Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: Jhayh/vfADC4tU/3MGJaAX9/w8lx534YJ8k+xV0NNW0=
Subject key identifier: 00:10:AA:5C:BA:CF:1B:5D:89:D4:92:FD:DE:91:1C:D1:62:89:7A:20
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 280D4762582FF64BF76A03EDFC9070EBCE5F2371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02EF
Signing time: Mon 11 May 2026 07:02:50 +0000
Manifest this update: Mon 11 May 2026 06:57:50 +0000
Manifest next update: Tue 12 May 2026 07:55:50 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: apAnYUSaj7vr8COn6PktAdu9WUy3FXw7NsoO3Nv+jZE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:0d:47:62:58:2f:f6:4b:f7:6a:03:ed:fc:90:70:eb:ce:5f:23:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 11 06:57:50 2026 GMT
Not After : May 12 07:55:50 2026 GMT
Subject: CN=0010AA5CBACF1B5D89D492FDDE911CD162897A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:4e:cd:b1:30:94:fe:18:a4:c8:21:6c:19:
26:38:52:6c:3b:a1:e8:13:9e:b9:08:ce:aa:2d:ed:
ba:45:55:d3:a6:c6:0f:ff:01:3a:35:96:04:b1:00:
1c:0c:3a:e6:49:e5:54:29:15:d0:01:b4:d5:06:7d:
1d:5e:7d:bd:a0:d1:40:28:57:c2:07:81:db:13:77:
23:ad:96:5c:2d:85:6a:55:07:a2:3e:3f:a1:2f:aa:
5f:29:55:62:b5:be:0d:0a:c8:7c:30:3b:10:f2:41:
79:56:9a:a7:f0:25:ab:57:ec:20:cf:fd:58:13:ef:
b9:93:65:3c:4a:26:cf:77:24:05:e7:29:35:ce:7d:
e0:cc:5f:dc:28:4f:9b:57:01:1b:3f:e5:74:ac:21:
f7:53:00:f8:cc:6d:bb:59:d1:ec:f0:cf:e5:18:fe:
82:90:29:cb:f8:14:88:a9:fa:95:f8:e7:f1:8c:6c:
f7:7b:d8:c7:6f:74:f6:d1:1b:22:08:25:19:8f:f4:
3f:15:a3:09:c9:39:9c:9c:93:c0:44:62:cd:93:ad:
1c:ff:d4:54:7b:a5:04:d9:ee:1b:99:4e:cc:79:d3:
95:0b:51:94:2d:70:00:0e:bd:6c:6b:c6:90:8f:88:
2b:ba:47:80:f3:84:5c:ac:3c:99:63:07:4c:79:73:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:AA:5C:BA:CF:1B:5D:89:D4:92:FD:DE:91:1C:D1:62:89:7A:20
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c3:b1:e4:53:de:6f:a0:3f:02:cf:2e:4e:f2:95:91:a8:31:
27:d5:35:48:5b:af:d6:fe:26:a5:7e:b6:07:b0:28:b6:1b:22:
15:d9:90:69:87:1a:3b:69:90:87:ad:78:da:8b:58:09:77:b2:
10:fa:00:0a:c8:6a:4c:9a:37:55:9d:68:b2:56:91:52:c1:d0:
a4:df:6c:7d:24:26:b6:eb:b4:a7:47:40:14:b8:44:0a:a8:15:
d5:73:4e:c1:c0:51:23:3e:4f:12:b0:ae:11:7e:a4:5c:41:b2:
51:32:00:24:6b:98:0a:6f:f3:aa:18:bc:3a:8c:c3:14:63:f1:
e8:39:87:fc:4f:17:bc:a0:a9:cd:e1:e0:cb:30:ca:6b:71:b7:
89:0c:fd:08:7a:a9:9c:b6:75:f8:f1:fe:17:96:ed:3d:b6:5e:
8a:e3:8d:df:bd:03:26:4e:11:88:de:e5:21:b4:84:a7:f5:37:
08:00:27:32:02:00:c0:75:3c:d5:6f:74:ef:03:b3:f0:81:82:
92:9b:0a:d4:4f:ac:39:aa:92:3f:34:a6:65:00:05:c6:9a:2a:
37:41:f8:48:a2:3e:07:2a:d3:fd:1f:08:07:26:3a:7b:ce:e7:
8c:60:3a:d5:e3:51:fe:58:6d:6e:d3:b2:9f:ef:ea:f0:c9:e2:
30:c2:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 10:48:33 2026 by rpki-client