Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: c1GFnBvxHF9NSB8qTssJIqgX1CHR8shCtWNZse/pYOg=
Subject key identifier: 91:ED:19:E9:4B:1C:B7:90:21:FF:EF:2F:E0:6D:6D:8B:A9:3F:E8:39
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 6EF67E242B47D92142789DCDD59D9DAD840BA81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03EB
Signing time: Sun 15 Nov 2026 06:33:28 +0000
Manifest this update: Sun 15 Nov 2026 06:28:28 +0000
Manifest next update: Mon 16 Nov 2026 07:24:28 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: TU2Kc2ZJCj7yAlh+nRiU6MzBZhVqTlyAPU2UYNRETnc=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f6:7e:24:2b:47:d9:21:42:78:9d:cd:d5:9d:9d:ad:84:0b:a8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 15 06:28:28 2026 GMT
Not After : Nov 16 07:24:28 2026 GMT
Subject: CN=91ED19E94B1CB79021FFEF2FE06D6D8BA93FE839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:46:27:c8:0a:79:d4:4d:81:27:2b:dc:37:
2a:a1:64:c1:ac:52:7f:81:00:f9:fd:74:b5:e0:f3:
9c:9d:9c:27:ee:c9:f9:b2:cf:e6:c0:5f:0e:ed:0f:
d2:60:98:1d:58:cc:73:92:6b:c0:92:17:04:15:cc:
2b:4a:7e:61:86:92:fd:2a:d8:b9:3a:09:23:db:96:
4d:45:01:8c:5f:91:34:c0:93:06:12:6f:dc:67:4b:
4f:a4:09:6b:35:20:97:63:1e:90:cc:2e:4b:63:9c:
55:fd:4c:14:cc:1c:03:6d:cf:d5:05:b3:e2:d7:dd:
a1:46:0d:89:bf:2f:37:86:c3:e2:a9:15:09:5d:34:
b6:09:4e:8d:6b:db:2b:8f:0e:c6:1a:8e:a7:66:19:
5c:97:5c:d2:cd:90:d3:a5:59:c7:3c:b9:14:29:ad:
a2:d3:71:a1:15:b7:06:dd:fd:45:25:0c:99:9a:8d:
df:45:33:92:76:e1:0d:5e:15:88:e3:d3:4f:bd:71:
8c:01:22:2e:55:d0:6c:4b:5b:a1:16:bc:82:5d:03:
34:b3:2c:a3:17:27:57:6a:c1:8b:61:d6:90:f4:f6:
57:47:93:83:a6:b3:0e:7b:cb:07:e0:db:dd:e5:39:
71:64:71:45:b2:23:dd:e3:af:67:70:62:7d:1c:78:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:ED:19:E9:4B:1C:B7:90:21:FF:EF:2F:E0:6D:6D:8B:A9:3F:E8:39
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c7:b6:d7:fe:a0:10:64:aa:65:44:02:d8:ab:35:44:c2:dc:
43:b3:e8:55:5c:d2:6d:34:19:2d:cc:60:0d:be:3f:de:ff:80:
85:c1:1d:52:48:97:a2:25:24:bd:a7:c5:48:d7:e4:80:ad:b8:
5c:20:12:d1:da:fe:24:55:b0:a8:f9:ef:b1:7b:46:ff:b0:6e:
37:3e:2e:0c:c2:02:a1:7d:d4:47:2a:e7:91:dd:17:de:a1:19:
44:87:4f:f5:fd:94:e9:d4:4b:f6:b3:24:01:a2:9e:3b:04:a0:
bc:9f:d8:5d:37:3b:f1:6d:27:f4:b4:17:c5:f3:4a:06:10:46:
e1:9c:18:f7:07:40:2d:7b:84:ba:ff:17:a4:22:c1:d4:7f:0b:
04:2f:cd:8c:e9:ec:1b:ad:48:9f:f3:ba:86:7f:7d:09:d5:50:
fb:f9:fd:22:a3:e6:15:10:bb:f9:27:01:19:e2:2e:55:8d:8d:
c7:4e:82:90:90:18:06:e6:df:54:17:e4:73:82:07:c3:34:a4:
79:0e:e2:dc:c9:9d:95:c9:1a:14:ab:3e:0d:16:7f:5f:74:69:
4c:be:75:15:69:87:6b:7a:82:3f:5f:fe:b3:c5:60:ef:23:86:
53:7a:59:e5:8e:77:ff:25:c3:53:22:dd:22:d5:00:4c:31:3d:
35:28:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:48:15 2026 by rpki-client