Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: OMcvcU6uW2WPvkMRhmbL0X8o3vrTDIK1x0iHtPN1BJ0=
Subject key identifier: E7:01:9A:CF:CC:B1:B6:9E:67:EB:89:9F:60:21:E7:A4:96:88:CE:0C
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5B5EEDC9B4894F3F8E0D57D83B06823DEB173152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02FA
Signing time: Wed 20 May 2026 02:13:10 +0000
Manifest this update: Wed 20 May 2026 02:08:10 +0000
Manifest next update: Thu 21 May 2026 03:09:10 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Jf06Hsz6pUz0ykLFWI2YTp0DPx80ahvf8JwVDje4D5E=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 03:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5e:ed:c9:b4:89:4f:3f:8e:0d:57:d8:3b:06:82:3d:eb:17:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 20 02:08:10 2026 GMT
Not After : May 21 03:09:10 2026 GMT
Subject: CN=E7019ACFCCB1B69E67EB899F6021E7A49688CE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:e2:5c:91:63:0d:d3:eb:56:8c:d4:85:44:
5d:fe:49:86:34:b0:57:e4:f6:25:12:9d:4f:1b:c1:
5d:54:d6:8f:d3:61:44:53:53:f7:f4:cb:2d:74:fc:
b3:21:93:4d:3c:a5:79:a0:41:b8:52:c4:12:62:c7:
07:6c:3a:d3:e4:f5:77:86:93:c5:e1:17:94:a0:62:
dc:0c:ed:ea:26:a6:34:a8:64:c5:91:eb:50:ca:7b:
b6:37:81:dc:6d:54:96:df:4c:3e:e2:21:04:9d:79:
3b:d5:70:10:55:01:7e:6a:40:da:16:a2:8e:c0:9e:
37:0d:94:8d:a8:f9:05:39:e3:87:41:0f:14:cc:cf:
4e:78:8d:e6:53:6b:45:6b:e3:7e:71:30:f6:7e:13:
60:c9:34:f6:75:4d:95:31:11:15:ac:ef:82:27:c6:
6e:2d:a9:df:b0:ae:c8:73:ef:8b:da:42:26:7e:39:
a9:40:10:e5:22:b5:e4:44:66:57:42:b7:20:44:d3:
f4:18:d4:7b:6c:af:d1:cf:1e:e9:14:9b:1f:d7:95:
3e:b3:7e:06:59:db:0d:5d:c1:37:76:cc:ca:e4:cb:
89:30:ea:57:3c:2e:88:0c:9f:32:af:ea:21:82:0e:
9d:6b:d3:b0:ce:d6:34:f6:08:7e:07:fd:a4:49:f9:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:9A:CF:CC:B1:B6:9E:67:EB:89:9F:60:21:E7:A4:96:88:CE:0C
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d4:33:ab:ac:68:a5:12:bf:54:47:e6:1c:07:27:5c:8d:2c:
6f:38:50:07:d5:7d:e6:73:cb:e4:b1:41:76:6c:ef:21:07:6c:
d8:e5:01:43:1f:b3:5e:05:e4:49:96:69:a2:d5:91:19:ee:0a:
80:09:45:3c:43:bf:df:e4:b0:bc:02:5c:2e:a8:14:9d:79:72:
a3:4d:24:a8:9a:45:21:cf:98:5f:64:6c:13:6f:be:24:df:14:
18:55:08:30:c7:e6:af:dd:23:84:57:d7:7f:9d:3d:a5:45:c5:
34:3d:91:c6:d9:f0:b9:07:26:a9:d5:87:0a:1d:0d:a8:69:b3:
ac:46:d9:b5:f9:bb:d9:2d:ac:9a:4e:91:61:b9:1d:d6:7f:c8:
7f:3a:5f:53:2b:da:67:ea:44:d1:a1:02:82:05:7b:87:7c:19:
3f:be:3d:6b:16:a1:72:8e:fb:6e:77:3a:f0:56:32:f3:d8:95:
f5:cf:a1:3f:9b:ea:81:19:67:ec:3b:df:4f:cb:c4:be:79:03:
1f:fd:8a:b2:b5:db:03:1e:36:31:7a:8a:c6:43:17:8e:a2:e0:
a8:55:b2:07:eb:3d:fa:87:3a:3d:b7:bd:ef:f0:4a:c6:4f:bc:
4c:65:55:82:46:70:c9:b8:62:04:46:e1:c4:42:4d:96:8c:be:
26:26:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 10:15:37 2026 by rpki-client