Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: TWxq7Gv/JM9FKjyOjkhhZ7mbIE4tFKFEFEBPE3ilrOQ=
Subject key identifier: 40:C0:27:56:DD:E9:CC:4D:B9:1D:8F:04:EF:FF:91:47:E8:C6:C5:3D
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 1004B4EE58D9620D4992B7AEE684DB81218833BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02DF
Signing time: Wed 29 Apr 2026 09:31:37 +0000
Manifest this update: Wed 29 Apr 2026 09:26:37 +0000
Manifest next update: Thu 30 Apr 2026 11:17:37 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: LCFkVcoMwBc9NYtzzpElOQ0Fb9ERQ9XHPhg2VPdazoo=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 11:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:04:b4:ee:58:d9:62:0d:49:92:b7:ae:e6:84:db:81:21:88:33:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 29 09:26:37 2026 GMT
Not After : Apr 30 11:17:37 2026 GMT
Subject: CN=40C02756DDE9CC4DB91D8F04EFFF9147E8C6C53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:87:9d:c9:fb:2f:9c:3c:78:f5:e6:97:30:
ee:68:40:8c:cb:24:7c:11:ea:03:50:c8:7a:b3:6b:
24:15:bf:2b:55:14:5b:29:bd:59:bf:f5:c4:ff:08:
c3:23:07:fe:72:76:dc:2a:86:8f:9c:5c:91:60:ba:
3e:17:06:9f:c7:4d:62:61:ee:c0:a6:32:d7:34:ee:
96:d3:fa:a3:6a:9b:c9:8e:9b:a4:0f:1c:e6:09:44:
79:bd:b2:2e:76:b5:37:cf:e6:4d:b3:98:a1:a2:51:
1f:38:06:1f:33:fd:5c:f5:86:28:3e:f9:12:d1:af:
41:e6:55:36:68:b1:d1:9f:90:d0:2a:6f:5d:a9:43:
48:f3:d1:c4:f4:31:c0:9c:fa:6b:1f:bc:ce:db:a2:
37:3b:e3:ed:d0:c7:29:65:3d:8c:bf:1e:31:d3:31:
36:12:e5:29:73:59:60:20:18:77:b7:3c:a4:c2:92:
5c:10:fe:54:8a:fd:6d:ac:c3:23:78:8a:30:12:90:
0d:79:fa:7c:3b:43:3d:85:b4:41:df:b8:90:4e:47:
cb:a4:82:87:65:a9:57:da:1b:38:5f:04:87:69:ff:
d7:c4:aa:2a:e7:75:32:17:b0:83:27:b0:7d:d2:f1:
cf:f2:c3:fb:55:11:da:c2:f4:cd:ed:43:51:80:de:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:27:56:DD:E9:CC:4D:B9:1D:8F:04:EF:FF:91:47:E8:C6:C5:3D
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cf:21:08:29:ef:f4:26:9f:2d:59:6d:2b:fb:f1:94:cd:9d:
a2:11:72:3c:2a:72:7d:c3:3a:a0:a8:f7:00:b0:11:fb:d3:da:
92:b7:7b:ec:7e:36:af:fb:ba:01:f5:64:46:c1:88:63:be:13:
d2:e8:fd:0c:45:00:32:77:bb:df:c2:f7:68:fa:f7:e8:86:04:
8b:24:d8:7d:67:f6:af:a7:41:57:16:3e:62:83:80:4d:9c:17:
fb:67:53:6b:3a:a1:95:d7:e9:bf:cb:f8:0c:89:9f:68:a7:15:
5d:55:ed:d0:dd:c4:16:2d:5b:56:de:b3:0b:20:ca:bf:a0:29:
35:6c:73:60:b5:e4:d9:90:98:8d:0b:22:ad:77:a2:c8:dc:7b:
bc:25:0f:50:e1:93:6f:7d:9b:8c:66:35:58:12:ee:98:d8:2d:
fa:01:51:12:4f:43:4f:39:a7:ae:ff:f1:3e:33:61:f2:97:9d:
33:46:94:85:da:df:c5:3e:45:25:ec:5b:20:4e:95:52:56:6a:
3d:b8:6a:fe:a7:77:58:2a:40:58:ab:d4:66:17:79:84:25:65:
e4:eb:1a:dd:9c:5b:0a:7d:bc:00:a2:8f:f9:02:7e:1f:b8:8e:
9e:9b:84:63:54:a8:b4:d1:3d:fb:eb:e8:e4:44:68:31:1d:9a:
49:0d:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 16:53:52 2026 by rpki-client