Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: zWvz2bHgc8VcfvPFePbAJtuaJYCxV58SilHo1QPRFe0=
Subject key identifier: FE:AF:80:C6:A9:1C:E2:8B:30:CE:89:E6:92:0B:B9:F5:C4:1B:DE:8D
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 6F869A314711F691B8D9A986DF8F6EC59876155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0291
Signing time: Sun 01 Mar 2026 07:39:33 +0000
Manifest this update: Sun 01 Mar 2026 07:34:33 +0000
Manifest next update: Mon 02 Mar 2026 09:33:33 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ffBpOmX7ZyrxeTI4zU8JVXB71lglSIpQRuu/+ve8Ns8=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:86:9a:31:47:11:f6:91:b8:d9:a9:86:df:8f:6e:c5:98:76:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 1 07:34:33 2026 GMT
Not After : Mar 2 09:33:33 2026 GMT
Subject: CN=FEAF80C6A91CE28B30CE89E6920BB9F5C41BDE8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:7d:89:fa:95:e6:df:9f:71:a0:64:08:6f:
98:36:14:bb:f6:57:9a:c5:b8:a9:41:a9:ae:68:77:
14:2b:57:cc:a5:f2:a3:02:74:44:7b:cd:dc:d6:c1:
0e:7b:5b:a8:cc:89:b7:2d:0f:eb:ae:29:4e:44:b8:
a4:35:f0:af:a3:f8:df:f1:46:a6:34:c2:05:6e:ac:
c5:e4:ef:56:18:0c:2d:ee:2d:52:41:46:a5:8f:c4:
b2:1c:29:ef:a1:f8:f6:ce:38:85:b5:58:f0:60:2b:
97:b5:84:02:60:a5:03:ba:50:37:05:4d:f7:5f:34:
66:fd:fb:94:cb:35:67:35:9b:5f:92:22:dd:e4:b0:
f9:ff:7d:70:80:cf:55:fc:7f:89:ca:21:38:52:e3:
e8:db:d1:4e:ce:b4:78:96:6e:a7:e1:ca:4e:e7:f9:
e8:6a:de:7e:fa:ce:d9:66:50:6e:6f:82:3a:eb:ba:
a8:90:ae:61:60:36:27:d9:00:1b:c5:fc:ef:f8:1a:
a4:b4:ec:d5:1a:eb:eb:f6:0e:77:4e:96:4d:cf:de:
6b:22:0a:13:f9:31:10:d1:56:42:6b:91:96:bd:ea:
ea:ee:ba:3d:54:8a:16:87:29:ce:13:b7:e2:0d:30:
40:c8:d3:55:bc:a5:ef:1b:71:a3:a7:b5:c4:00:8d:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:80:C6:A9:1C:E2:8B:30:CE:89:E6:92:0B:B9:F5:C4:1B:DE:8D
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:38:b3:8a:20:60:6f:e0:a9:b7:a2:21:f2:ba:fd:e0:e7:e5:
95:3f:0f:23:39:3d:61:1a:67:4f:9b:89:45:09:0e:27:07:fa:
c7:32:49:01:fe:d6:85:d6:74:1e:e5:6a:2a:09:3b:62:40:4a:
0e:43:5e:77:59:c6:66:a2:eb:1c:45:f9:a1:6f:45:22:ab:a7:
e8:e7:a3:af:93:cb:da:db:5d:fe:52:42:8d:07:8b:2c:a6:6b:
9f:c2:4e:f4:c1:aa:78:2f:68:76:68:ea:09:c4:a3:6f:d6:43:
85:7e:d7:58:e8:4c:89:bf:64:ca:14:ad:08:6e:e7:f0:0f:bc:
7a:df:f6:1e:fb:83:0c:ae:3a:64:a4:fa:58:4c:c4:43:38:7a:
52:9b:89:59:86:cd:c1:a9:b9:4e:cc:af:c1:00:ab:5e:d4:df:
4f:e8:27:96:b7:00:e3:b3:ed:da:8d:43:9f:3d:9f:13:18:25:
4c:55:a0:fd:2c:54:3d:cc:61:aa:d0:62:14:17:84:ce:eb:21:
b6:63:44:72:c9:a3:f8:d0:fc:3a:ec:03:6e:d5:07:e8:01:b4:
28:49:7b:c1:de:1a:35:41:e5:cc:54:2e:72:61:bd:8b:00:a3:
15:7b:ba:e9:e2:fb:15:7e:51:69:fb:36:5f:b8:4a:10:7d:9f:
95:89:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 17:03:50 2026 by rpki-client