Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: MGRyQTcR/Cl7k6QdKOFfbvrycCV/OT1jzfy6IdKVhp0=
Subject key identifier: 3F:4F:8A:DD:BD:83:47:3B:33:B6:EB:81:21:B5:5E:75:69:5E:06:98
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 53CDDE9862BDB6367D5870301363014D08CB83B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: E1
Signing time: Sun 29 Mar 2026 07:24:35 +0000
Manifest this update: Sun 29 Mar 2026 07:19:35 +0000
Manifest next update: Mon 30 Mar 2026 08:16:35 +0000
Files and hashes: 1: AS60900.asa (hash: dCbHK8QnJn0GjfqUYkqvzSYjLA92Os/T9LYyF/At47k=)
2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: NK/gmmmUiT/IgX30mrGvevEtAcI9yvmtyuqSdrcmmvw=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:cd:de:98:62:bd:b6:36:7d:58:70:30:13:63:01:4d:08:cb:83:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Mar 29 07:19:35 2026 GMT
Not After : Mar 30 08:16:35 2026 GMT
Subject: CN=3F4F8ADDBD83473B33B6EB8121B55E75695E0698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:e7:a1:de:36:a4:6b:92:44:08:61:2f:87:
a1:31:0c:42:6f:8c:a3:2b:a8:76:10:a6:a9:ea:da:
4d:59:27:4e:5f:74:dc:a5:3b:15:e7:da:50:28:eb:
d0:d3:5e:56:5e:ce:bf:9b:f3:23:34:51:3a:64:11:
ab:65:f9:3e:32:e7:1e:d9:5a:ff:aa:54:f4:ed:3f:
ed:11:3a:44:d1:e7:32:6b:62:36:94:3c:2a:89:bd:
2c:75:50:71:ac:0d:28:6d:0d:fa:60:06:3f:49:06:
0b:d7:43:00:a1:d5:9d:fb:f4:f8:d6:08:5d:a7:54:
9e:40:fe:a2:0f:29:26:a6:0e:cd:39:b1:e8:ee:f7:
db:e9:a7:5a:1b:35:f2:df:b0:b2:3e:9c:4e:53:a6:
ea:83:09:4b:74:ec:2c:00:62:0f:5e:72:3a:86:a5:
58:47:87:ab:4f:54:ca:79:fa:a7:fb:29:14:50:d0:
76:0b:e9:27:7c:d7:35:e2:d0:4f:64:56:33:06:64:
8c:d1:73:a3:f7:73:48:10:e3:60:35:be:cc:fd:c2:
de:be:99:3a:13:3c:2d:8a:8f:59:fe:61:ce:7d:2a:
80:4f:f3:b1:87:9d:95:e1:2a:93:99:d4:67:20:2f:
be:66:cd:8f:28:0c:66:60:89:40:63:3d:17:56:e8:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:8A:DD:BD:83:47:3B:33:B6:EB:81:21:B5:5E:75:69:5E:06:98
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:55:bb:b7:19:6b:8d:f6:d3:96:55:6a:a6:cc:07:9b:c3:bf:
56:b9:cf:88:3e:89:2e:7d:e0:45:d1:70:4d:be:1b:14:f9:27:
85:5e:d5:b1:52:65:f4:53:2a:a0:a5:14:3d:d2:39:59:a0:d0:
89:18:b2:fa:e2:c8:5f:ae:e3:22:67:1d:04:a2:a1:51:d4:3f:
8b:16:c1:8b:a2:97:55:e4:3d:39:44:18:68:ec:89:23:e9:f6:
79:f8:23:9b:4e:05:53:d6:b7:07:f3:93:95:2b:d2:4f:96:a1:
a3:d1:e3:54:10:75:de:e9:2c:32:4b:e5:b9:8c:65:a3:44:45:
fe:48:b4:62:44:47:71:2e:1b:9e:06:e7:26:40:a5:87:5b:fc:
4e:c7:f3:66:d9:ca:3d:71:5f:77:ff:00:1b:92:aa:70:0d:8f:
99:e3:14:6d:6b:8e:8d:f7:08:0b:5f:fe:c5:d8:91:6a:a2:65:
59:18:9d:a0:3f:a9:ff:ea:e1:ab:c0:15:26:6a:33:47:07:6a:
b6:1b:6e:f4:21:fa:44:bb:58:57:21:31:24:aa:b8:e7:a6:6c:
1c:be:ad:d4:58:c2:82:e8:70:b8:dd:d0:d3:6e:8b:8c:b8:39:
ad:6b:1e:07:fc:f8:6d:45:45:b1:b8:7a:c3:97:32:32:98:70:
14:ab:f0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:26 2026 by rpki-client