Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: ebCmW9iaWhXzq1b6FlwLxMRuS2eRiCdI2ECRmf05YZE=
Subject key identifier: AA:0F:ED:13:4D:CE:79:EC:39:45:01:A6:30:46:BD:AC:5E:4E:67:A8
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 40EC935B74A0A15B051BFC4585412E14151CCA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0317
Signing time: Tue 09 Jun 2026 18:38:54 +0000
Manifest this update: Tue 09 Jun 2026 18:33:54 +0000
Manifest next update: Wed 10 Jun 2026 22:24:54 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: foxVB0biAxIR2bcZn87n7coi1K6C/rulSRNFltFYqBg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 22:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ec:93:5b:74:a0:a1:5b:05:1b:fc:45:85:41:2e:14:15:1c:ca:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 9 18:33:54 2026 GMT
Not After : Jun 10 22:24:54 2026 GMT
Subject: CN=AA0FED134DCE79EC394501A63046BDAC5E4E67A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:08:8d:17:1a:66:e6:13:7b:8d:b3:07:df:
ab:b5:93:eb:e4:1f:7b:e6:12:cc:87:69:2c:53:8a:
5d:19:d2:aa:ea:ba:fe:08:74:0d:30:ba:e8:30:5a:
d0:1b:42:2e:42:21:0a:05:14:cf:26:29:a3:9d:11:
f5:b4:77:4a:58:93:9a:c4:08:50:08:63:2b:ec:23:
dd:87:9d:04:2a:79:cb:7e:de:78:58:10:7d:b1:df:
ac:d8:92:02:21:ed:bd:b3:33:64:d6:a2:60:8b:09:
77:56:b8:91:c9:52:7b:a9:4c:e7:01:74:52:2f:e9:
e6:96:6e:76:17:5a:f3:9c:83:9a:9c:31:0d:2e:7e:
02:91:aa:16:eb:5b:9a:05:1a:cf:7c:82:f4:2b:f5:
2b:f9:6a:5b:cb:a3:55:c3:80:06:29:d1:c0:d3:3e:
04:11:6e:2b:48:2f:f2:97:f1:de:ee:43:e8:23:42:
8c:1c:23:79:2d:00:e6:c5:ca:01:e1:6c:a0:72:a8:
44:24:81:1c:01:ac:d8:e7:78:41:de:b0:bf:a8:7b:
7e:ef:71:34:a8:e7:ee:e1:28:a1:34:22:a9:05:7d:
be:89:04:16:e4:e4:d0:a8:f8:78:4e:96:19:d5:9c:
3a:ed:67:b6:b2:14:52:42:8b:4c:a7:90:ed:94:40:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:ED:13:4D:CE:79:EC:39:45:01:A6:30:46:BD:AC:5E:4E:67:A8
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8e:ca:2e:f4:19:5c:19:db:e0:e0:db:b3:42:5e:ea:7e:78:
93:55:1d:8a:5c:52:4b:0c:89:19:9e:c3:74:3e:75:a6:81:0e:
58:34:89:3f:e3:7d:a8:5b:db:36:21:81:25:34:91:56:7c:0f:
e6:6e:0e:b5:e7:b1:a4:12:9e:55:05:8f:29:95:12:eb:4d:30:
55:ff:82:0b:01:d2:34:78:73:8f:1f:4b:20:80:6f:93:22:e3:
d9:76:16:7f:e9:f5:7a:c1:e7:13:5b:11:fa:63:4e:45:ee:91:
92:bb:d1:3c:77:84:a6:64:41:f6:f9:a9:53:97:db:df:99:01:
5f:f8:32:49:fb:48:d4:8a:68:1f:48:da:c9:fa:07:f5:26:ff:
78:32:f2:41:c2:e0:5e:8e:9c:71:30:50:5d:99:74:28:63:cf:
46:b6:95:4d:a3:19:79:a6:b7:fd:92:4c:03:b9:5e:05:c0:df:
a8:32:c5:ef:1a:b4:9b:1e:66:b6:d0:a7:c6:3d:36:41:15:19:
15:77:db:14:bd:aa:32:d8:7c:3c:3f:e4:26:f5:39:dd:45:c3:
3c:ac:29:66:7f:9c:0c:ab:00:33:84:d9:fa:90:49:bc:41:f6:
77:34:47:0b:9e:8e:e0:d1:3d:1b:34:f1:1c:a6:be:e2:da:e4:
e2:f4:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 11:50:12 2026 by rpki-client