Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: KGP5sUsQu2Rlx5OyXJDUP35WF4JjuYwI+LOR2pi/eps=
Subject key identifier: 08:56:39:CF:38:FE:D8:DE:80:AB:27:7B:EC:60:70:3F:5D:C5:44:FA
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 059B719F177BD9AD5A4C06568A96FFD178B97D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 029C
Signing time: Mon 09 Mar 2026 12:10:01 +0000
Manifest this update: Mon 09 Mar 2026 12:05:01 +0000
Manifest next update: Tue 10 Mar 2026 15:28:01 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: +VvNntB/ZLL5Oa8MDngjsqfjQUtnG4L6d5lqQs3Jn0c=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Mar 2026 15:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9b:71:9f:17:7b:d9:ad:5a:4c:06:56:8a:96:ff:d1:78:b9:7d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 9 12:05:01 2026 GMT
Not After : Mar 10 15:28:01 2026 GMT
Subject: CN=085639CF38FED8DE80AB277BEC60703F5DC544FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:54:5b:12:9c:a1:ea:1a:e3:9d:51:1e:69:
fa:66:aa:84:a5:c7:50:a3:16:09:56:69:84:ae:3a:
33:bc:42:f7:66:64:97:88:75:f1:81:51:51:04:ae:
e5:43:4a:00:8e:78:f3:e8:a2:0f:cb:37:fa:be:b8:
25:dd:6b:7a:13:bc:70:ce:aa:2e:b3:58:24:1d:27:
58:16:2e:98:76:19:68:7a:e7:66:9a:a0:67:9a:d4:
8d:26:29:45:ed:4e:08:b1:e1:87:66:27:43:87:a9:
07:6d:1b:83:c9:31:70:a1:ee:3e:20:47:6a:c3:0f:
dc:82:80:5f:4a:f5:cb:c5:d7:98:15:cb:a5:d9:27:
cf:3f:5a:4d:85:2d:d2:e2:9e:6f:15:b7:c4:bc:e5:
4e:9b:6b:e2:37:8d:12:c2:1f:c6:7d:f4:d7:08:da:
36:2c:66:5c:9e:a8:26:bb:fc:3d:c5:06:20:71:8e:
b0:0b:14:96:61:74:d1:88:5e:d5:6b:39:00:50:b8:
fc:9f:b7:a2:ea:7b:66:d2:c0:1d:c5:e3:2e:88:ca:
42:5c:6f:ae:fb:d5:83:fb:cb:59:45:2a:9b:68:52:
bb:e4:8f:e6:49:f5:48:94:b8:41:d2:38:44:bf:6f:
39:a9:b2:20:54:26:32:61:1b:27:cd:37:04:23:68:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:39:CF:38:FE:D8:DE:80:AB:27:7B:EC:60:70:3F:5D:C5:44:FA
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:76:ac:7e:74:cf:87:28:62:e1:9f:c2:bd:82:e8:bb:4c:fc:
75:7b:34:55:28:4e:72:a4:20:a4:15:2a:42:85:ca:9d:3b:1c:
77:2e:fd:56:4e:09:51:2b:41:f2:81:16:4e:b1:b5:fa:6b:4e:
b3:f6:43:29:11:ce:57:59:a4:2b:96:87:a6:d8:ef:67:5f:7c:
8e:fd:97:0d:55:99:0d:4d:02:16:b1:35:c8:23:bb:7b:68:49:
43:3a:36:87:a4:b1:27:59:56:a6:91:44:bf:21:e3:f3:8b:0d:
fd:3f:56:84:88:45:c1:06:89:a9:5d:21:d9:03:62:cc:12:ad:
e0:72:3d:a5:4a:61:7c:db:c1:36:13:65:85:b3:81:d6:db:51:
66:40:a8:f8:28:5f:2d:ca:ad:7d:af:67:1d:1a:43:cc:ff:e2:
de:fc:1f:71:44:52:c7:c9:39:e8:67:92:76:2f:4c:7f:4f:22:
28:f5:c5:95:4e:69:9c:ef:54:ef:70:39:db:18:1c:e4:0d:bc:
aa:b6:1e:23:4f:a8:8d:3e:34:38:56:6b:ac:d9:2c:9f:36:aa:
c3:8f:5c:4f:44:02:28:be:a2:26:18:00:17:7d:79:13:f5:fa:
e8:dd:a8:24:a3:e2:3a:ce:d1:fd:ec:c2:6c:26:6d:7b:7f:78:
84:85:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 03:13:43 2026 by rpki-client