Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: QBznM3mE+jXtfce5/Hpxw8rjeMN6Xc5P/XkKrEdTQls=
Subject key identifier: D6:A6:56:44:7D:5C:02:BD:6B:C8:85:3D:19:5F:05:75:54:E3:F0:8A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2CB306B188FBCD6D6B687CEB4741887F68144EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0382
Signing time: Fri 28 Aug 2026 12:56:56 +0000
Manifest this update: Fri 28 Aug 2026 12:51:56 +0000
Manifest next update: Sat 29 Aug 2026 15:15:56 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ZpvTmXhwM1xXbaSMpNbuKcDI/HsG3WflvZSod0jPczU=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 15:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b3:06:b1:88:fb:cd:6d:6b:68:7c:eb:47:41:88:7f:68:14:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 28 12:51:56 2026 GMT
Not After : Aug 29 15:15:56 2026 GMT
Subject: CN=D6A656447D5C02BD6BC8853D195F057554E3F08A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:ac:1e:e6:c9:fb:a3:2e:5c:50:5b:d0:65:
6e:8a:d2:b5:76:60:aa:3d:f5:9b:c1:4f:6d:74:92:
f7:d1:76:04:59:cf:d8:2f:1a:36:13:66:c9:6e:dc:
c6:fb:cd:50:6f:20:26:3f:49:c4:8f:18:3a:91:20:
a7:a8:f2:af:44:6e:b4:d1:59:fa:50:1a:89:21:3d:
14:0e:1b:b0:98:0e:55:d8:39:98:5e:09:73:92:4b:
2a:90:6c:58:87:be:bf:db:1c:dc:ab:c5:dd:28:a5:
92:bb:b9:eb:2c:bb:72:b4:97:33:38:8f:e5:7e:7c:
b9:70:96:7c:b8:47:3c:c0:bd:51:14:71:ad:88:05:
dc:4f:54:f0:77:6e:d6:2c:54:ca:af:3d:89:3d:59:
83:8f:db:8e:69:0c:c0:fb:8c:c0:af:9b:51:2f:0d:
2d:af:75:e6:7c:66:ea:59:a5:6c:5d:e8:6e:34:f5:
77:59:14:b7:a8:7d:de:e3:1e:4c:7a:5b:5d:99:37:
a2:ae:4e:0c:96:26:f0:9c:e0:c5:9a:90:7d:f2:95:
5d:93:1c:0c:1e:1d:39:c5:4e:08:90:a1:2f:89:f9:
4e:bb:13:36:64:2a:c4:a0:62:44:ad:ad:18:98:8b:
ec:a2:d0:c3:7d:ca:bc:e4:f8:a2:89:67:27:7b:c2:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A6:56:44:7D:5C:02:BD:6B:C8:85:3D:19:5F:05:75:54:E3:F0:8A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3d:0f:a0:b3:fd:32:86:4b:5e:b0:72:14:37:39:3d:c2:44:
6b:d5:82:5a:ed:9f:37:cb:22:9b:db:a8:ab:76:8a:13:f9:9c:
3e:ee:91:aa:08:c4:6f:d8:31:4f:5a:df:66:28:16:07:a2:4f:
a6:14:01:bd:21:d5:42:81:41:20:65:1e:0b:86:73:e2:4f:bc:
c6:53:bb:a3:da:5a:c4:de:73:83:30:57:cd:75:05:53:4d:ca:
d1:e9:33:ba:6e:1f:51:62:e4:91:b9:06:b2:a4:2d:7a:97:f6:
c0:76:28:3a:86:b3:f5:96:5f:58:c9:b9:8a:31:87:3c:41:70:
6f:74:02:1c:c4:e7:e5:01:86:f4:9f:68:ec:33:e3:52:7e:f0:
f5:0e:4e:a7:db:75:87:e4:ad:85:3f:33:c5:88:4d:4d:09:33:
b7:e7:36:b9:b8:5f:85:c9:3a:24:f1:f4:ae:4a:cf:06:1d:ce:
60:9b:40:3a:0a:a6:45:54:74:26:0b:d4:8a:eb:80:0a:81:e8:
a2:7f:36:67:67:93:e6:76:d6:6a:79:7b:15:77:01:54:31:e0:
40:d1:b4:00:84:c1:d1:4f:9a:64:42:82:56:d1:b9:2c:cf:99:
46:4a:c1:e5:42:af:e7:58:1f:77:95:fd:45:ef:a5:39:c7:b1:
66:ba:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:39:55 2026 by rpki-client