Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: sxuH7z1nxWgj054KoYjNklntBtXGDnvAPYz0Ss8DFIg=
Subject key identifier: CF:F3:12:2E:AE:4F:E9:46:7C:EE:11:65:F4:EE:31:51:23:EA:5C:37
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 6777EEDA18C749E7CE87769F70DA1BDC1C33A6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 035D
Signing time: Sat 01 Aug 2026 00:25:59 +0000
Manifest this update: Sat 01 Aug 2026 00:20:59 +0000
Manifest next update: Sun 02 Aug 2026 03:58:59 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: iGPDrbaMBQ6VlBYIqfFaykSDxLpcHO9LjPrZdH4Byj0=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 03:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:77:ee:da:18:c7:49:e7:ce:87:76:9f:70:da:1b:dc:1c:33:a6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Aug 1 00:20:59 2026 GMT
Not After : Aug 2 03:58:59 2026 GMT
Subject: CN=CFF3122EAE4FE9467CEE1165F4EE315123EA5C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:02:9d:cf:4f:4d:a7:70:8c:01:af:38:4d:
a7:4c:b0:cc:f5:b1:2c:4e:aa:66:49:e5:4c:a8:f6:
64:d8:dc:c9:d3:cc:b3:65:4a:e5:c0:a8:9e:66:e4:
4e:1e:e9:23:3d:d9:43:f3:22:bf:fe:6a:19:3d:00:
45:e8:0c:70:4d:5c:ab:5d:2f:54:2b:20:4b:2f:8d:
fe:f9:aa:7e:49:08:f8:3f:42:7e:ab:5a:8f:9f:c0:
99:51:06:ed:e3:b7:6f:7d:b3:5f:57:fb:f6:15:78:
b7:ae:ea:b3:2c:2e:d7:3c:82:23:b7:23:9b:77:71:
57:28:9f:46:dd:67:45:4e:17:be:04:81:5a:98:d4:
07:a9:03:1e:26:4f:68:e2:51:4a:64:77:bc:82:ab:
aa:de:76:9d:24:91:d7:e7:29:2c:cc:9e:26:8f:b4:
c4:f0:c8:8c:c7:03:5c:c5:4a:00:29:d7:14:26:29:
fd:9b:8b:47:00:01:b4:df:7e:a2:fe:68:f4:ab:70:
db:46:1d:d4:90:d1:b4:fa:97:42:a2:dd:70:21:fb:
73:d6:2f:4a:f8:a6:bc:52:e3:b0:2d:e5:0d:a9:6d:
c2:1d:78:6b:38:21:b8:09:4d:ad:e1:ff:29:e6:dd:
97:f0:f8:ca:cb:e9:9b:74:a1:27:23:f0:3c:a8:fb:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:12:2E:AE:4F:E9:46:7C:EE:11:65:F4:EE:31:51:23:EA:5C:37
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f7:72:49:ab:3d:78:96:f0:93:61:d9:a0:52:8b:20:cd:fd:
85:2e:9c:85:fe:84:8d:94:28:83:d3:f9:e2:7f:75:2f:92:ac:
5d:b8:5e:ed:1a:a9:47:15:5c:a4:43:0d:a6:a4:a4:b5:41:8d:
ca:ee:92:d6:2f:7f:3f:6b:fd:62:9e:e4:ec:2e:c8:5a:65:c7:
08:e9:5d:5a:6e:fd:1f:94:22:56:28:2e:88:91:12:9a:0f:79:
f8:9b:e4:69:d6:c5:aa:fa:7c:64:aa:07:6f:d9:22:b5:e3:55:
29:53:a3:00:81:46:6d:58:7d:4a:48:66:84:8a:67:9c:0d:db:
58:0f:59:e3:8d:71:6a:39:f3:5a:12:f5:83:4e:77:00:3d:38:
ce:4b:df:47:85:09:f3:ee:7a:ac:59:e9:de:09:eb:aa:95:1a:
2b:c1:90:86:8c:24:d8:5e:37:24:0a:49:2d:60:35:a2:f0:5c:
b8:6e:86:6e:49:49:9e:15:fc:b9:98:98:7a:fe:47:28:fa:b6:
44:fb:6f:2e:8a:1c:11:51:22:05:a4:43:3d:2a:f1:22:5f:b0:
1a:44:18:66:07:13:31:cd:9c:ab:34:2a:6c:6d:1a:bf:67:b1:
d8:f1:22:7b:63:ff:98:a1:f5:4b:72:8c:20:64:f9:3e:93:ef:
19:ac:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 20:18:34 2026 by rpki-client