Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: wIEcpxdaEpmz0Iqxvd4j1xB+51yXupwc5ZY/TvWrNYE=
Subject key identifier: 0D:75:93:15:DD:05:9C:A6:68:7E:30:32:36:89:71:87:CD:06:EE:8E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3E2AF387B9DCD22DFDA1602FBAE6F204DD6ADC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02FD
Signing time: Fri 22 May 2026 09:58:10 +0000
Manifest this update: Fri 22 May 2026 09:53:10 +0000
Manifest next update: Sat 23 May 2026 13:39:10 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ZtfNWI0gfkwOCJ6/3hfPSE7rvNs5RV7ya1XDCFstBVk=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 13:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2a:f3:87:b9:dc:d2:2d:fd:a1:60:2f:ba:e6:f2:04:dd:6a:dc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 22 09:53:10 2026 GMT
Not After : May 23 13:39:10 2026 GMT
Subject: CN=0D759315DD059CA6687E303236897187CD06EE8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:e2:ea:34:45:fa:d4:62:f3:4f:b5:2f:ec:
51:70:8b:ae:09:9d:53:bd:bf:78:71:0d:1e:cf:5d:
e6:ae:0f:0c:cc:94:21:33:6e:17:b3:3a:6d:90:b4:
d2:d7:82:5a:e0:70:73:4d:2f:6e:50:a0:52:dc:f6:
86:0e:bb:e9:e7:de:6e:ee:70:12:b7:50:8b:a2:f9:
42:20:af:c6:d9:a4:b6:29:51:32:ef:04:47:18:f1:
75:42:74:44:64:f3:4c:73:27:1c:29:52:98:41:44:
95:63:c4:ab:cb:b4:f0:cf:71:1b:11:cd:e2:d8:7f:
3b:bc:1a:c8:1d:e2:a7:2f:04:de:1f:a8:3a:71:9c:
f2:b0:51:fd:36:69:c4:7a:e5:2d:fb:8b:46:51:a3:
0d:93:5f:78:0e:01:31:09:ba:58:e4:99:e4:4e:e6:
ed:db:82:c3:75:5f:d2:a9:f4:ac:60:c1:fc:ce:50:
0f:66:f5:60:8d:87:88:91:1c:3d:c6:4b:db:8f:76:
63:9f:65:43:01:ba:e8:ae:fe:e9:e3:a9:21:7f:5b:
43:d5:f5:42:eb:2f:d7:70:1f:dc:af:c2:e5:23:5c:
e3:1a:90:e1:ba:c8:75:36:23:2f:d6:7f:a3:2c:77:
4d:ae:44:e8:15:6e:98:53:1a:5c:52:35:81:55:c9:
69:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:75:93:15:DD:05:9C:A6:68:7E:30:32:36:89:71:87:CD:06:EE:8E
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a3:37:ae:bc:82:d4:88:99:ba:d0:3a:de:46:1b:61:c2:e2:
91:dd:55:64:7a:a9:ea:1d:12:66:9a:ae:f6:94:ac:4c:d7:6f:
47:6f:2c:e1:a6:a3:1a:08:67:9f:00:ee:6f:11:d3:97:80:c5:
3d:e1:1a:29:c4:cb:e0:fa:a9:2b:6e:ee:74:71:72:d5:fb:49:
27:93:a1:3d:3f:ed:e4:3d:bc:23:0e:9f:fd:37:c2:f0:12:43:
e6:e4:2b:35:db:9f:1e:07:71:e0:02:2a:f3:f8:e6:4d:80:fc:
7e:a9:73:30:48:e7:00:22:0d:e8:46:3f:e4:44:97:5c:ef:dc:
6a:5f:e4:c9:a7:d9:71:c6:75:c4:ce:1e:92:fc:be:6e:c8:de:
f8:d0:9b:52:b6:a5:6e:43:b1:b4:c0:b1:d9:b8:fb:30:41:13:
9e:09:cc:e4:0e:6b:16:32:10:08:d4:5f:41:85:8d:2a:16:aa:
67:01:22:cf:6d:4f:d3:67:e3:a7:75:eb:b3:57:48:fb:fb:45:
34:7c:f5:7c:53:5b:7c:fc:c1:8e:76:d2:8c:c0:9f:ac:07:7e:
f3:94:15:1a:1e:aa:7b:4d:29:ce:0e:9b:4e:cc:54:4c:23:15:
05:20:b0:89:4f:5b:d6:72:6b:07:bd:f0:a3:70:11:fb:0e:94:
97:3f:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:29:12 2026 by rpki-client