Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: nKzkUaFY7n1eUHpl3z+jycxHKUYdlPAlo1XZCrBi9s8=
Subject key identifier: D1:97:0B:E1:BD:1D:AE:C2:69:7D:56:23:D4:02:B8:CE:17:B8:E6:FD
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 0B39EA5020140122DAA194D0EAEC07FC7997BB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03C8
Signing time: Tue 20 Oct 2026 18:06:36 +0000
Manifest this update: Tue 20 Oct 2026 18:01:36 +0000
Manifest next update: Wed 21 Oct 2026 21:22:36 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Frbt+DmI6H69m2YQFFcUfzay8yNYXFe7IGEro7ZCWhg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:39:ea:50:20:14:01:22:da:a1:94:d0:ea:ec:07:fc:79:97:bb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 20 18:01:36 2026 GMT
Not After : Oct 21 21:22:36 2026 GMT
Subject: CN=D1970BE1BD1DAEC2697D5623D402B8CE17B8E6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:b6:ff:7a:12:20:d1:80:66:80:a0:f0:38:
8f:1a:f1:e7:e3:e5:31:a8:98:aa:88:22:c1:7c:a8:
e7:f8:75:6e:cb:6f:b3:32:dc:74:50:a7:68:2d:7b:
e5:fa:93:d5:25:3e:75:ce:a1:ea:22:d2:1e:48:63:
dd:f2:ea:97:d0:12:ed:dd:fc:32:1f:40:75:22:76:
90:75:64:8a:77:7c:49:f8:03:ee:15:29:72:13:50:
c8:fb:2e:11:86:64:09:d4:fa:a4:3d:2d:9d:dd:86:
f8:27:cf:fd:e2:39:29:56:aa:99:92:38:eb:c4:50:
78:79:4f:e4:35:73:7a:67:e3:a4:03:bf:da:a8:67:
04:da:0c:ea:e9:08:b3:b8:cb:08:89:cb:09:57:17:
b9:01:d7:97:f9:41:1c:0c:79:9b:bb:44:1b:5c:fc:
48:dd:49:cf:0e:5b:16:9b:09:dc:6e:5c:e3:0c:5d:
28:e7:aa:d3:1f:07:0b:0a:4b:b9:35:50:99:f0:ce:
d5:5a:e1:b1:c1:40:32:8d:fe:62:88:a3:b7:4d:20:
b0:75:0a:20:b8:92:00:25:d3:29:8a:1e:d6:c7:df:
89:6e:2f:33:ae:1b:cd:70:7c:99:e9:3f:c1:e0:a8:
30:b5:e9:9a:2c:45:34:5d:c9:ce:3c:2c:f9:d8:88:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:0B:E1:BD:1D:AE:C2:69:7D:56:23:D4:02:B8:CE:17:B8:E6:FD
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:c1:0e:9d:20:c5:ee:e2:ac:95:b2:0e:03:90:0f:db:92:
54:15:9e:e0:7b:04:45:d7:d6:95:d0:4a:d6:f2:36:6a:44:1b:
f9:93:b2:ce:c1:4c:61:16:33:2e:cb:bf:94:dc:af:ab:8d:44:
03:4a:0e:00:e3:9e:bf:b3:99:94:89:7c:87:02:eb:70:ba:50:
b5:67:19:c9:67:e2:6b:95:24:3f:fe:ff:fd:18:ed:82:0f:17:
77:f2:52:53:d2:11:65:cc:b3:fc:c3:a1:d3:fe:c5:da:21:5e:
07:62:a3:d9:b7:14:84:cc:f4:b7:86:bf:6d:61:35:b6:f0:6a:
19:71:0a:0a:32:89:ac:4e:65:8f:95:79:1a:7f:5c:7f:80:45:
7f:1d:2e:7e:52:a6:2a:a8:70:de:94:f7:04:d5:22:3e:77:36:
aa:c3:76:e8:2e:13:d8:68:1b:dc:17:aa:f3:08:61:96:17:30:
bd:ab:a0:e6:f5:a6:28:af:e0:22:09:fc:d7:3a:37:56:e2:d0:
8f:1b:55:7e:88:7e:a9:b8:f2:55:a5:93:56:0f:ed:ba:ef:13:
d7:ac:36:82:70:b7:41:69:82:1b:19:17:ea:63:0e:15:c3:3b:
7a:d4:f8:3d:a1:b1:0f:65:f6:d2:85:3b:06:3d:79:e2:fa:e7:
35:5f:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:45:09 2026 by rpki-client