Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: fYcqgbBsKc2EXf10GdTuIea+gMd90wKSd+IvEQayqFk=
Subject key identifier: 6D:66:C7:5B:68:7B:50:68:1C:00:1B:28:00:89:47:01:19:3F:72:1B
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 45FC99F6759F85AC8C315DB68302AADFAE32523A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 021D
Signing time: Sun 20 Sep 2026 10:52:38 +0000
Manifest this update: Sun 20 Sep 2026 10:47:38 +0000
Manifest next update: Mon 21 Sep 2026 13:55:38 +0000
Files and hashes: 1: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: Xdg8nHXqjvWa6yyjwy5uAh/UjKPLe+wRMrfn3HeBOkU=)
2: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: ArUfILTVdPV/xNgrUMZFDYhaVkRFzlTnphTzuDha7tw=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fc:99:f6:75:9f:85:ac:8c:31:5d:b6:83:02:aa:df:ae:32:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Sep 20 10:47:38 2026 GMT
Not After : Sep 21 13:55:38 2026 GMT
Subject: CN=6D66C75B687B50681C001B2800894701193F721B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:62:15:85:6c:eb:2a:a0:96:34:1c:f1:fc:
b2:3c:c9:50:92:60:4e:11:00:48:0a:ef:a0:38:1f:
23:bb:4a:bc:18:80:78:71:32:82:99:d6:b3:29:b2:
bd:07:ad:db:61:67:e4:54:cd:a5:f3:4b:7a:42:20:
f5:3b:f9:e2:33:50:08:c5:4d:65:9f:70:b9:84:39:
87:08:f4:1d:9a:d6:18:3b:da:b4:4f:36:d1:db:2e:
1e:b0:78:72:a3:60:87:8d:09:e7:1f:da:1a:ae:5a:
39:fb:62:1e:f9:12:9f:d7:4e:03:d1:48:92:fd:f7:
e3:bb:b7:c8:ea:af:ac:30:95:17:f7:ed:13:15:2f:
30:2f:db:59:03:6c:88:a7:5d:bd:ac:1b:70:58:1a:
70:55:30:b5:e8:24:2c:56:1d:3d:4b:4f:46:4f:48:
32:a3:cb:83:c4:f5:5f:06:bb:bf:42:69:7e:20:6c:
54:ce:55:c2:6e:19:00:8b:f4:ed:25:e3:4e:7a:af:
eb:29:e3:fa:64:54:af:d7:28:50:1e:4f:7f:39:7d:
5e:4b:a5:12:e1:f9:33:8c:80:df:35:d3:56:6f:7a:
69:87:ae:31:b0:9e:f3:4a:bc:51:13:af:f1:00:f7:
22:51:eb:7d:53:85:3e:e3:2d:98:d6:05:bd:90:49:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:C7:5B:68:7B:50:68:1C:00:1B:28:00:89:47:01:19:3F:72:1B
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:54:4f:a4:a2:56:59:cf:b1:5f:b2:44:ac:30:ec:6e:49:
2f:88:69:e0:ae:0f:9c:ed:03:a2:40:bf:77:82:d4:ec:59:4c:
d0:8e:c9:27:c1:de:c9:e2:a1:55:97:23:3d:94:84:8c:19:d4:
45:71:a0:f9:53:34:8f:26:78:eb:7b:30:20:e0:16:70:b7:bc:
d4:2a:72:3d:b0:59:32:c0:04:76:95:11:db:b2:12:91:75:93:
82:b2:79:c6:0c:32:17:8e:ff:9d:db:74:ba:1e:5d:1a:0e:14:
60:91:15:87:bd:6f:37:4f:a2:0c:cf:75:89:d6:c6:0b:dd:52:
66:11:0c:d1:1c:9a:10:3f:e7:4a:b0:ad:5d:16:02:af:f0:9b:
a1:c1:9d:a6:97:a1:fb:24:6a:a6:34:f4:9a:db:69:04:b9:7b:
ba:2f:36:65:2b:c7:38:af:ed:b5:6b:a7:81:4b:9f:9d:22:40:
c6:3a:46:8e:1f:67:9a:2c:bd:cc:77:37:5b:6d:5e:ca:77:bb:
34:1f:e2:a6:61:1a:6f:00:f3:69:0e:ac:88:d5:f1:e0:ec:05:
42:11:0c:0d:39:e0:9a:cd:0b:95:4d:bd:f3:ca:47:e8:a7:7b:
82:70:63:04:f1:6e:de:82:9b:08:aa:49:76:06:ad:40:c9:78:
0b:e3:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:35:47 2026 by rpki-client