Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: alrGpSC52Phc8ObLWApp5iu2my3rjTwP2Kzz+/MNI/g=
Subject key identifier: D1:BA:7F:3A:F1:E7:8E:34:A2:F9:08:35:9F:DF:CA:DD:EE:F0:D3:20
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 536B8FF23DE7FE2F0F8324FBE96ED9AA971D6CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 034D
Signing time: Mon 20 Jul 2026 01:59:36 +0000
Manifest this update: Mon 20 Jul 2026 01:54:36 +0000
Manifest next update: Tue 21 Jul 2026 05:53:36 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: tbQCY/TYoXaBof85e137nmEKVJMJRmewfnAK9+Z5pMY=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 05:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6b:8f:f2:3d:e7:fe:2f:0f:83:24:fb:e9:6e:d9:aa:97:1d:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 20 01:54:36 2026 GMT
Not After : Jul 21 05:53:36 2026 GMT
Subject: CN=D1BA7F3AF1E78E34A2F908359FDFCADDEEF0D320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:95:20:22:ef:93:67:44:e8:6c:f0:3d:19:
f5:eb:fe:6a:f7:68:a9:37:00:12:85:a7:0c:4a:a2:
c1:c7:d1:e2:fa:81:64:cc:c0:f0:6b:61:9f:8b:fb:
9a:88:06:8a:c1:2a:88:88:0b:31:c6:34:d4:fc:11:
24:e2:dc:2e:ee:e9:b4:61:de:c7:40:f8:7e:f8:d0:
c9:7f:e0:ef:ff:68:b9:b4:ec:24:55:d9:a9:59:62:
41:e1:30:27:d7:07:0d:48:e1:66:da:33:bd:1c:03:
49:83:0c:d6:64:25:66:3e:26:d3:8e:3b:5a:f0:7e:
45:1b:c3:03:81:f8:6a:64:f4:62:6c:10:9e:37:22:
ff:03:e8:fc:9b:bf:a3:d7:fc:77:c1:89:c7:df:b9:
9d:9f:a7:74:9c:65:0e:d0:fa:f0:17:55:32:49:03:
01:d8:17:34:ab:50:44:a3:e6:4f:61:49:15:10:2b:
dc:6a:f4:00:6c:58:5a:f1:2f:37:eb:6b:ae:78:fa:
99:19:26:93:fc:ed:50:ac:96:56:e0:19:99:14:e3:
6c:14:fa:8e:3c:ca:36:7c:18:2c:10:fe:0b:35:14:
35:7d:da:1a:a8:ad:ad:92:9c:9e:19:cd:f2:53:7e:
44:61:01:0f:7a:e7:8c:62:8e:cd:a8:b7:dd:77:03:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BA:7F:3A:F1:E7:8E:34:A2:F9:08:35:9F:DF:CA:DD:EE:F0:D3:20
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3f:d2:90:47:99:8c:77:c3:e5:bb:de:40:cd:91:43:16:a5:
be:89:7d:85:46:5e:c1:be:3c:69:d1:24:a0:a9:20:37:f2:14:
d2:4c:99:c1:8c:c2:cf:84:4e:8b:25:ae:66:7e:53:91:db:e5:
c4:5d:6d:2a:a4:ca:9c:ab:84:81:69:e0:c1:25:c8:e3:90:34:
2a:43:ab:d8:f7:18:cb:37:c0:3c:30:4b:5a:d1:e0:ea:97:5b:
da:f2:5e:45:61:d7:21:21:4d:fe:50:d0:86:90:d4:70:41:1a:
51:ef:6d:a1:31:f1:76:d4:f4:ed:3e:da:81:21:a1:af:09:fe:
db:d8:89:33:13:4d:70:b7:9a:56:35:90:cb:ea:84:df:4b:84:
d0:58:58:6f:e1:39:cd:10:fd:36:e2:c8:1e:e5:3e:fa:59:f2:
55:12:23:6b:7c:5d:5a:a2:af:c4:27:af:2c:fa:98:af:6c:64:
30:c7:f7:09:26:77:2a:55:a5:00:8a:4b:2c:58:2d:0d:c8:ca:
14:20:59:31:2f:54:70:00:9c:79:b6:43:47:6e:dd:78:8d:74:
17:f3:85:dd:52:12:dc:3b:44:4d:74:54:f0:42:d3:65:35:d3:
c2:bb:b8:1f:6f:58:59:c9:c6:e1:12:27:55:38:0f:25:9c:b6:
d0:75:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 15:52:36 2026 by rpki-client