Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: Bsnh7XBx3VU2RuVvoM6uonvjl2+cdSvtFrxt/C6tVh8=
Subject key identifier: 53:5A:7D:58:C4:A3:9B:04:63:49:94:EA:83:22:7A:60:DA:3C:4C:E6
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 355DB2CFC121A25136A62A70392EA94BA38DB2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02E2
Signing time: Fri 01 May 2026 15:26:37 +0000
Manifest this update: Fri 01 May 2026 15:21:37 +0000
Manifest next update: Sat 02 May 2026 16:22:37 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: m2QD9dAcpAa083r9RlQgz1CUA8N5Otib0DZHbE295ZI=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 16:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5d:b2:cf:c1:21:a2:51:36:a6:2a:70:39:2e:a9:4b:a3:8d:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 1 15:21:37 2026 GMT
Not After : May 2 16:22:37 2026 GMT
Subject: CN=535A7D58C4A39B04634994EA83227A60DA3C4CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:15:e9:f8:43:0a:a9:c2:1b:39:ae:ea:1b:
a7:96:c3:eb:4a:70:39:e2:f4:4e:9b:1f:fc:2c:6f:
6e:16:1e:a0:c4:56:3c:db:60:05:3c:ff:f9:2b:32:
6b:17:36:7a:83:e7:f4:11:4d:86:b9:48:25:34:86:
9a:e7:99:9a:8e:e2:78:69:bc:b9:0a:db:94:17:a2:
b0:92:c6:92:71:1c:79:d8:84:ab:00:0b:a1:b9:89:
9d:24:db:7a:bc:d0:16:fa:1a:da:d8:7d:97:d7:5a:
15:df:00:e9:2c:9a:79:dc:cd:8c:d6:8f:c4:a5:c8:
23:b8:41:19:8a:ab:91:ad:3c:87:89:32:58:1c:07:
89:83:dd:ed:18:06:c5:d2:c0:89:07:36:f7:45:74:
88:6e:2d:3d:85:39:35:67:83:b0:02:aa:12:c3:3f:
f3:ed:d4:47:dc:60:25:5f:c2:15:d2:97:da:45:35:
a3:37:80:8d:ed:67:3b:02:34:5a:79:d1:07:0b:7a:
8e:25:21:39:f0:0d:be:d4:38:01:ac:d7:dc:04:31:
94:68:81:f7:09:47:0b:41:bf:e5:05:b2:2b:be:28:
7d:e8:cd:77:e0:9c:69:b5:71:81:10:10:6a:a5:5d:
2b:08:37:f7:4a:b3:d2:e7:ce:11:45:5a:72:f1:77:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5A:7D:58:C4:A3:9B:04:63:49:94:EA:83:22:7A:60:DA:3C:4C:E6
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4d:72:1d:95:c0:f8:0d:17:b0:8f:e2:8a:6b:f6:a9:2a:60:
14:48:63:0d:50:4b:0f:2c:21:94:96:21:a6:48:3c:a6:1c:5f:
3c:f9:35:e4:11:23:62:25:ee:05:b0:49:97:fd:e5:64:23:7a:
20:4d:3e:07:b4:df:37:22:72:fc:11:76:4a:05:83:fe:fd:af:
df:d8:1b:1c:6c:e7:60:01:d3:bd:d4:33:07:4a:e5:0c:90:a2:
20:85:6b:86:71:12:18:8f:93:33:70:2c:98:0a:7a:71:77:66:
54:9d:72:7d:18:d3:b4:0b:0f:00:0c:92:11:24:ea:8e:79:03:
ab:66:b2:79:ed:0e:bf:93:39:07:1d:80:91:fc:f3:9f:c1:09:
a2:e0:c6:de:f7:fb:f9:71:5b:69:d3:53:4b:ea:26:94:94:5a:
20:b7:ec:27:f7:37:17:96:0f:88:64:5b:61:fe:5f:65:7a:07:
cc:37:1d:15:15:ed:44:d5:09:58:91:b9:c5:11:b4:e4:b9:02:
77:1c:44:0e:5f:ff:41:d1:9f:28:1d:8a:db:68:c5:69:0b:f5:
91:ff:d1:55:98:86:ca:f7:53:b9:d0:21:72:96:0f:2b:0a:b5:
52:e3:91:2b:6f:7f:53:18:01:f9:ae:01:88:d3:7b:71:2a:f2:
12:f3:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 06:20:17 2026 by rpki-client