Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: BU5daxeis/uWUZ4MNALU9PW9k3u5EftkkvWI+WjbjG4=
Subject key identifier: C5:16:CF:3A:B5:35:58:E2:75:19:24:0E:83:2A:64:B3:45:A9:09:1A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 09D9012F6B203089E401736FC0DEE1E80FCC64E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0351
Signing time: Thu 23 Jul 2026 05:49:53 +0000
Manifest this update: Thu 23 Jul 2026 05:44:53 +0000
Manifest next update: Fri 24 Jul 2026 09:16:53 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ogsnIxhHUzXinczn5pGSZK0GQ1Prov4lW6SxghwLxdY=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d9:01:2f:6b:20:30:89:e4:01:73:6f:c0:de:e1:e8:0f:cc:64:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 23 05:44:53 2026 GMT
Not After : Jul 24 09:16:53 2026 GMT
Subject: CN=C516CF3AB53558E27519240E832A64B345A9091A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:3a:b4:15:65:b4:07:15:25:5b:d9:ef:09:
f2:f4:3a:59:30:b6:d3:2e:77:ac:e8:70:6e:d2:17:
a1:49:1d:49:13:08:03:c1:32:2e:ed:51:15:c0:2c:
86:16:03:97:19:c5:8f:07:f9:6f:57:d1:ec:92:37:
87:ee:e9:f0:96:a1:a9:32:85:63:09:21:9b:dc:a2:
22:86:05:0e:6a:53:1f:87:8a:ca:2b:99:49:57:ea:
c8:ed:42:0d:21:8e:2c:64:0c:4c:42:f5:72:9c:96:
76:ba:b9:bf:4a:91:27:ff:0a:0f:ad:fe:99:53:a7:
68:2d:77:97:17:5f:2b:09:d0:0c:18:8e:76:64:04:
3d:2e:e9:fd:2b:73:27:9a:93:31:5e:86:24:37:e7:
ef:50:53:d6:f2:d7:55:54:c1:5a:72:0e:07:93:df:
9c:44:29:eb:9d:40:0f:50:19:2e:39:2c:39:c2:b0:
23:30:2b:6a:c8:db:22:b3:6d:bc:f9:b9:e7:35:b4:
27:43:d0:32:26:cb:a9:0b:d8:74:54:41:67:8b:f9:
7d:c2:7d:26:f8:3f:2f:e9:b3:3b:04:52:93:f1:23:
5a:93:6c:92:9d:a9:e7:97:02:21:c7:b0:12:85:00:
c1:b6:35:5a:e5:ed:2b:66:84:69:d5:98:4e:8a:99:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:CF:3A:B5:35:58:E2:75:19:24:0E:83:2A:64:B3:45:A9:09:1A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:8f:14:3b:14:38:1a:3e:4b:2b:f0:2d:d8:90:36:c8:0f:
db:63:90:7d:27:ab:3d:c1:06:41:ee:e4:f9:c1:76:a6:75:79:
a2:66:ed:9b:1e:22:20:24:de:3b:1b:ee:dc:4e:0b:b1:cc:77:
5e:64:82:7f:11:bd:a0:08:44:48:f8:60:a6:1c:e0:86:22:10:
88:c3:6e:d3:df:1c:41:5a:9c:18:d8:a9:f3:08:67:6e:91:4d:
f3:10:f5:98:eb:d0:a1:a9:45:d5:32:b6:8b:a6:5b:25:8b:70:
14:c3:dc:2b:b5:68:37:20:95:c2:42:ac:58:fa:8a:ed:15:9f:
3b:0e:5d:16:d1:37:29:ef:64:58:e0:39:39:63:f2:61:46:eb:
8f:09:b7:dc:cd:c2:8a:66:f8:f3:d8:fe:32:4a:b7:f8:b9:56:
18:ad:9e:91:ab:ed:f5:5e:32:93:ef:24:76:ef:73:a9:7b:22:
ac:82:e6:bd:b0:00:2e:9b:ec:86:20:9d:e3:41:83:30:05:ba:
03:1c:38:bc:fb:6f:a8:6a:d8:b8:01:ad:6d:18:29:9b:ff:ce:
73:cf:6f:f4:8e:6d:33:8b:af:be:43:b7:24:cb:9a:81:0f:ee:
58:ab:c0:2b:d3:7e:54:5e:e4:4f:a0:5b:c1:08:90:a6:88:c1:
a8:e3:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 16:46:52 2026 by rpki-client