Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 8KLS9wAYJKaVCQ3GLkZgHsIJIxn3IXw/s9JNt/ABz34=
Subject key identifier: C1:BD:AA:E0:15:57:F9:26:A3:CD:FD:6C:53:DE:CB:F9:88:46:44:19
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 06C3E1616C351091BE9F15E5DE3B233D4E5379E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02B6
Signing time: Sun 29 Mar 2026 20:04:16 +0000
Manifest this update: Sun 29 Mar 2026 19:59:16 +0000
Manifest next update: Mon 30 Mar 2026 20:46:16 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: DK8kf2jT0YrrpzGPejNuvVAmr/yl2kRXWM3eq4pDHGQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c3:e1:61:6c:35:10:91:be:9f:15:e5:de:3b:23:3d:4e:53:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 29 19:59:16 2026 GMT
Not After : Mar 30 20:46:16 2026 GMT
Subject: CN=C1BDAAE01557F926A3CDFD6C53DECBF988464419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:5b:3f:79:34:b8:3b:f9:41:3c:83:96:a6:
71:30:dc:9c:0a:bf:8f:ab:92:cd:4f:7a:d9:0e:dc:
99:99:b4:7d:4d:11:a2:5f:d9:85:a6:b5:2e:99:49:
ee:17:08:14:2a:83:af:1d:27:c8:83:41:76:18:99:
00:66:3b:9a:4b:dc:37:47:48:86:b8:b3:3e:f5:4e:
d5:2f:f2:89:7d:c4:a9:4b:57:ff:b4:5d:71:b1:9b:
d3:45:72:8f:2e:3e:0f:8e:a2:06:d1:fe:9b:c8:25:
74:e4:61:2d:3b:d8:f9:a1:eb:db:47:21:a7:be:55:
a8:32:40:a7:d2:e2:85:42:bb:07:82:7c:81:60:96:
d2:3f:7a:34:23:8f:5d:83:e6:0f:e4:42:f7:95:2e:
4d:26:b7:8f:53:c4:a5:76:ba:85:97:45:ea:9b:f7:
1a:64:23:23:2d:16:4d:53:60:e7:43:34:c4:bd:30:
16:90:a0:5d:03:71:1d:a6:10:21:02:bb:89:60:13:
ad:19:ca:ce:fb:8b:14:e6:de:1e:4f:30:6a:d3:e4:
a3:a4:1b:e7:68:3d:a3:83:7b:fc:a7:8b:9a:2a:d1:
ff:07:ce:07:94:e6:55:4f:30:bb:ed:7d:63:3f:2d:
26:e3:95:c9:7d:15:7c:e6:85:2a:b6:a1:59:13:09:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:AA:E0:15:57:F9:26:A3:CD:FD:6C:53:DE:CB:F9:88:46:44:19
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:af:e9:a7:b4:cc:40:83:14:dd:6b:86:e3:d3:13:ea:80:
9a:b6:74:e4:b4:9a:2d:b6:24:3a:2c:4b:c8:a9:d5:a1:e3:69:
53:9d:e6:c3:1a:51:a8:c6:c5:7a:95:e3:00:85:fe:22:3b:4d:
c0:9c:6a:db:9d:56:b2:a3:a8:34:d9:f1:5c:7a:66:b2:8b:69:
42:b2:d9:2e:fe:53:a9:ad:db:a3:2a:34:8a:89:69:e0:e9:2e:
33:6c:b3:50:c7:53:da:20:c3:a5:e7:e2:63:77:30:ac:bb:ab:
a0:77:a1:05:f4:15:5c:ca:94:31:15:56:51:b5:7c:f2:e9:83:
dc:54:98:fa:e2:fa:d9:f9:49:b7:9e:0d:36:de:cf:0a:e2:ad:
83:a9:65:ec:85:62:ac:cf:09:00:39:18:64:a1:eb:4f:e2:f6:
84:a5:f7:b1:db:f4:be:b6:01:00:52:6e:97:fd:0a:75:55:98:
f1:e1:7f:05:5a:38:87:5b:32:fc:b1:ec:4e:15:b7:cf:98:af:
43:1f:4d:57:94:ae:cd:50:af:53:30:7a:7f:b4:91:aa:52:bd:
42:83:50:48:ae:98:c8:ac:2a:69:c3:41:e3:90:37:22:7f:48:
f0:29:70:cb:6f:b1:4a:02:1d:51:05:45:13:e9:ce:d4:14:c5:
43:12:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:44:26 2026 by rpki-client