Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: I4BryqX4tIhDa4uySgn234bP7XQWF92AkUkOKAegQlE=
Subject key identifier: DE:81:DC:27:AE:C4:81:EE:1F:A3:8C:25:5A:ED:8B:80:DB:F6:B2:92
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 62F950C3458479993A1F802A2BB67848A215FABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A1
Signing time: Sat 14 Mar 2026 08:22:32 +0000
Manifest this update: Sat 14 Mar 2026 08:17:32 +0000
Manifest next update: Sun 15 Mar 2026 09:37:32 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: KWU+0ZAhsYuA0IbXUkX3x9LqYOlbwzVyNANUDp/lCqc=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 09:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f9:50:c3:45:84:79:99:3a:1f:80:2a:2b:b6:78:48:a2:15:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 14 08:17:32 2026 GMT
Not After : Mar 15 09:37:32 2026 GMT
Subject: CN=DE81DC27AEC481EE1FA38C255AED8B80DBF6B292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:9a:28:8a:fd:71:d7:ba:89:4b:60:e4:9c:
e1:08:92:a9:aa:6a:93:e1:43:06:1f:5e:97:c8:ea:
c0:cc:7b:ca:28:27:12:b2:53:af:f3:3b:32:b5:1c:
ed:49:57:b0:32:b9:62:1d:c2:83:cc:b0:fc:7e:2a:
89:76:c4:73:75:ea:b5:91:a3:6e:83:46:dc:b8:13:
da:43:f2:5f:54:56:bb:2e:62:38:19:59:45:75:9c:
db:ed:57:a2:bd:8e:7e:31:63:ca:8a:9c:5f:20:6e:
3f:71:91:bd:f4:dc:69:9e:45:9d:a2:da:1f:c4:75:
af:e1:31:47:97:e9:3d:2a:99:de:2b:c8:f1:1c:94:
e7:19:26:3a:c1:d6:0c:5a:3f:65:d8:d0:87:74:eb:
29:9a:36:4a:f2:4e:8d:16:85:28:63:1c:38:56:4c:
72:ec:b5:86:33:a0:59:8f:35:c3:2a:d4:8e:79:ea:
33:80:71:1c:ae:b7:23:93:10:da:09:49:05:63:5e:
c2:23:22:47:9f:19:14:4c:1c:ef:56:9e:ae:ac:1b:
fa:c0:85:55:37:b5:71:96:c1:ce:00:02:b3:4b:5d:
6b:fe:3b:37:90:0b:d6:55:e4:00:8b:51:08:7a:a3:
25:38:aa:df:f5:80:85:3b:08:33:ed:30:8e:92:17:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:81:DC:27:AE:C4:81:EE:1F:A3:8C:25:5A:ED:8B:80:DB:F6:B2:92
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:23:bd:52:87:36:e8:f6:3f:61:13:85:1e:85:d7:66:de:
0e:05:33:4c:fc:15:25:1e:aa:01:1d:3f:55:50:9f:87:19:8a:
c4:e1:da:9e:16:28:d5:71:84:4c:dd:45:b3:a2:2b:ef:b6:e8:
3e:67:dd:a2:d8:72:c9:b5:a0:1b:5d:59:ef:06:d1:0c:f8:41:
00:fc:d6:37:0a:53:04:60:69:c1:26:ef:d2:8e:69:e2:f9:2d:
93:5d:45:3f:65:38:43:f0:b2:6c:90:3e:97:91:2d:ae:e4:7c:
ef:7b:47:6a:2c:7f:45:72:d9:1f:b4:62:86:c2:49:fe:44:e7:
ab:93:a1:8c:1e:cc:bd:f5:8a:2d:28:a8:2a:48:80:ec:54:35:
23:33:c4:bc:58:90:14:4e:27:d4:8f:77:10:10:ed:ed:af:7d:
e9:04:93:bc:c2:56:6f:0b:62:88:32:de:8f:33:15:79:de:d9:
ac:03:84:8c:ef:c9:6f:e1:5e:6e:a7:62:43:ab:43:20:0c:38:
a2:59:b0:cc:b3:bb:df:b0:9a:94:26:af:bf:5b:e5:59:e5:99:
b0:3d:9e:0c:95:98:9c:a6:f9:5a:80:14:29:a9:41:bc:ec:36:
5d:9e:33:31:92:65:53:70:1b:5e:fc:04:dd:9d:03:8d:f1:bb:
19:57:77:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 00:02:31 2026 by rpki-client