Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: KyJe9qycAP7q9jfx+LQNEOGQ/H6jXvAjQR/Hu6m0Ft4=
Subject key identifier: 0A:10:D3:0A:B7:B2:D4:DB:04:94:CA:2B:1E:FA:D0:16:94:12:D1:0E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3E72BE65F24258A7760F353A3015398C96BD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0331
Signing time: Mon 29 Jun 2026 01:10:06 +0000
Manifest this update: Mon 29 Jun 2026 01:05:06 +0000
Manifest next update: Tue 30 Jun 2026 02:21:06 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: i5jaA9fm2PCQ8nsWtuTxZevoa6t/71nJfw/G/ylexJ4=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:72:be:65:f2:42:58:a7:76:0f:35:3a:30:15:39:8c:96:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 29 01:05:06 2026 GMT
Not After : Jun 30 02:21:06 2026 GMT
Subject: CN=0A10D30AB7B2D4DB0494CA2B1EFAD0169412D10E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:f9:91:1a:4c:49:be:60:c9:b1:69:e3:b1:
95:2f:71:d7:5e:cd:e0:be:f8:f4:83:cf:89:6b:d6:
94:57:4d:68:03:c9:94:e7:28:fb:11:ac:f6:38:5a:
11:76:2f:f8:5a:4b:9b:5c:c6:88:59:67:1b:ff:d2:
38:82:07:c6:03:ca:63:1b:97:d7:7c:9d:dd:43:e2:
b8:e5:e2:9d:f8:34:95:b6:1f:dd:55:7b:ee:e2:f2:
8c:d0:8e:27:f7:af:01:2c:c0:fe:d9:b9:61:ed:02:
a7:63:99:e8:b5:b4:a8:5a:9b:42:90:30:32:72:3b:
6d:95:aa:c9:15:0f:a3:5a:35:dd:8b:c4:59:5f:24:
9c:47:0c:23:87:1b:96:97:6a:89:3b:89:46:2a:58:
07:19:a2:02:42:7d:07:b5:2c:9f:77:c9:f5:47:4d:
8f:42:b0:88:ec:14:36:81:1b:76:b0:01:01:62:44:
26:01:bf:af:a8:4d:26:3d:fd:8a:7d:4e:f7:fa:32:
19:55:df:db:22:90:18:9c:b8:06:4e:1f:1d:ce:98:
ff:7b:a2:08:0d:a0:57:b1:69:dd:eb:29:65:0b:29:
a2:7d:39:e4:5f:6d:91:28:e8:45:83:dc:c2:dc:6f:
ff:82:88:7f:56:ca:60:16:9c:82:64:c3:de:e7:e0:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:D3:0A:B7:B2:D4:DB:04:94:CA:2B:1E:FA:D0:16:94:12:D1:0E
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6a:84:6f:5c:ee:3c:d2:80:81:26:82:c3:fd:e8:81:c5:30:
a5:51:d3:6a:13:50:fa:8b:88:5c:e2:ec:3a:66:0b:ff:83:86:
94:d3:dd:b9:e4:2c:ea:dc:9b:3c:52:d2:57:cc:df:9e:61:bd:
ef:ba:37:09:c7:87:c6:d2:53:01:c7:03:7c:e5:70:d8:90:b0:
d4:03:ae:36:44:57:ca:ff:59:6d:dc:46:02:68:c0:81:65:14:
1f:00:e7:6e:8c:c5:23:20:ba:70:29:5e:06:24:c3:27:e3:41:
a0:c5:ce:d2:d0:37:a0:1f:0d:d6:ff:b0:33:ac:97:90:9f:ef:
fa:79:c7:92:d3:18:f3:3d:26:4a:32:b3:02:d5:00:54:30:7f:
36:06:72:ae:7d:be:f5:0f:e3:35:15:14:04:0f:c6:39:a8:70:
2a:61:24:69:3e:dd:3a:9d:0b:3c:8e:20:9d:51:07:f8:c2:af:
ad:ae:ba:a2:fa:4c:63:e4:2a:6f:5f:ff:58:73:ba:ed:c3:d6:
63:5a:57:34:46:3c:b5:dc:18:49:3b:5e:5b:06:45:4e:fe:46:
d2:53:fc:a7:a3:58:0c:d3:89:90:bf:7b:d7:ae:c0:b8:27:bf:
1e:67:0f:7a:7a:b3:2f:00:ec:70:58:6b:1e:25:f2:1b:96:4f:
ee:01:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:00:16 2026 by rpki-client