Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: K2UJE9db6HbRdgGiLSHGjlxDsg0aidrx63xW5Lo/vI4=
Subject key identifier: AC:48:FC:C3:ED:72:7B:E0:A0:93:13:F5:9A:2C:EE:43:E0:97:25:AF
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2C750CD15BB61F5F2A35D2BAFC69DF37996BE796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02AD
Signing time: Mon 23 Mar 2026 01:23:12 +0000
Manifest this update: Mon 23 Mar 2026 01:18:12 +0000
Manifest next update: Tue 24 Mar 2026 04:11:12 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Pd0HFKMX/DnxtBw6M5iw/ZjBwrj/6hAEiAx+oHL7luE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 04:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:75:0c:d1:5b:b6:1f:5f:2a:35:d2:ba:fc:69:df:37:99:6b:e7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 23 01:18:12 2026 GMT
Not After : Mar 24 04:11:12 2026 GMT
Subject: CN=AC48FCC3ED727BE0A09313F59A2CEE43E09725AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:5c:a2:dc:44:a9:6c:8e:1b:45:06:a1:27:
b3:50:91:cb:0c:48:12:15:d1:82:06:2d:cc:9e:f8:
65:b9:7f:de:30:ba:03:ee:0a:6f:b8:7b:9f:a6:d7:
80:09:b2:f4:c3:08:c8:e6:5b:47:d3:67:9a:67:14:
f3:87:44:b1:aa:44:f2:ac:0c:a7:5e:ab:74:8e:f4:
0f:9c:84:6e:d9:73:24:87:41:f7:b8:ef:83:ff:61:
41:25:c1:34:0f:ee:2e:56:91:00:2d:e5:d9:e6:c9:
47:24:c9:50:b1:fc:5f:89:31:0e:8e:01:9f:7a:4a:
ab:15:5e:ee:13:c2:29:72:91:16:0b:4e:c1:f4:29:
9c:fd:a2:a8:1d:0d:94:a0:3f:c7:03:1a:fa:53:4c:
ac:a4:40:32:3a:2f:70:5d:76:f6:62:02:15:65:a0:
65:45:e5:2f:b0:8b:0f:40:8d:e2:93:bf:33:54:e7:
e4:76:83:64:a0:bd:2e:30:a9:de:1a:60:98:c4:fb:
72:3c:cc:e7:2b:8d:eb:e4:03:f6:f2:51:4a:9e:36:
f2:42:f8:57:0e:f0:84:88:ae:2c:70:02:7f:32:13:
89:d7:1b:68:d4:c7:df:5c:ef:6f:da:75:e1:96:aa:
ce:a5:67:48:c8:b2:39:92:84:47:a9:cd:08:3f:fa:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:FC:C3:ED:72:7B:E0:A0:93:13:F5:9A:2C:EE:43:E0:97:25:AF
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:2f:3f:41:99:7b:4a:c4:4c:77:bb:d4:16:ff:1a:37:10:
f3:f5:e0:0a:d6:c5:0d:0f:9b:36:65:1a:b0:5b:3f:5b:85:a7:
fc:1b:6e:4d:fb:55:41:d3:17:61:4f:96:6d:0e:d5:00:23:7d:
d7:ce:9c:3e:3d:7f:29:e0:c4:a6:54:b9:a1:41:bb:9c:b3:9a:
ae:9a:f3:70:d6:d9:aa:dc:07:8b:86:41:f3:59:6f:71:c4:74:
52:d2:82:fc:d5:8c:0e:eb:29:47:dc:a7:97:90:d5:ce:15:93:
49:58:8e:bb:60:03:67:91:ae:35:0c:04:c8:58:30:ca:a8:0b:
08:93:2a:92:90:ac:95:df:f8:d0:d7:04:81:47:86:13:0a:bb:
82:4e:e6:45:e5:e9:54:b1:e2:70:a8:91:28:78:e8:d7:98:63:
68:13:10:53:49:10:b0:6c:da:5d:6d:c3:82:6b:bd:08:5a:1c:
1e:f1:58:fa:9b:2a:8a:d4:c5:b8:8f:f4:d5:2f:c2:09:5f:8a:
72:c6:d5:33:69:d4:ea:40:8d:39:e3:dd:62:0d:00:a7:54:9f:
d3:74:2f:70:e0:d0:27:2e:f6:e9:c4:f9:d7:02:9c:e7:13:31:
ec:38:cd:93:0f:19:8e:e8:9c:d4:ff:bd:03:6c:29:5f:30:db:
ff:59:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 15:47:08 2026 by rpki-client