Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: fr8jy8XXVedJzL/UTzK2qAR7G74KRbdx7moZy5P81VM=
Subject key identifier: B0:37:25:21:C7:C4:BB:BA:D4:B3:94:CC:5A:AD:56:C0:E9:01:AF:AA
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5B01ACC3B031D8359670B055056619435F4E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03A7
Signing time: Fri 25 Sep 2026 12:59:33 +0000
Manifest this update: Fri 25 Sep 2026 12:54:33 +0000
Manifest next update: Sat 26 Sep 2026 14:29:33 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: GKmQK1sRkfK8GsEkP0jXri0qQhuTpqeVSNAnR6PIJ8A=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:01:ac:c3:b0:31:d8:35:96:70:b0:55:05:66:19:43:5f:4e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 25 12:54:33 2026 GMT
Not After : Sep 26 14:29:33 2026 GMT
Subject: CN=B0372521C7C4BBBAD4B394CC5AAD56C0E901AFAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:6c:89:e9:93:dc:e6:74:75:84:51:ee:ee:
db:e3:88:05:4c:46:e2:53:25:7a:08:d4:58:ad:da:
85:da:8f:85:7a:0d:e5:6c:d3:a8:cd:21:59:60:06:
22:79:06:0d:2f:3d:ef:08:aa:e3:c2:13:f7:8e:55:
53:be:f4:2f:65:14:aa:f7:86:52:a0:e0:7a:76:e9:
18:2f:4c:ae:c6:f7:ed:6a:ed:a2:46:1c:a0:7f:e5:
39:ee:c7:c7:d0:f8:cf:ef:78:54:ad:76:68:54:7e:
41:77:4e:d9:6d:4f:7c:87:7d:55:e5:2e:5d:ca:ca:
8c:33:1c:38:08:77:ae:6e:a9:29:37:6c:64:40:0c:
0c:75:37:aa:45:dd:19:37:2e:7d:2d:e7:c5:ef:eb:
d9:5e:91:7b:19:15:43:64:22:2f:93:26:42:6d:e6:
0d:58:3d:4a:e3:7e:d4:14:e3:fe:60:fe:dc:2f:dc:
71:7a:3e:9e:f2:a8:e2:60:c3:63:24:a4:49:42:46:
e9:58:f4:a9:4b:d1:c5:6b:d1:b8:a0:46:6a:79:a8:
ad:73:45:1c:fa:bd:dc:17:10:be:aa:3d:97:1f:ff:
de:13:eb:29:0c:10:af:be:15:67:53:68:93:0b:4f:
65:11:b8:0a:e2:e5:c7:db:6f:ba:b9:2a:2f:bf:81:
c1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:25:21:C7:C4:BB:BA:D4:B3:94:CC:5A:AD:56:C0:E9:01:AF:AA
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3d:cb:e8:d1:17:6b:8c:fe:de:0b:2a:e9:11:11:ff:bb:86:
c2:33:b8:b2:1f:63:50:9d:32:84:ef:fc:ee:ca:11:f1:83:30:
d9:af:8b:5d:e7:d6:da:b6:08:bb:39:78:51:54:cc:15:30:a7:
2a:70:20:96:9f:ef:dd:33:2e:6b:14:88:37:82:9c:99:94:10:
b3:d0:e4:ee:09:c6:81:f7:5e:a5:7f:c0:30:d9:8c:f1:10:61:
50:4c:e3:55:74:cf:c7:f6:ce:de:13:03:63:84:ff:66:28:8a:
f8:57:15:34:37:42:5a:8e:c7:20:fc:22:63:e1:3f:3d:a2:f0:
cf:29:d0:37:af:6b:e4:df:ee:81:74:28:f9:c0:de:81:f1:b9:
22:4e:93:00:4e:40:de:e7:68:ed:a3:ba:e7:93:76:52:07:11:
89:3e:4e:66:bf:f1:10:b1:18:c9:3c:78:2e:00:78:86:08:0a:
48:59:14:5d:72:ed:92:19:96:6c:07:84:94:7a:bb:7a:65:8e:
cf:1f:76:05:b2:4a:9b:e1:a8:b5:fc:ad:0c:39:7d:3b:7d:34:
1a:7d:71:ff:5a:1a:cf:c2:81:0c:4a:0e:ab:10:11:9d:b3:be:
cd:cb:ca:10:4f:cb:4c:70:c9:ce:bd:a3:18:ba:f6:2c:f5:b6:
74:22:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:43:42 2026 by rpki-client