Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: ab4D9yYfkwS0CW4A3OoVBl7F8lVxba5Vu4iVo0zELHw=
Subject key identifier: 36:F1:13:2F:AA:AC:93:4B:E2:37:37:69:23:C1:51:95:A1:93:45:A7
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5C2B624EA813E0E047C70B842434F000398D6390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0304
Signing time: Wed 27 May 2026 19:23:16 +0000
Manifest this update: Wed 27 May 2026 19:18:16 +0000
Manifest next update: Thu 28 May 2026 20:05:16 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: +EFMZWIaaVMp8MbeX9o0XgZef+ORelJdt72m1rQ/Zhw=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 20:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:2b:62:4e:a8:13:e0:e0:47:c7:0b:84:24:34:f0:00:39:8d:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 27 19:18:16 2026 GMT
Not After : May 28 20:05:16 2026 GMT
Subject: CN=36F1132FAAAC934BE237376923C15195A19345A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:55:48:f5:03:c1:e7:79:3d:9c:13:81:08:
6c:b3:e2:de:11:09:19:36:26:d2:5f:3c:c0:bd:ac:
33:02:cd:cb:d2:1d:9e:da:56:25:2c:cd:f9:d8:8f:
9b:93:5d:71:70:e2:12:fc:c8:21:cf:b9:ed:81:a2:
b1:49:0e:35:92:8e:0b:b2:d0:6e:00:bd:1d:30:38:
b2:d4:d8:01:4e:a5:93:c9:69:00:ad:7d:28:e8:a5:
2c:f1:81:2c:73:bf:55:2a:42:83:ad:ba:49:89:33:
3f:5d:3e:ad:69:15:1d:f4:49:16:d4:be:cb:e2:b9:
fa:1c:a1:39:3c:8f:a8:e2:89:b5:3b:62:b3:45:8c:
18:5e:2f:29:b2:24:10:38:99:f4:f4:2e:f7:76:f7:
a9:c5:8b:80:3c:d5:82:3c:68:96:61:59:b8:00:80:
1a:15:c0:c0:c3:aa:09:42:d2:ef:91:42:bd:08:93:
8e:ea:9a:3a:38:24:02:64:1e:47:51:d6:4b:c6:1d:
46:53:23:15:dc:3e:59:8d:cc:f7:4f:65:1e:8a:72:
25:33:09:e8:47:54:15:22:de:42:cd:ad:b5:5b:f1:
9f:09:5c:d4:63:ae:b8:a4:1c:2f:52:b2:37:25:cf:
ca:34:a2:4e:0c:ba:86:9d:ae:22:23:a8:50:48:83:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F1:13:2F:AA:AC:93:4B:E2:37:37:69:23:C1:51:95:A1:93:45:A7
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:03:57:64:10:d0:9a:22:c1:d9:1b:a7:07:b1:e5:2e:75:e6:
28:7a:df:6a:2c:ab:32:f5:0d:d2:1a:92:ff:09:c6:f9:6a:7b:
2e:ca:c2:50:6b:1e:5e:a4:b5:68:c3:fb:69:17:22:7c:04:41:
40:a6:2c:ed:14:cd:6b:8d:55:d8:28:85:79:32:d8:ab:e4:49:
3f:7e:8e:0b:9f:32:a1:37:a6:4b:ae:7c:6d:a5:cd:45:0b:39:
5d:ca:b0:74:74:9c:71:ab:ac:dd:e7:7b:41:82:8c:37:d3:eb:
bd:7e:45:3b:ec:8c:2c:f0:07:05:f0:a0:47:ce:e5:d5:f9:d3:
9a:e9:00:68:1c:09:d3:62:58:17:11:ed:a5:40:58:d0:45:2a:
83:54:66:b6:d0:24:98:a3:31:83:0e:d9:fc:9b:10:12:e7:68:
f8:32:98:34:a9:94:6b:90:5f:c2:48:88:1b:19:ad:10:d9:2b:
e2:c4:41:73:d2:dd:c3:80:41:78:d8:ed:f2:b3:9b:cc:13:78:
da:2b:11:4c:d4:a3:64:c8:0f:0d:e6:9d:6e:d3:4c:4c:98:f3:
45:e3:4e:56:2d:45:d6:b7:6e:1e:35:c6:66:21:3e:2b:47:72:
46:b1:5a:54:07:aa:ad:05:1e:9f:7c:61:32:b3:ae:54:14:8a:
bf:f9:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 07:20:49 2026 by rpki-client