Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: kUjnSHP1LK/nK7ldHBnTv88fRfUDY1bnf84GRoRykWw=
Subject key identifier: E7:20:66:FF:B3:51:BD:DB:03:12:F6:E9:E9:B3:02:D0:42:61:85:51
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 41962E453643244C4981841EC6CE883F8A297559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0335
Signing time: Thu 02 Jul 2026 02:30:11 +0000
Manifest this update: Thu 02 Jul 2026 02:25:11 +0000
Manifest next update: Fri 03 Jul 2026 05:21:11 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: /BSSPMQEPxyqiFbY9QRvHRA8cTihfK3VzHvjJHgztUU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 05:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:96:2e:45:36:43:24:4c:49:81:84:1e:c6:ce:88:3f:8a:29:75:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 2 02:25:11 2026 GMT
Not After : Jul 3 05:21:11 2026 GMT
Subject: CN=E72066FFB351BDDB0312F6E9E9B302D042618551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:e9:69:a9:05:9c:99:cf:78:84:33:8a:53:
23:05:c0:88:95:9f:92:5a:d3:43:9d:49:34:8d:a9:
74:7d:32:46:e9:bb:e6:2a:a3:aa:c6:12:87:79:e5:
be:33:00:a0:7e:26:65:15:4e:61:b0:2b:f4:99:ee:
29:6f:cc:09:da:a3:fa:91:3d:b3:12:38:96:f1:49:
b0:fb:a3:a2:c2:36:7a:43:23:b1:bf:ac:18:d2:21:
ac:03:57:1f:a8:d0:83:19:90:67:52:f2:07:7e:c1:
2d:9c:be:69:67:f9:f7:2c:89:c9:f1:ae:db:ec:ee:
ea:c9:75:7d:80:b2:1f:85:21:e3:1d:0b:e1:67:c6:
fc:16:f0:b6:a6:de:70:6f:e1:4c:05:2b:be:9b:68:
53:b8:7b:09:53:9d:cb:a9:0e:70:69:83:3d:e5:d7:
cd:ca:c7:32:75:fd:70:67:92:64:17:8a:0d:0e:3e:
b7:db:e0:74:48:ab:00:43:45:3d:85:bb:21:81:62:
37:2a:a2:00:dc:e7:3d:e2:7f:16:f3:ba:b9:96:cb:
21:8a:45:a7:6c:96:af:fa:04:54:ff:83:da:2f:15:
a2:7f:0d:7e:79:a4:83:36:d3:41:53:5e:6f:0c:d1:
6b:b2:b7:3d:e1:38:6f:d2:ef:53:4f:22:48:4b:7a:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:66:FF:B3:51:BD:DB:03:12:F6:E9:E9:B3:02:D0:42:61:85:51
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:c3:e6:db:31:ad:87:f7:b5:29:29:7d:04:ef:33:ce:55:
11:81:a1:15:c0:82:4a:e2:6e:ea:86:78:6c:b3:f5:a9:30:55:
72:6c:c1:92:e7:64:fc:ed:a6:bf:e8:db:98:9c:fb:d4:3c:f0:
8d:d2:c0:76:d9:7f:92:23:6a:7d:12:de:99:c6:5c:d7:e7:7a:
0a:1c:6d:31:57:2e:1e:5f:1a:68:4e:5d:af:f4:8f:ca:c8:69:
cc:71:af:2e:f7:3c:55:49:45:51:c7:a8:be:91:4b:e8:54:d6:
25:78:6f:62:f6:52:e3:d7:23:01:8d:e7:b9:b1:f1:ec:e8:2a:
65:5c:1a:94:e2:2e:b1:dd:5d:57:b1:a0:67:6e:14:c3:e9:d8:
4c:9a:18:36:71:18:0e:5a:61:21:05:23:6d:26:e0:6d:d2:3b:
8c:69:9a:2b:a5:ca:2f:6f:5b:4d:6f:df:bb:bb:0f:01:56:71:
7c:6a:45:5c:c9:12:86:b4:0a:1f:ba:b3:2c:9a:9a:48:41:3c:
b4:ba:fb:11:4c:67:e2:d5:5d:36:8f:e2:2f:7a:dc:01:25:01:
7e:59:45:e4:bf:5f:cc:48:3d:a2:15:40:02:b5:fb:b1:89:2e:
be:a1:0d:62:25:e4:6e:81:fb:e6:fe:99:51:1d:0b:59:0a:11:
c8:36:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 12:45:01 2026 by rpki-client