Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: v60ZK9RuILrJQxFI7AIFksf1UDSoF5OuaY/3XM4/HIA=
Subject key identifier: 08:9B:A4:97:A9:88:0E:08:4D:17:2F:F1:2E:53:45:6E:48:31:C7:34
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 204E39A40E5B7068563C38DF5703F61BA99416B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 0186
Signing time: Mon 02 Mar 2026 00:58:20 +0000
Manifest this update: Mon 02 Mar 2026 00:53:20 +0000
Manifest next update: Tue 03 Mar 2026 01:19:20 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: 5NcGP5VtQdStGi24p4/ctAfL4PE+e1VP+206Ezc1Tjc=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: nBfJgos2zfzyALiaXlFvRvGKVpCZLf9hpeeX+QFHO6Q=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 01:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:4e:39:a4:0e:5b:70:68:56:3c:38:df:57:03:f6:1b:a9:94:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Mar 2 00:53:20 2026 GMT
Not After : Mar 3 01:19:20 2026 GMT
Subject: CN=089BA497A9880E084D172FF12E53456E4831C734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:1a:12:65:2e:3b:de:af:32:9e:9f:fa:67:
7a:f7:bf:00:c0:26:f5:07:41:95:82:a8:18:a8:f6:
e0:4f:5b:a0:e3:60:5b:2c:cc:46:d7:8e:2f:b6:e8:
c3:8d:9a:66:38:0d:77:f2:a5:ed:08:62:0f:89:d0:
71:49:a6:34:2a:a4:e3:ce:1a:9a:2c:e1:42:6b:16:
78:35:3f:2c:8f:5d:fc:a2:f6:bc:88:eb:3e:bb:65:
62:b3:c4:f7:4e:b5:c7:90:1b:77:a0:87:3f:b7:88:
55:3f:50:0a:f5:a0:5b:c9:d4:df:ea:4d:23:dd:8b:
ba:3d:23:d6:f2:b0:7d:f4:0d:62:2b:00:2b:ac:c3:
2e:bd:61:80:2b:c8:34:7c:8c:52:0a:a4:15:9d:e7:
2e:a5:af:88:68:c2:66:a0:88:34:1f:98:4d:21:59:
a7:ff:bc:4a:2b:d7:c9:bc:d8:d5:4a:7b:81:f9:67:
3d:ba:c4:df:e3:a7:67:bd:80:80:05:0e:0b:77:3e:
59:12:a5:c3:a6:01:72:18:b6:e5:d1:f9:b0:a4:a9:
1a:5e:3c:f0:01:a8:97:bb:61:8f:30:d1:cf:a6:82:
f7:8e:09:17:62:be:82:3d:24:9c:1d:87:a8:d5:ea:
8d:9a:b0:2c:d6:cc:03:d4:c5:52:63:96:70:3f:4d:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9B:A4:97:A9:88:0E:08:4D:17:2F:F1:2E:53:45:6E:48:31:C7:34
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c2:a3:ba:fa:8c:58:bb:e7:cb:03:c4:db:3a:eb:7d:bb:2a:
9d:ec:6b:98:a0:38:74:d9:6f:25:ee:84:dc:07:f0:df:37:30:
d7:0a:be:ff:57:f2:34:1b:8f:31:53:74:92:24:48:c8:71:8f:
fc:e8:22:ea:2b:fb:4a:61:56:9e:41:27:15:80:7b:a1:89:b0:
08:21:fc:ac:d6:37:d9:64:82:73:87:80:a8:94:e2:94:7a:f3:
93:16:9b:ca:3d:fe:9f:ad:33:bd:31:4c:0e:a7:4b:21:53:ad:
86:6a:99:a7:cb:f7:1b:db:ac:81:96:a4:d5:06:ba:d6:2c:57:
44:60:51:d8:3a:ce:84:e5:c2:39:46:af:d6:26:c3:7e:c1:b8:
ce:f7:f9:b9:06:51:3e:d6:27:de:f3:0d:eb:db:73:96:2a:db:
96:19:05:b0:e4:af:17:15:f9:1c:c9:41:78:e8:1f:32:36:57:
5f:c4:af:f6:38:a9:87:5a:80:2f:99:69:29:91:0b:65:26:9c:
3b:e7:57:4e:53:9a:71:7d:f8:fe:0b:d3:cb:69:bc:15:20:34:
fb:e2:23:4b:98:71:2c:a3:c6:f3:ca:6f:15:8e:03:9b:1f:90:
01:fd:be:59:de:cf:f0:b7:b5:7b:75:bf:b7:18:e3:98:2f:54:
3f:27:a9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:14 2026 by rpki-client