Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: qEGB3mDG+BJUbJ8ejfnbB2t0b0OwmK01jm4KfgtywKU=
Subject key identifier: B5:74:EA:C0:C6:21:CB:38:93:27:1B:68:5B:76:47:D5:D9:4B:27:81
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 1E2A281AEC5A035FC25C32DDBE8A8F1C937CDF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A6
Signing time: Tue 17 Mar 2026 22:47:39 +0000
Manifest this update: Tue 17 Mar 2026 22:42:39 +0000
Manifest next update: Wed 18 Mar 2026 23:26:39 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: TBX9USX41XKXf0tNXR/xvKbQV8lqEYcBD1WVOCiv+2o=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2a:28:1a:ec:5a:03:5f:c2:5c:32:dd:be:8a:8f:1c:93:7c:df:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 17 22:42:39 2026 GMT
Not After : Mar 18 23:26:39 2026 GMT
Subject: CN=B574EAC0C621CB3893271B685B7647D5D94B2781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:55:8d:98:48:7b:94:31:de:e2:d3:25:97:
7d:45:51:95:8f:cb:a3:f2:a7:83:16:a7:c7:4c:1e:
95:e9:2f:21:db:e4:e1:97:31:51:5e:aa:15:f1:b8:
36:16:ee:b4:d9:3f:9e:52:10:17:f3:61:58:e9:79:
5b:63:a9:c7:d0:a0:58:c0:89:33:70:48:83:c3:92:
79:84:2d:fc:17:34:b2:aa:ef:f7:fe:06:25:be:19:
de:f7:1b:73:b2:e4:55:84:fa:42:da:1f:51:74:27:
97:d8:b4:72:c0:e0:03:66:8d:48:8c:c6:65:07:39:
0b:69:6f:49:04:86:05:0f:62:48:f8:f0:d7:e4:66:
d3:1b:c3:37:21:e1:a1:1b:70:b9:f2:78:43:9e:b0:
d7:89:32:36:ae:08:5d:93:62:56:5e:c1:d8:06:0f:
cd:ee:e1:5a:9a:2c:bb:d1:dd:0b:44:90:41:da:10:
6c:5d:d8:99:1e:18:71:3c:d1:3c:45:d1:07:3e:03:
4e:e9:d4:3b:7c:81:0d:71:4a:cc:b2:a1:f0:57:37:
33:70:b9:d3:83:a2:74:50:59:e1:ff:6f:ec:0b:52:
71:a5:5a:ba:aa:20:a1:2d:7c:ce:40:65:aa:cf:02:
c3:3e:d7:7e:2c:af:87:fc:f9:15:f9:9d:c9:d1:17:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:EA:C0:C6:21:CB:38:93:27:1B:68:5B:76:47:D5:D9:4B:27:81
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:2e:45:ad:e2:24:25:8a:d2:0b:d9:54:9c:c6:db:3b:b1:
59:86:13:03:08:a2:69:cc:95:b3:6a:27:f5:e9:b3:db:b2:ca:
4e:54:81:db:56:48:c2:a0:75:d2:42:21:a1:0d:18:54:2e:04:
b5:9c:50:92:0b:f2:1f:f1:e8:93:2d:6b:6c:8c:f7:7f:92:34:
e2:cd:be:d0:ed:2c:5d:b8:3a:eb:55:c9:6b:b7:97:68:f1:89:
17:91:0c:ce:1c:a6:39:3a:4d:13:c1:48:7f:ed:21:6d:c6:ac:
c5:6f:19:13:26:5f:f9:ab:15:ec:c7:b9:e2:a7:f6:c3:69:50:
df:7d:8a:94:dc:0e:e7:0b:87:55:93:93:05:9c:83:2d:69:d6:
4c:f0:f3:1e:71:ba:27:b1:44:c0:1c:04:ea:eb:7b:ea:59:50:
4f:f8:a1:38:58:71:81:c6:e7:9f:81:42:0d:1b:b9:52:4b:28:
48:ea:af:09:3e:a1:7f:07:76:9d:f2:6c:f4:56:55:8f:81:58:
d6:6e:c1:ae:e9:1a:93:5d:82:dd:77:f0:a7:75:ec:04:40:b8:
97:67:4d:fd:23:95:da:87:d9:f2:88:0b:ab:74:6a:b5:48:65:
5d:b5:4a:83:c6:1e:49:29:df:75:a9:49:9f:6c:94:d9:ce:53:
bc:1c:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 03:01:09 2026 by rpki-client