Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: KZvlMelkx+xIkF/y5moZscUDLQRulendFZRQsJrraC4=
Subject key identifier: DA:2B:8D:87:D6:5E:BD:DF:90:E2:C6:BA:39:96:64:5D:9F:2E:D9:9C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4464A0ACE406403D09000D21B1F1F88051BE3F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 029E
Signing time: Thu 12 Mar 2026 00:52:31 +0000
Manifest this update: Thu 12 Mar 2026 00:47:31 +0000
Manifest next update: Fri 13 Mar 2026 04:33:31 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 9nFDR19B+Lfs/VHc4LoTF9IcugMlAyInz0BTLpByXps=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 04:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:64:a0:ac:e4:06:40:3d:09:00:0d:21:b1:f1:f8:80:51:be:3f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 12 00:47:31 2026 GMT
Not After : Mar 13 04:33:31 2026 GMT
Subject: CN=DA2B8D87D65EBDDF90E2C6BA3996645D9F2ED99C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:21:e3:fb:50:55:96:df:dc:d4:08:d0:cf:
79:1e:9f:89:50:5d:28:9d:b7:61:4d:f9:8e:6c:07:
44:a2:45:0c:cd:b1:ca:63:4f:85:32:72:1d:62:f2:
5e:c1:c3:48:7c:b4:71:f7:d3:0b:18:93:01:48:af:
47:89:e5:1a:a0:37:13:ce:70:f4:9a:53:6f:0c:ec:
48:16:4d:a8:88:06:72:3a:4f:a0:ea:b0:49:05:6e:
d3:e4:1e:d6:c2:5e:21:79:fd:9e:08:d8:0a:26:e8:
3c:48:69:93:09:75:61:8a:ad:a5:93:dc:3d:57:ff:
15:92:6f:cd:74:7f:49:8f:09:d1:f2:45:c5:74:48:
15:3d:2e:4a:fb:b8:2b:f4:5b:ef:a4:42:bb:22:bc:
0e:b9:03:1b:ef:a5:5d:5a:4a:25:dc:8e:32:9d:9f:
68:ab:54:cd:64:26:e1:8c:0e:33:93:a8:95:42:dd:
37:c4:1a:5b:c7:ff:95:14:dc:b5:f2:1d:3b:7a:f1:
89:dc:51:4e:fd:d6:92:93:65:4e:a9:33:09:6c:22:
32:79:d3:98:ac:23:87:87:5d:05:30:58:02:08:46:
df:c3:0f:3f:1b:9d:5a:7a:78:3f:9a:44:85:6c:a1:
86:d0:04:fb:54:57:f2:50:7e:90:80:4a:f4:2b:7d:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:8D:87:D6:5E:BD:DF:90:E2:C6:BA:39:96:64:5D:9F:2E:D9:9C
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4b:07:3d:80:c3:ba:af:9c:b7:63:7a:e8:a2:63:94:82:73:
b1:73:7a:5e:fc:2c:7b:ba:80:df:48:64:e2:5e:2f:c3:9c:d7:
65:7d:cd:37:1e:d2:cb:c1:b0:d0:4f:75:1c:f3:3d:90:88:89:
34:5b:15:3c:90:33:b4:7a:2d:4f:ae:4f:78:da:c8:8c:f2:33:
b9:77:82:3a:3e:e6:25:6b:5d:68:64:a4:29:b1:19:58:96:c1:
cc:36:44:0e:c3:80:37:39:ca:b2:f2:ca:c3:ad:b3:7b:24:58:
61:d1:bc:3a:02:60:2d:eb:7e:02:0a:42:65:7d:6f:f8:81:ef:
e3:d8:1c:b5:c2:ad:91:bd:ca:14:83:da:52:c3:07:82:e5:7e:
38:f1:f7:65:3e:de:84:be:d1:61:a3:99:35:6f:23:71:cf:5c:
36:06:2c:5f:dc:db:47:09:a8:33:35:e0:cc:a5:78:98:9b:08:
85:e4:61:a4:e7:09:84:64:a0:fc:c6:ed:db:cc:4b:fa:de:c9:
91:71:10:60:25:85:0f:18:32:e9:0d:4d:5c:ac:ca:b5:33:c1:
0f:33:d5:35:be:1d:23:dd:ab:5d:54:c4:d4:25:22:b4:ec:3e:
5b:91:50:7d:5f:1e:89:86:45:04:93:78:ac:87:4f:83:6a:32:
23:30:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:19:39 2026 by rpki-client