Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: RxV64k0fEavTPPLaQsdhcj7EpNS1YoKb07P8L4IAOpo=
Subject key identifier: A0:DD:F5:38:5E:D9:6C:9F:FC:B4:D0:33:D2:38:FD:CB:08:54:C2:81
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 123C7DA0D5E0832EBDE32DDBB76F400EFF577A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A0
Signing time: Fri 13 Mar 2026 16:17:32 +0000
Manifest this update: Fri 13 Mar 2026 16:12:32 +0000
Manifest next update: Sat 14 Mar 2026 16:19:32 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: jS/ZVK1AB/KoVd8Ky2X8dZIMnWMhai22bsexZPaOMD4=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3c:7d:a0:d5:e0:83:2e:bd:e3:2d:db:b7:6f:40:0e:ff:57:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 13 16:12:32 2026 GMT
Not After : Mar 14 16:19:32 2026 GMT
Subject: CN=A0DDF5385ED96C9FFCB4D033D238FDCB0854C281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:30:23:66:b3:fb:82:7f:f8:7b:7f:fd:af:
1b:60:9c:7a:c1:fc:58:36:96:85:39:e6:d1:82:5f:
33:0d:6a:8f:b7:d7:11:02:76:ff:28:5a:54:56:bf:
8a:4f:66:c4:eb:fb:5c:4c:76:2a:b3:74:ee:32:2d:
b6:ae:32:70:45:32:7c:ac:22:e3:1c:4d:93:93:02:
e2:8f:c0:25:75:4c:17:bf:8f:ea:dd:55:f3:50:f4:
61:21:02:f9:15:76:52:b8:69:0e:a1:e6:70:85:22:
88:5e:9e:99:98:24:11:c9:a0:3e:cb:25:11:a9:9e:
4d:a3:a1:5a:07:77:da:c1:a7:66:62:cc:e5:0c:a3:
c5:c7:c8:d1:aa:79:e3:64:a8:97:9d:d4:fa:1d:cd:
e9:3d:e7:d8:f3:3a:06:1b:14:72:12:a9:0a:ec:e3:
7e:80:00:96:eb:24:60:8d:a1:81:84:c7:ca:14:05:
dd:68:fc:97:7a:87:83:7a:fa:6d:bc:98:8c:33:d6:
cb:e6:e9:ca:8a:df:3d:cc:09:63:7c:64:ff:63:a9:
01:7b:0f:27:62:84:51:43:26:e8:29:37:25:02:a0:
f6:cd:52:6a:b6:9b:ea:74:d7:89:22:1d:4d:c9:30:
e9:dc:c6:99:dd:2d:ef:a8:ab:7f:ac:fa:ba:db:a8:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:F5:38:5E:D9:6C:9F:FC:B4:D0:33:D2:38:FD:CB:08:54:C2:81
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:da:db:ca:e8:ee:fb:92:39:97:fd:11:90:ca:d8:c7:c6:4c:
31:8b:da:e3:b3:48:f2:8e:7a:6f:22:b5:27:59:03:99:45:b7:
93:43:ce:a6:1a:f2:5e:31:b7:f1:b5:25:1c:8d:59:85:95:8c:
a5:2a:13:50:0d:02:72:0d:79:bc:de:7b:5e:09:2d:ea:f5:3b:
05:a6:86:4d:3f:08:c0:80:9e:6a:08:ce:61:c4:03:b4:8e:53:
a7:b6:b5:b0:6e:02:e2:51:08:41:e0:7b:2e:69:c2:40:eb:d7:
de:24:ec:eb:a0:13:d3:f7:6b:41:4a:44:87:ec:14:9d:0a:42:
5b:52:d9:c3:93:2f:0f:c7:8d:4a:0b:63:92:ad:ff:d2:19:2d:
82:6d:9a:91:d3:c9:c2:f8:db:3d:54:6f:d4:80:9f:80:45:a1:
08:a2:c8:fa:81:2a:97:31:46:bd:46:dd:39:30:79:2e:ac:99:
fa:9d:84:e2:b2:df:9f:bb:8b:d0:99:d0:92:5f:d4:3c:5d:e6:
51:b4:19:44:b9:5d:46:64:24:22:5b:87:2d:d0:9c:60:d9:72:
46:e9:67:d1:08:79:ae:3d:af:1c:e2:58:c7:5f:f0:cf:39:f7:
23:00:69:3c:c0:ad:06:9f:67:75:c8:f1:8d:0b:be:5c:48:6c:
40:f4:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:48:22 2026 by rpki-client