Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: pQ1fGZXCEKf2GXls95WUo5WKy65YlZgO2zELmtcU/r8=
Subject key identifier: 5A:69:AF:04:B1:CA:E5:04:35:F6:6C:60:45:5E:FE:02:20:1C:C2:36
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 054ACCAEBEA77902DB46E0817FE8016BF1FA4264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02F1
Signing time: Tue 12 May 2026 18:22:59 +0000
Manifest this update: Tue 12 May 2026 18:17:59 +0000
Manifest next update: Wed 13 May 2026 20:54:59 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: qwUMLZMaGJ8ExTpy49mrR0lUr768AZu8NElwmGIz2uQ=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4a:cc:ae:be:a7:79:02:db:46:e0:81:7f:e8:01:6b:f1:fa:42:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 12 18:17:59 2026 GMT
Not After : May 13 20:54:59 2026 GMT
Subject: CN=5A69AF04B1CAE50435F66C60455EFE02201CC236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:9b:1e:3b:7f:79:13:84:74:2a:c1:95:5a:
4f:7b:0a:1a:2c:3b:18:94:93:f9:e5:2d:ff:af:82:
ae:0f:a3:7c:73:86:9d:e9:8f:6e:cd:17:19:90:43:
f4:41:13:7c:b5:90:5e:14:73:af:d9:13:c0:0f:8e:
7b:01:b9:c0:48:8c:90:8f:eb:10:f1:e5:81:75:71:
1e:fb:f7:fa:bb:59:a1:14:93:9a:ec:3c:19:db:0b:
ce:8e:28:7b:b6:40:0e:c5:a6:c6:66:1e:bb:9c:aa:
29:a2:a1:4b:7c:93:69:49:b1:93:6b:3d:2c:41:40:
2b:72:39:e8:d2:9e:62:a2:98:26:3c:d0:8c:ff:77:
67:35:df:92:11:56:5f:ea:04:49:2f:2a:de:c2:5d:
38:e8:a5:bc:38:e8:67:3c:f0:c8:b2:16:af:64:17:
7f:3b:1e:96:55:60:19:41:2c:b3:be:05:fe:e7:ff:
11:86:12:d0:eb:34:74:e7:2f:fa:fd:f7:dd:5d:34:
2f:c6:70:2f:07:7b:d5:88:12:ec:f1:5f:48:b1:a9:
d3:e5:e1:48:dd:59:fe:29:3f:46:99:b8:8c:4e:c3:
25:8c:55:a3:bf:79:e3:e0:0f:f0:8e:c3:47:52:39:
1a:22:9c:2b:bf:fe:2b:ae:5f:b2:c7:b9:f5:a0:41:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:AF:04:B1:CA:E5:04:35:F6:6C:60:45:5E:FE:02:20:1C:C2:36
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:36:09:f3:eb:99:7f:d5:13:07:b2:59:e9:ce:e6:94:a1:20:
d0:a4:eb:dc:e5:8e:f5:c6:76:e4:b8:c1:1e:e2:41:21:b6:ca:
67:5b:7c:53:8c:ca:c7:4d:69:be:be:cc:ec:4f:41:36:21:51:
ad:6f:7d:e3:52:1b:35:dd:42:13:25:f8:e1:cf:6f:84:61:a1:
e1:04:33:fc:52:fe:0c:0f:5f:a9:7e:1f:11:48:08:35:cb:bf:
4a:60:85:55:a9:b7:43:8d:71:e2:38:3c:b0:ce:da:60:87:88:
10:6d:36:88:a4:12:1c:76:f1:24:7c:5d:3c:e9:29:ac:8a:e0:
5f:ea:9f:8c:4d:b8:09:6a:22:72:1e:0f:15:9e:67:eb:11:a1:
23:2b:11:04:81:e2:0c:f4:ce:90:58:a0:82:3c:1d:22:2e:90:
7c:3f:7e:da:69:16:83:c1:12:3d:6c:4f:ed:4e:69:b7:0a:db:
9c:e2:8b:62:ef:96:0a:50:2a:40:76:49:db:73:9b:53:10:5f:
42:e4:a2:29:78:92:b2:89:6b:ab:50:a2:85:2e:67:3b:91:6c:
b3:7d:94:f6:8f:37:92:0c:7c:4f:cf:0b:fa:cd:83:de:27:9b:
8b:0a:d0:b8:1e:6e:69:dd:be:5c:d8:26:f6:1e:62:eb:77:be:
62:da:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:51:51 2026 by rpki-client