Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 7ITRmFJYVqDgBrHY3LI3QkyUhLdfU0K05X71k7nNk0U=
Subject key identifier: 83:97:97:96:67:13:6E:C5:69:CB:79:78:EC:03:F5:FD:D1:E3:A2:95
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 6ABB03BC790815D43F3002713D89703A47B096E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02DD
Signing time: Mon 27 Apr 2026 21:01:33 +0000
Manifest this update: Mon 27 Apr 2026 20:56:33 +0000
Manifest next update: Tue 28 Apr 2026 23:13:33 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: K/ESI5j29c4/jiiRtIRNuYlUKCCPB9Pkng16cHjgk2Q=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bb:03:bc:79:08:15:d4:3f:30:02:71:3d:89:70:3a:47:b0:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 27 20:56:33 2026 GMT
Not After : Apr 28 23:13:33 2026 GMT
Subject: CN=8397979667136EC569CB7978EC03F5FDD1E3A295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:50:42:27:3e:da:05:ec:73:89:59:cf:1a:
52:84:e2:72:d0:92:5f:21:0c:59:4d:80:51:d2:53:
98:76:e0:e1:24:03:23:47:c3:40:a8:3b:a5:34:39:
d1:c6:37:e7:11:31:fa:02:91:f5:5d:1c:8b:aa:b7:
bd:de:e2:f4:d0:f6:5d:d0:d1:b9:29:2c:a4:ab:26:
12:3a:de:e6:b3:af:a8:8c:98:30:ea:17:77:4a:01:
f0:2b:7f:de:e3:74:42:8b:34:6f:31:3d:d0:db:63:
ae:63:a2:8b:45:58:95:1c:5d:9b:e7:2e:66:f9:ff:
ba:69:d4:f9:db:fc:12:b9:80:d1:b8:46:58:be:34:
00:5d:d6:e7:58:9d:15:e8:e0:4b:b8:a4:14:e3:5a:
92:74:7d:31:9e:4c:a3:49:f5:52:93:58:d1:32:2d:
31:6d:bf:2b:28:0d:ee:1d:6b:32:60:7f:00:40:79:
c2:33:7f:55:db:3f:7c:40:1b:7b:a8:08:a4:fd:b7:
00:78:64:c4:21:fd:f5:e3:b6:93:08:11:dd:71:da:
92:51:0a:ab:5c:5e:90:88:3b:4d:74:2d:97:03:c7:
6b:fa:e1:19:b6:72:73:82:8f:eb:7d:64:50:47:d1:
6b:0b:55:14:a2:b8:f8:80:5b:f9:ce:38:ed:30:84:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:97:96:67:13:6E:C5:69:CB:79:78:EC:03:F5:FD:D1:E3:A2:95
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:93:4e:c3:0e:4f:b8:61:0d:dd:1d:fd:19:ff:53:23:b4:4c:
83:1b:67:0b:69:7a:99:52:dd:a7:ad:2d:6f:86:3c:cf:03:53:
33:a3:7b:da:20:22:72:1f:d5:1b:a7:db:80:a6:57:0f:c3:33:
67:b3:c1:30:19:ac:9c:b6:eb:0a:95:d4:e1:4a:1d:9f:eb:02:
0a:64:04:3d:b6:e1:ee:8e:05:71:87:b9:58:56:b7:a7:2b:76:
d8:0b:fe:06:bc:d8:97:d1:fc:81:96:49:8c:84:47:1f:be:14:
37:e0:fa:2f:5b:b2:f1:51:0a:b6:11:76:b8:29:c1:fa:a9:59:
ab:8c:39:cc:56:95:58:47:74:08:77:c0:33:d0:76:3e:f5:2e:
f8:8c:73:db:39:d8:1e:6e:d6:be:9b:60:76:78:79:ba:51:60:
d2:1a:f8:1b:ec:a8:f9:ec:1e:73:2a:28:ab:80:6f:16:ce:61:
6f:a4:25:8e:6e:28:01:bd:7e:72:d3:ab:d7:80:0c:d6:2d:61:
97:8a:92:5c:48:06:82:d6:cb:3f:b1:e4:23:23:79:60:e4:c9:
2b:b4:58:e3:95:d4:88:33:99:72:50:9e:82:ba:8c:97:d8:7c:
1c:1f:ab:00:61:6c:d4:c8:b7:b3:01:65:29:dd:3c:4c:5b:6a:
c5:27:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:08:20 2026 by rpki-client