E5:16:18:9D
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:b9:f1:15:e6:ad:c4:3b:fb:91:6d:16:90:81:44:ba:01:
b0:6d:39:63:e6:66:a7:76:a2:36:c0:d5:e9:26:7a:4a:42:ee:
d3:63:6e:2c:a2:b3:1a:42:6a:29:18:9d:37:41:94:8c:b4:c1:
4e:c9:69:97:7e:3b:70:e0:06:cd:7d:b1:dd:45:b3:67:85:8b:
85:5e:09:54:31:81:3c:2a:29:8d:3b:97:e7:71:62:ac:a3:5e:
c4:ef:69:fc:9d:c1:b5:6f:0c:21:e0:51:41:30:07:5f:95:1f:
5a:40:f9:a2:92:35:8b:1c:08:d7:6c:8c:1a:8c:a8:70:0c:3a:
29:df:2c:4e:91:a9:d3:15:08:a6:90:8d:55:ba:41:ab:4d:0e:
37:e2:a7:90:1a:73:0e:88:94:fa:9d:98:85:0b:57:b4:b4:ec:
5b:09:b8:ec:08:8b:28:f2:25:e8:c1:3d:70:ed:05:f7:1a:af:
8e:e9:d6:b5:11:ac:9e:7a:e5:29:60:df:e2:cc:27:95:29:10:
51:56:65:a7:04:bf:d6:be:d8:bb:9c:de:2b:b0:4d:70:4e:25:
69:2d:74:00:a3:ef:71:fe:fe:59:c9:53:6f:0a:8d:bc:c3:07:
bf:ed:7e:7b:2f:6b:f8:55:4a:17:f0:73:32:1a:79:a1:87:06:
4b:5d:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 06:49:21 2026 by rpki-client