Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json)
Hash identifier: 5zljp4FehOzDtk1/MuwgcIbfjtR3GaSsh0N1OD2Fe7U=
Subject key identifier: 93:13:10:EC:2B:38:BC:55:85:C1:46:0F:40:DE:9C:E9:51:AF:EC:05
Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Certificate serial: 0C5981504D1B26FC666258C62E13A00D78B9FA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
Manifest number: 0372
Signing time: Sun 01 Mar 2026 16:15:43 +0000
Manifest this update: Sun 01 Mar 2026 16:10:43 +0000
Manifest next update: Mon 02 Mar 2026 18:09:43 +0000
Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: VN8LfvQc9FRvnlY8vcO43+cGOh6ErtKSZmKF5b8vMaY=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:59:81:50:4d:1b:26:fc:66:62:58:c6:2e:13:a0:0d:78:b9:fa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a
Validity
Not Before: Mar 1 16:10:43 2026 GMT
Not After : Mar 2 18:09:43 2026 GMT
Subject: CN=931310EC2B38BC5585C1460F40DE9CE951AFEC05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:0f:4b:69:bd:d3:50:31:48:a8:e1:ef:86:
21:9f:59:de:c6:d9:10:11:63:11:3b:d2:44:b5:51:
31:05:87:f0:f3:a1:ff:ea:28:f3:30:51:8d:ff:95:
f7:af:c8:7e:3c:15:f3:1b:30:29:d4:b7:b4:0b:e8:
e1:b7:1a:b1:d8:e7:b1:57:1c:7b:3e:8f:03:ca:29:
b7:49:4d:2c:61:d4:1b:48:84:96:5d:6f:66:77:63:
f0:0f:08:bf:f4:ee:b2:a0:9d:72:d1:78:c6:97:bb:
d7:78:a8:99:4d:fb:c3:7f:29:de:9a:1e:ef:0f:7e:
2c:37:9d:99:9d:56:b2:56:e3:20:e8:c0:10:76:f2:
85:7c:99:ad:3a:24:b5:f4:07:9c:62:8f:32:28:7f:
fb:f1:e7:b7:0c:e7:47:58:f9:a5:9a:d1:df:e6:68:
74:d9:33:2b:96:88:fc:e3:33:08:31:f8:91:0b:33:
dc:72:b8:64:0b:14:e6:2f:74:cc:6d:14:e0:0a:8d:
32:61:5d:54:8d:2d:fb:e3:e9:7a:dd:a4:2c:a0:5a:
79:72:8a:43:95:9d:c3:45:51:fd:5d:fa:3e:04:fd:
15:4e:fc:42:5a:2f:e3:41:9c:a0:2d:8b:5b:43:88:
12:8b:28:f4:30:d6:6f:9f:be:2e:6c:47:d8:4a:3e:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:10:EC:2B:38:BC:55:85:C1:46:0F:40:DE:9C:E9:51:AF:EC:05
X509v3 Authority Key Identifier:
keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ee:a1:59:a2:21:d4:58:62:4a:c4:df:90:09:5c:97:de:87:
73:73:e9:35:3f:51:80:e3:4d:a3:d6:88:6a:5f:0a:96:66:18:
80:36:d2:40:4b:e8:a4:eb:4e:d2:b2:70:a3:f4:0d:af:1e:7c:
4d:cb:cd:f3:6e:b5:4a:cb:b1:b6:c2:03:d1:86:98:06:ba:db:
01:f3:5c:f9:eb:1a:f7:ab:bc:4e:53:f9:d7:1b:a7:2a:1b:00:
c9:fa:3c:86:71:5c:36:70:70:e0:a8:4c:39:77:b3:0d:82:f8:
31:f1:1f:7c:79:60:0e:64:f5:08:2e:a9:a0:b4:ef:26:92:b3:
4f:ba:a5:3e:8d:62:87:86:de:6a:00:4b:e5:1b:5a:fe:a6:c9:
32:62:31:6a:cf:5c:88:48:81:73:80:c3:01:cd:9a:1d:10:b3:
ff:d4:7b:04:4d:52:be:0c:30:86:3e:c3:e2:69:0c:91:96:a9:
bd:73:9a:af:62:25:17:a6:d5:09:9e:94:30:29:c5:98:eb:ed:
77:19:e9:bf:03:6d:54:54:81:3f:19:4f:b7:64:79:b4:43:43:
6d:15:28:90:62:f2:27:e8:88:1c:cb:03:48:3d:07:31:f3:54:
db:ac:69:9c:c9:8c:af:66:69:e0:8d:df:27:07:68:f4:c4:9c:
26:ca:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:48:26 2026 by rpki-client