Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: u03UlM3rX3CS3BgI4sYYNzqy18M98tnQf0YquGYrVmM=
Subject key identifier: 31:FB:20:7F:69:A5:31:BA:92:72:7B:B2:B0:DA:D3:E1:52:6F:E6:41
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 0FACE74D4669C9417674E82E07705713BC324ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02A3
Signing time: Sun 15 Mar 2026 18:27:39 +0000
Manifest this update: Sun 15 Mar 2026 18:22:39 +0000
Manifest next update: Mon 16 Mar 2026 19:14:39 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 98Ldde9grX5naO6ZIbVX8ngRceXvvJyzYQ0EmO44JFg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 19:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ac:e7:4d:46:69:c9:41:76:74:e8:2e:07:70:57:13:bc:32:4a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 15 18:22:39 2026 GMT
Not After : Mar 16 19:14:39 2026 GMT
Subject: CN=31FB207F69A531BA92727BB2B0DAD3E1526FE641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:53:d5:4b:f2:3f:a3:fe:ef:0c:bc:34:14:
a5:fb:49:42:8e:b1:68:2d:5e:57:75:2e:b4:1b:c6:
ce:8d:7d:2a:8a:32:24:7f:b7:1b:f4:1b:70:7c:9d:
7d:3b:8e:3a:21:33:9e:ae:5f:14:f4:d9:40:47:f0:
90:a1:51:bc:a7:ce:62:12:85:7c:e9:3b:a4:51:49:
8a:8b:96:10:68:9c:66:af:45:10:fc:ad:a3:64:e1:
1e:bb:bb:85:27:c3:bf:44:48:22:ff:fe:f2:ae:92:
3e:7a:78:a1:d0:af:62:b7:43:20:45:5d:cd:d1:71:
76:20:d0:91:92:64:84:b4:58:d7:b5:df:4e:3b:d3:
e0:48:46:f9:f4:fa:21:63:92:1c:17:a2:e3:95:1d:
8e:af:53:db:64:4c:cd:11:17:3a:90:0b:5b:3d:37:
d8:8b:92:1e:a6:31:4e:11:51:a2:12:de:58:37:eb:
89:b6:28:92:ff:9c:6f:66:5c:f8:aa:e5:1b:52:82:
f7:62:04:9c:46:16:b1:6f:e6:e3:52:03:3f:32:bb:
c1:a7:ac:86:15:bf:86:11:a8:d7:5b:20:49:07:dd:
0d:cd:5b:54:bc:e1:0d:2d:05:d3:5c:06:9b:44:96:
da:96:bf:ec:71:96:40:0b:a4:e8:31:96:9d:0b:8f:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FB:20:7F:69:A5:31:BA:92:72:7B:B2:B0:DA:D3:E1:52:6F:E6:41
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bf:ab:49:0d:0f:39:f3:8a:f9:6b:e0:ee:99:74:7a:d7:e4:
32:96:98:de:f2:b5:c9:99:d1:05:74:86:24:7a:95:58:d5:97:
9f:5b:f7:47:2a:0d:b4:f5:7d:10:05:ad:b8:a1:f9:49:a2:0f:
bb:9e:3b:bf:1d:5b:32:90:cd:c1:d0:dc:51:3e:be:23:af:56:
37:48:b4:c4:41:ef:31:bd:7e:b8:90:34:3e:fa:77:dd:96:75:
40:e2:7f:62:c0:3b:30:d7:76:2c:39:40:dd:28:d2:4b:eb:28:
48:d9:46:cc:32:f5:a2:f9:43:fb:6a:7d:a9:2a:b0:30:89:93:
e9:a7:d3:5b:99:4f:fa:04:05:78:27:0c:73:aa:1a:73:ce:80:
11:b4:51:a8:85:6b:78:59:4d:d2:4e:a3:05:68:0e:b4:74:ce:
47:f4:12:36:ba:53:c0:8f:a6:ee:e8:44:df:48:a0:24:8c:63:
b1:9a:fd:bb:1a:90:73:79:b7:26:f3:96:da:41:f8:e1:c0:80:
fc:47:5b:00:05:4a:42:9e:88:c8:6a:27:c7:c5:2e:c8:cb:76:
3b:f0:c2:2b:86:84:24:b8:a8:72:98:10:da:ef:cc:06:bf:e6:
99:26:fc:5c:c1:0d:30:fa:ae:19:63:8a:49:84:55:8a:8f:15:
6f:30:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 09:55:08 2026 by rpki-client