Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: Pxk8L6YWx08bJBqppCnHuib4f9o5xtXz2F8tv6LutQ8=
Subject key identifier: E9:BC:9F:22:57:38:96:A0:64:13:7D:4F:D8:07:74:88:B6:6D:01:69
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5B9F600CFF5F49A5F4C725C77F42F2BFB7F22744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 030C
Signing time: Mon 01 Jun 2026 15:53:25 +0000
Manifest this update: Mon 01 Jun 2026 15:48:25 +0000
Manifest next update: Tue 02 Jun 2026 17:36:25 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: St1911XuNGbudjJCj194sF1zObdARqoGWq20MjlBkTg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9f:60:0c:ff:5f:49:a5:f4:c7:25:c7:7f:42:f2:bf:b7:f2:27:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 1 15:48:25 2026 GMT
Not After : Jun 2 17:36:25 2026 GMT
Subject: CN=E9BC9F22573896A064137D4FD8077488B66D0169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:b3:ac:d0:f8:20:67:ed:ca:33:d4:18:7c:
fa:1c:7d:8e:db:b3:07:d9:ca:07:e1:6f:be:b1:4f:
d1:ba:f9:f9:ed:7d:07:9f:dc:e7:07:a2:2e:49:76:
1d:e5:0d:51:f9:96:a1:21:b9:13:29:dc:20:d8:c0:
2c:82:08:09:0c:30:74:ab:47:4e:cc:d1:96:c1:7d:
1f:fb:d5:68:ec:ef:36:37:8e:9f:f1:f0:a4:09:c9:
9b:7c:f6:c8:49:00:57:09:a8:a4:36:f2:68:4d:a4:
5e:7c:cf:58:bf:cc:f3:53:e7:df:88:e4:04:42:2f:
c7:63:bf:1c:6a:9d:b8:36:dc:e9:0f:5c:13:e5:19:
ef:3f:f0:b0:de:fe:48:ed:6f:6b:1c:01:01:81:56:
65:a1:63:61:3e:0e:df:e4:1c:74:dd:26:d4:e0:37:
4a:9b:cb:0b:0d:78:31:1c:ef:ac:9c:6d:89:95:b6:
01:aa:5e:0b:59:1f:d1:bc:f8:50:97:6d:88:a6:bd:
5c:b2:1a:6a:e1:0d:7d:de:c6:57:ff:72:f8:48:24:
9e:1e:41:70:d3:d1:43:83:b9:47:48:c0:45:dc:78:
48:44:ab:82:6c:66:be:23:12:ad:10:a0:cd:93:45:
f7:7c:fb:cb:86:b1:40:e6:9a:e9:09:d3:e5:2d:58:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:9F:22:57:38:96:A0:64:13:7D:4F:D8:07:74:88:B6:6D:01:69
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1b:2a:d7:e2:13:e5:0c:1f:9e:ee:08:e5:95:d2:3d:95:36:
a7:cf:c5:bb:a0:ce:cc:12:3e:98:54:d6:8b:0e:ff:67:6a:a5:
a4:47:b7:b4:f6:8f:2d:8f:c7:cc:e6:96:85:34:96:fb:34:f3:
01:7c:1a:2a:1e:4b:f8:db:dd:5a:05:c0:e8:4e:63:3b:98:e5:
4a:28:e6:9a:43:86:45:d9:a8:22:ab:cb:d7:c4:64:e3:bd:69:
17:74:a7:f8:d6:14:8f:2f:9a:1a:3b:96:64:17:1d:3e:30:02:
8f:28:91:3f:6d:62:56:bb:14:42:ac:0a:cc:55:ba:4f:6e:87:
46:b3:35:a6:e3:6a:ab:6f:f4:28:c0:e5:45:8c:fa:ca:eb:4c:
e2:ef:7d:10:a6:1f:7e:e6:7f:45:3a:8b:22:ab:11:11:35:3e:
14:06:7f:05:0f:c8:7a:12:e4:d2:94:27:58:8f:21:a6:e8:e6:
4c:5c:5d:86:51:10:e7:8c:95:4a:10:4e:f9:5f:dd:e1:d3:c8:
9d:9b:bc:b8:73:20:d3:6f:3c:08:15:d1:e0:c0:86:47:a6:a7:
74:ef:38:1e:7f:38:26:c7:29:1d:00:3f:8c:57:ec:05:f4:76:
6b:3c:eb:c4:e0:92:3d:ae:cb:c6:e0:35:da:0d:bd:c1:57:49:
c6:0d:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 20:52:31 2026 by rpki-client