Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: oryNnwS2GD1ZRBK2bP8EcRp0xFPX4UsJ8F1utXFaAcs=
Subject key identifier: 07:EC:28:BC:53:04:F7:1B:AF:5B:C7:90:37:AB:1C:A4:BF:C8:C7:EC
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 422FFB56A379A30FCA7929242FF15D6C80F7F2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 46
Signing time: Fri 17 Apr 2026 17:49:28 +0000
Manifest this update: Fri 17 Apr 2026 17:44:28 +0000
Manifest next update: Sat 18 Apr 2026 20:24:28 +0000
Files and hashes: 1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: JU6ihCemK+F2znsTZrmOqbCZr9TTboAfHjWAZ3NKgDE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:fb:56:a3:79:a3:0f:ca:79:29:24:2f:f1:5d:6c:80:f7:f2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Apr 17 17:44:28 2026 GMT
Not After : Apr 18 20:24:28 2026 GMT
Subject: CN=07EC28BC5304F71BAF5BC79037AB1CA4BFC8C7EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:19:08:93:e4:43:09:43:4c:31:d9:fd:25:
b8:61:2b:a1:6b:eb:0a:a9:47:8b:a3:79:db:8d:32:
b3:99:9e:ac:19:58:04:67:7a:1f:85:6f:c6:91:65:
4c:8c:e7:58:1f:08:64:5d:e8:6e:13:20:a9:48:ea:
89:e1:ff:7b:7f:8b:4f:f2:3b:c2:7b:46:3d:6f:0a:
d3:80:b7:34:b2:fb:1d:7e:e9:32:98:e5:a5:d1:af:
28:a1:3d:9e:d8:f2:05:ee:86:e9:5b:9e:2a:ea:e6:
f1:6a:5a:5b:ec:18:b5:97:62:30:20:64:4d:38:fa:
9b:ab:ca:19:70:2e:f4:30:c9:d7:84:31:3a:8d:25:
20:25:69:79:7a:cb:59:b3:35:81:85:89:c4:f2:ea:
b5:c6:e6:6b:c5:6d:83:c6:22:13:9a:81:61:18:89:
e6:b9:0d:d6:64:bd:d0:91:05:98:6e:bb:e2:1c:e1:
3d:20:21:b9:81:32:d7:dd:84:84:c2:3b:c5:0d:f8:
4f:1b:bb:51:19:7a:eb:3f:8c:f2:d3:c9:f2:49:11:
25:28:28:e0:73:3f:76:92:c8:58:9b:15:fa:ee:a6:
54:f1:42:b9:72:c8:1e:0b:b8:e6:8a:62:12:b4:a0:
d7:a0:f9:12:6a:b7:6b:db:76:ee:e7:4c:7e:e7:cf:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:28:BC:53:04:F7:1B:AF:5B:C7:90:37:AB:1C:A4:BF:C8:C7:EC
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:49:97:91:17:e3:33:cd:2a:6a:70:b3:a2:5c:60:37:ff:5a:
d3:b1:4a:ee:29:2f:63:96:9a:f2:38:de:d1:0a:90:4d:62:97:
1e:33:5b:be:02:10:78:17:26:7b:3e:a0:6e:63:8a:c0:c5:0f:
59:05:60:c7:eb:32:3f:ec:7f:92:e7:fb:35:14:9e:b5:e3:b0:
0f:1d:75:4f:9e:dc:c1:1f:4f:7f:11:cc:a9:67:68:a0:9c:72:
a5:eb:7c:57:4e:be:68:28:a3:9a:56:9d:ec:79:26:a0:30:c0:
e3:f4:33:98:c9:97:ac:17:38:78:e4:6d:c5:43:8a:a9:a9:fb:
6a:ba:12:53:cb:5b:dd:c2:4f:98:33:20:86:9d:e5:a0:9a:eb:
11:2b:ff:d9:a1:fb:a5:0b:47:26:09:7c:05:b0:cc:18:1d:c3:
d7:28:8b:0b:4f:a9:e0:74:6e:84:1b:29:dd:f5:56:f8:60:96:
20:7b:3b:f0:70:58:1b:72:24:9e:71:99:0d:04:f7:63:50:11:
af:92:dd:3d:cc:7a:ef:41:de:a7:fa:c9:72:eb:32:2b:9c:a6:
af:92:63:7e:c6:12:b6:d2:c5:33:39:1e:b6:06:10:bf:04:e7:
ac:50:e1:f8:5a:4c:f4:1e:69:dd:6c:fe:ad:31:20:00:c2:35:
62:48:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:59 2026 by rpki-client