Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: +uE2qe793szZL82qkWgolV4MdK8ZIMMtfjGSt/rgua0=
Subject key identifier: F2:61:9D:0A:F2:CA:1E:3A:A5:F5:0A:57:6F:C9:90:B9:F2:5F:A7:95
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 6C6870F57AA799F98D945C8837D79BD11E450F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A7
Signing time: Wed 18 Mar 2026 15:27:43 +0000
Manifest this update: Wed 18 Mar 2026 15:22:43 +0000
Manifest next update: Thu 19 Mar 2026 17:59:43 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: rWJdqPB33/xUrPP/HHDDGptoXo5lgGjSDDwR0KjULYM=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 17:59:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:68:70:f5:7a:a7:99:f9:8d:94:5c:88:37:d7:9b:d1:1e:45:0f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 18 15:22:43 2026 GMT
Not After : Mar 19 17:59:43 2026 GMT
Subject: CN=F2619D0AF2CA1E3AA5F50A576FC990B9F25FA795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:2f:06:d5:b3:84:71:27:61:ff:d0:7f:d4:
db:7d:68:cb:53:ae:0a:bb:d4:f6:2e:33:b7:4f:1b:
15:4b:81:32:84:ab:45:37:96:a2:1d:39:60:87:c8:
bf:d6:dc:e5:3a:01:27:ab:f1:74:57:2e:ce:d1:ef:
ac:69:b1:1a:79:ba:77:3e:6a:e9:10:4c:2b:4c:2e:
eb:be:6d:9b:6a:8f:4b:65:db:30:f0:a3:11:a4:b4:
5a:b4:e5:aa:84:4b:97:66:e3:ab:f5:dd:a7:ce:20:
48:8e:4a:b2:44:ea:ff:74:29:79:c6:4b:b7:7f:c0:
79:83:74:4b:ed:21:42:c5:0e:39:0a:29:19:c5:40:
45:48:fd:6f:8c:2e:ec:45:ea:bd:da:c1:94:76:2a:
65:18:40:6a:78:b6:fe:f8:6a:2a:8d:1a:03:2f:0d:
83:0e:c1:5a:b9:73:4f:59:99:5a:39:0a:38:f0:fc:
29:9f:cf:4c:f1:92:94:d1:5d:6b:aa:3b:4c:ad:3a:
5f:c1:3e:3c:5e:f9:e8:9b:ae:b4:cb:0b:d2:5b:d4:
a4:70:22:27:2f:12:01:18:00:d8:1b:a7:5c:07:7d:
dc:50:6b:4b:87:dc:c2:a6:58:ab:3a:bf:38:a1:02:
e9:1f:55:ec:09:88:b8:74:19:39:6c:61:35:c0:89:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:9D:0A:F2:CA:1E:3A:A5:F5:0A:57:6F:C9:90:B9:F2:5F:A7:95
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:4e:f5:ed:da:9a:29:da:e2:fa:76:06:47:bc:d7:04:c0:
a7:ea:14:75:4f:41:2e:69:79:a1:4b:e8:90:8d:c7:44:a7:91:
bd:45:04:f8:a4:ab:ce:9f:78:68:10:d7:bc:7f:e2:8f:1a:a1:
fb:7b:8e:9d:d6:40:ff:dd:81:89:2d:eb:e6:81:e1:99:74:08:
f1:0d:fe:eb:83:ce:4f:f7:31:da:29:4d:b4:27:92:ae:76:e7:
6e:5e:06:d7:4d:ad:d5:85:0f:37:f3:a2:57:0c:1f:79:ab:6d:
5a:ea:e1:dd:29:95:e2:9f:59:d2:72:96:58:78:46:2c:03:e9:
7a:66:ec:e8:51:6d:5c:db:a9:f9:c1:6d:06:87:f0:de:85:5e:
23:cb:94:03:8e:d7:72:9d:8f:df:9e:54:2a:c6:5d:c3:e9:ab:
29:98:ef:c5:53:51:82:df:a2:74:f8:c9:a0:93:7b:37:ee:c2:
b7:ee:fa:3c:f9:e3:d1:d9:04:d7:96:b3:9e:7a:e1:72:f6:d6:
37:66:da:ed:17:f4:b3:69:cf:1a:37:7a:9a:14:25:98:65:7c:
38:c5:cf:89:99:b8:23:09:54:ae:db:35:17:b9:9d:c8:81:68:
8c:6f:36:91:6a:4f:ee:ac:24:3d:e8:52:1b:a0:0d:aa:1d:b3:
ca:86:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:15:45 2026 by rpki-client