Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: Q8YGC+om8+wWO0IuSTjZ13n3yHHgw7au6CaAqg5mt6M=
Subject key identifier: 58:0E:14:C3:84:98:E4:B0:50:9D:0D:97:39:2E:CA:1B:F3:83:A3:70
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 23F3E203EB6FB62D7AFEA906F9B6A4AC2A92B544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 013A
Signing time: Wed 23 Sep 2026 15:33:51 +0000
Manifest this update: Wed 23 Sep 2026 15:28:51 +0000
Manifest next update: Thu 24 Sep 2026 17:44:51 +0000
Files and hashes: 1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: JP6AWD+C5rNr+j+NUzdW5WoWfBzYq4O/5+2olsK8YUc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f3:e2:03:eb:6f:b6:2d:7a:fe:a9:06:f9:b6:a4:ac:2a:92:b5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Sep 23 15:28:51 2026 GMT
Not After : Sep 24 17:44:51 2026 GMT
Subject: CN=580E14C38498E4B0509D0D97392ECA1BF383A370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:bf:bd:c8:43:2f:21:41:3e:d5:40:f8:ca:
97:61:d7:0b:d2:94:d6:2e:25:72:22:24:97:f3:2c:
7a:fd:43:25:8d:67:e4:94:80:de:a1:d2:89:53:e6:
f9:0e:46:8e:d6:52:d0:53:73:ce:c8:a2:1b:c0:2b:
8a:51:83:11:bd:19:41:34:e1:69:e8:49:d3:16:cf:
78:ad:24:f0:41:ee:0e:88:5e:47:71:cf:bf:50:33:
c1:9f:57:0e:26:1e:a9:4d:3e:70:ed:6a:8a:d3:4b:
e7:c9:bb:a7:9e:93:36:ea:52:5f:b8:25:ea:bf:98:
c2:dd:f6:aa:8f:70:35:56:ac:d6:26:19:56:e4:2d:
7f:b6:e8:c9:31:8f:90:78:38:01:ab:b4:f4:d2:0a:
34:24:57:d7:e9:9a:ea:22:8e:6c:65:0c:1b:47:6a:
16:60:90:96:f2:18:25:fa:bc:fe:85:51:c9:b2:ea:
62:13:2a:c8:71:a9:90:4e:16:d0:a3:c4:88:d2:09:
6a:19:6d:cf:3b:72:b6:4f:5b:e9:c8:de:34:6c:b2:
8d:4e:6f:8c:2a:cb:ff:55:fb:8f:be:34:bb:06:6d:
9a:a0:eb:7b:b9:31:21:c9:1b:52:48:76:71:cb:41:
e8:b8:71:9e:b7:42:ef:dd:8b:64:97:fd:aa:f5:0c:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0E:14:C3:84:98:E4:B0:50:9D:0D:97:39:2E:CA:1B:F3:83:A3:70
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:43:7e:21:8a:d5:c8:f4:84:5c:6b:08:f7:db:ce:e8:b2:9f:
c3:23:f7:05:24:f9:6c:fd:6e:aa:c9:cb:3a:33:c4:01:34:b4:
62:53:94:94:53:13:4f:3d:c0:d0:c3:8d:be:52:d8:b2:b6:82:
30:6d:81:08:8e:f3:a2:3d:19:2b:88:8b:d6:eb:2f:84:57:a1:
08:7d:e7:91:b6:b9:e0:32:3b:07:60:41:97:12:ee:b2:33:f1:
f5:69:89:86:15:19:b4:14:43:83:29:c2:92:e1:61:c6:44:53:
51:b0:93:40:78:52:70:fb:d8:db:5a:61:5e:72:5d:ba:61:39:
06:e9:86:e1:8d:0c:9e:48:c8:10:63:3d:66:f7:eb:90:63:9d:
1f:c3:8e:e9:bd:01:01:bd:ae:22:cd:af:c2:06:c1:1b:83:ae:
a5:a6:1d:f1:de:cc:e4:6b:40:0a:b5:98:e4:f8:29:da:f1:2d:
82:0c:8c:13:1a:ff:a2:21:a4:3b:e1:62:e9:1a:19:31:0d:37:
20:13:57:93:10:85:e5:98:ca:89:90:76:84:e6:73:50:75:b7:
7f:9b:35:37:35:75:80:a9:00:75:02:18:9b:8f:e4:7e:fc:08:
db:da:3c:15:08:79:e0:40:03:78:96:c5:b5:36:75:b6:87:c5:
e8:4f:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:40:56 2026 by rpki-client