
Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: HaGEB1z6PGh0hYJhm9FYg/9gp/ZRarbnT8EJ5du7OUs=
Subject key identifier: 9A:7B:D1:3D:E0:C9:9F:F2:80:1A:71:DF:DA:4B:6F:AE:E4:BA:B2:A1
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2AE2C4EFC7868DB96771F917B06A7175700B2FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0396
Signing time: Sat 12 Sep 2026 19:18:08 +0000
Manifest this update: Sat 12 Sep 2026 19:13:08 +0000
Manifest next update: Sun 13 Sep 2026 22:26:08 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Lj4twAEsyMwS4IhRaMUGqopMmQkBZNI1Ar9UVIly6wI=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 22:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e2:c4:ef:c7:86:8d:b9:67:71:f9:17:b0:6a:71:75:70:0b:2f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 12 19:13:08 2026 GMT
Not After : Sep 13 22:26:08 2026 GMT
Subject: CN=9A7BD13DE0C99FF2801A71DFDA4B6FAEE4BAB2A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:79:43:22:b8:17:1e:8a:e8:97:92:3e:c7:
c4:fe:bf:bc:a1:d4:30:79:ac:88:05:97:26:14:88:
28:c1:38:26:d5:a4:2d:10:9c:65:0b:d7:37:02:09:
2b:d0:9e:51:35:08:2e:08:59:e6:98:9b:df:83:f2:
ee:b5:99:7e:eb:1c:2c:15:1f:d1:0b:15:a4:a2:82:
e3:99:b9:97:f4:61:e5:db:f9:6c:f2:05:4a:1c:df:
88:30:b5:de:4b:24:a8:c1:cc:e1:e2:2f:df:85:3e:
d6:7a:bd:54:80:7c:3a:a7:d6:72:b4:b9:64:46:4f:
10:76:01:0c:96:1b:f7:e8:6e:23:7f:da:02:fb:67:
07:b4:49:80:1e:65:a0:71:0b:5a:2e:99:11:a9:ee:
a6:cd:ac:10:83:c3:35:e4:1d:7c:de:cf:5d:bc:00:
db:50:09:b2:cd:b2:6c:dd:54:5c:84:bc:28:21:d5:
f3:14:7a:1e:83:2d:9d:7b:51:70:25:6d:89:40:11:
a9:5a:d8:0f:49:73:1a:06:2b:4c:ba:91:b7:5e:81:
fe:57:b6:64:21:91:f3:4b:2a:eb:a9:7d:d8:32:50:
f3:1a:12:65:cd:56:62:f3:21:d8:ee:5a:83:77:cc:
05:65:06:c9:65:2e:0b:80:a7:ba:30:d5:c4:0f:47:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:D1:3D:E0:C9:9F:F2:80:1A:71:DF:DA:4B:6F:AE:E4:BA:B2:A1
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:23:15:72:6f:05:2c:47:30:48:6b:d8:14:06:c7:7f:18:27:
18:65:1a:39:a5:19:2b:11:55:14:9b:28:1f:55:e9:3f:3c:db:
f0:85:42:7c:25:08:d1:b9:07:58:a5:3b:43:6e:bf:bc:7d:62:
c1:ea:57:4d:f3:22:63:78:0f:18:74:c7:b2:1e:4a:e2:f9:a3:
1a:98:0f:7a:aa:33:7e:3b:f1:d1:c7:0d:3d:ff:6e:88:b2:38:
7c:37:1f:8c:7c:00:bb:0e:ec:da:4d:3a:b7:74:a6:96:a9:52:
b7:0f:d6:35:c2:48:67:fb:a1:80:5a:30:e1:c6:c2:79:d4:c8:
2b:0b:3b:3a:e5:f9:31:bd:33:34:cd:71:f8:7b:f5:c2:ae:69:
d4:7f:90:ee:8d:91:10:52:57:1a:33:a5:1d:d9:06:ae:69:24:
e4:bf:55:22:a7:63:25:4b:e2:a5:f5:13:aa:56:3d:71:f8:dd:
0d:e5:aa:c7:2a:d8:dd:58:4e:51:0d:d4:c5:9a:d2:63:c9:3b:
d2:93:8a:ae:e6:00:b7:94:14:63:8a:16:45:7c:3e:5d:d7:49:
28:fd:0a:be:f0:20:cf:19:2a:7e:4e:ce:dd:19:a1:1f:e8:f2:
ea:e3:9c:68:cd:14:a0:b5:8f:f6:93:4f:52:02:a0:09:62:12:
3d:b4:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:52:33 2026 by rpki-client