Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: HyiShXV0Bgt35lOrnj3fVLIo1xTOJ3DVXEKru5hub+o=
Subject key identifier: 1B:E0:68:6E:EF:0D:C5:E4:6D:22:15:66:CB:D0:87:CC:B2:EA:1A:D3
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 4ED24C37DFB6299096FD8B039B464B66EC2D9837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: D9
Signing time: Tue 28 Jul 2026 01:33:00 +0000
Manifest this update: Tue 28 Jul 2026 01:28:00 +0000
Manifest next update: Wed 29 Jul 2026 03:40:00 +0000
Files and hashes: 1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: tXz4qleg7K/mPags3s/yCs9QDHhtZUsit6f1lTh2iSI=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d2:4c:37:df:b6:29:90:96:fd:8b:03:9b:46:4b:66:ec:2d:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Jul 28 01:28:00 2026 GMT
Not After : Jul 29 03:40:00 2026 GMT
Subject: CN=1BE0686EEF0DC5E46D221566CBD087CCB2EA1AD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:39:44:64:5d:3c:10:2f:5c:08:3b:cb:27:
3f:4d:1c:69:c4:d5:f4:fe:fa:33:3a:e3:24:e1:d6:
e9:e3:74:fa:e6:89:ca:e1:5d:da:a1:83:08:35:a3:
6a:87:77:5f:20:19:53:f3:f1:5c:21:33:78:7c:9a:
38:c9:74:90:16:79:19:0d:d5:e3:11:e7:7d:a0:65:
78:a0:c7:86:a6:18:4c:d7:ea:ad:72:72:7a:45:7e:
cc:d5:93:6b:ba:6d:b1:e7:16:4c:f4:83:fc:3e:45:
d2:95:3b:9d:0e:8e:7c:25:1a:88:bb:5c:1d:e7:66:
06:08:11:9a:aa:fd:93:eb:e6:41:78:bb:bd:ed:e6:
58:a1:99:35:8d:1a:84:4f:a3:62:b6:0b:cd:79:46:
ba:ce:86:a4:b7:d8:08:a8:2c:49:cd:1a:71:2f:29:
12:76:cd:b8:2a:85:19:58:4e:7e:ae:4c:7c:7f:7e:
ae:b0:d9:c7:33:de:71:8c:94:2f:a4:3b:8e:29:86:
2f:2c:cc:e3:3b:c8:98:de:36:b2:43:21:e3:1a:cd:
62:be:59:31:4b:4d:90:26:6d:79:61:aa:06:34:5e:
31:35:90:6f:32:fc:ed:e2:92:f0:92:94:fd:1a:bd:
63:e9:dd:34:24:02:ff:66:43:5d:3e:2a:f4:ab:90:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:68:6E:EF:0D:C5:E4:6D:22:15:66:CB:D0:87:CC:B2:EA:1A:D3
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:30:9a:53:ba:20:f8:ca:62:8a:7e:1b:aa:32:4b:2b:24:4d:
58:4d:71:c2:86:ab:a7:9f:c6:29:b6:16:51:22:a0:67:3d:67:
f1:86:f1:8b:c4:7f:f3:dd:aa:04:f8:31:29:b2:a7:90:47:d6:
8c:ec:93:97:8f:c0:d2:6a:7b:32:10:68:34:00:1e:b3:fe:66:
14:a4:9c:32:a8:96:0c:21:9f:15:92:7f:dc:d0:cb:b3:33:45:
4f:0c:b6:c7:61:9b:63:bf:a9:4f:9c:3a:fa:4a:1f:15:c7:35:
e8:f3:49:29:34:15:dc:14:3f:4d:f7:d1:11:a8:7a:16:19:37:
6b:01:20:41:cf:6d:77:9c:46:d4:2e:b3:65:41:48:c1:18:35:
c2:7e:42:72:95:fd:17:f3:32:49:a6:4c:ee:19:76:12:8f:4a:
f4:63:50:ba:8c:8f:b2:16:12:1f:cb:1a:a0:d5:b6:1d:4d:8a:
1b:c0:ec:c7:0a:07:fe:8a:18:14:dc:1a:5c:55:69:76:a4:f4:
67:10:8b:e1:a1:84:6b:d9:a5:d6:99:74:ff:c5:8e:fb:e5:8c:
1f:6d:35:63:33:e3:0a:9d:1c:b4:3f:59:04:fd:64:41:eb:08:
4c:4b:38:eb:37:e1:c5:d5:f5:10:94:2d:f6:ac:0a:cc:60:ec:
27:f4:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:36 2026 by rpki-client