Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: x1A6yhpt7jtpj0I2xJGTgjnZKItj89Fikz3vvBxMOz4=
Subject key identifier: 77:63:13:44:B7:62:FC:70:98:D9:B8:3E:0A:15:36:37:DB:00:76:0A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3863CDBB108F2535A2E14B1B19E382A8AE633AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0293
Signing time: Mon 02 Mar 2026 19:42:04 +0000
Manifest this update: Mon 02 Mar 2026 19:37:04 +0000
Manifest next update: Tue 03 Mar 2026 22:45:04 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: WIlE9z9JmmS+w9mmUMxwUQVizO+Mz84tl27GIPb6diw=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:63:cd:bb:10:8f:25:35:a2:e1:4b:1b:19:e3:82:a8:ae:63:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 2 19:37:04 2026 GMT
Not After : Mar 3 22:45:04 2026 GMT
Subject: CN=77631344B762FC7098D9B83E0A153637DB00760A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:40:f9:01:49:9a:f3:f9:91:8a:47:4d:aa:
36:78:3e:d2:c0:9a:8c:43:b6:73:eb:c0:10:3e:d2:
9a:4a:0b:8c:db:6a:33:ed:e3:6a:f8:ba:c0:99:d9:
9c:fc:14:65:94:59:69:77:9e:80:2f:78:c6:bf:14:
24:e3:98:94:97:f8:31:e4:f8:f7:08:0d:f3:de:e1:
ab:a1:07:dc:80:43:cc:33:73:ca:7a:d5:94:07:27:
10:9f:7c:57:c8:81:49:26:1f:1c:c2:2a:14:c5:fb:
5f:d9:6c:6f:ac:6b:d2:f5:b3:36:8b:0c:51:b7:a1:
d9:76:58:c4:81:f5:69:50:d9:23:98:8d:b9:3e:5a:
50:67:ae:d8:19:28:0a:a0:1b:27:39:d1:c6:91:87:
ef:ea:de:25:37:36:a4:34:84:7a:f9:99:e8:9b:2b:
75:a8:ca:09:28:fa:05:46:56:3e:6b:08:f1:3e:a7:
89:08:c3:91:41:48:cd:e0:33:73:db:52:c3:69:c3:
0a:a6:f7:30:82:5c:81:85:2f:fc:b5:0a:74:71:5d:
a1:0f:f6:f7:5c:ad:ba:78:f3:80:a2:54:84:68:8f:
55:13:e1:d4:09:09:99:83:60:b4:3f:bc:95:7f:64:
c7:d6:7d:b7:14:81:1c:69:77:98:fd:47:8f:b1:77:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:63:13:44:B7:62:FC:70:98:D9:B8:3E:0A:15:36:37:DB:00:76:0A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2d:70:46:90:37:4f:19:b5:fa:86:1b:39:6c:11:2a:8b:99:
a1:05:84:cb:0e:c8:bb:8e:7f:c4:4f:5b:23:9b:d7:05:c5:4f:
46:86:8a:14:03:19:0c:44:07:41:26:67:55:06:d1:28:0e:ed:
88:20:ec:84:8d:04:6d:33:37:f9:e6:d6:fa:e5:e1:35:de:51:
57:83:fd:4a:07:f2:ac:8c:5f:01:f1:44:11:37:b6:60:44:d0:
ad:ef:24:5f:5d:71:ab:0f:0f:93:9b:69:85:43:e1:d0:f1:bf:
0f:eb:76:71:a2:e5:ec:0f:b6:61:7d:22:20:49:96:37:d8:3a:
f8:57:aa:ac:cc:0b:e4:88:1c:69:72:20:db:5b:ee:96:f6:6a:
5a:8f:4c:ea:a1:d7:0e:1e:a4:3a:92:49:c6:e1:61:f0:7e:d4:
e6:7f:d0:49:04:3d:da:9a:6e:46:46:09:4b:29:c5:a8:75:90:
0d:86:c0:17:fd:86:e5:11:75:5d:71:4c:87:8f:eb:9b:28:b4:
23:ce:4d:b4:18:72:44:ab:93:6d:59:fb:26:4c:1d:02:6a:8a:
44:6d:79:1b:8a:e1:eb:8a:44:7f:45:c4:f3:61:cc:c5:70:4f:
ae:43:7b:dc:39:cb:21:f9:33:1f:21:e0:24:e1:c6:74:ba:52:
e4:5a:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:31:27 2026 by rpki-client