Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: FM00AqqzIJkbsIIxiLMUClPBTBwHoCBwsimSbt0lPNk=
Subject key identifier: CF:9C:DA:6D:8E:17:AC:B2:40:FD:2F:92:76:C5:9E:C3:52:5D:30:FD
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5DE0C68938B7CDD9638C0C4DEB5C3D24AD2BBC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0358
Signing time: Tue 28 Jul 2026 14:35:53 +0000
Manifest this update: Tue 28 Jul 2026 14:30:53 +0000
Manifest next update: Wed 29 Jul 2026 14:49:53 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 5JwGrurRnj6XZO0BqPYyTbQyMItFexGQlyJ/LUqmxuw=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e0:c6:89:38:b7:cd:d9:63:8c:0c:4d:eb:5c:3d:24:ad:2b:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 28 14:30:53 2026 GMT
Not After : Jul 29 14:49:53 2026 GMT
Subject: CN=CF9CDA6D8E17ACB240FD2F9276C59EC3525D30FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:b2:99:44:a7:48:ec:6f:9e:51:8b:0e:7f:
9c:7a:77:73:7d:7e:8c:a1:01:dd:a7:3e:0d:7c:60:
01:ec:de:a8:53:4d:0f:58:26:ad:fb:14:75:03:1d:
09:b0:aa:86:41:6d:a7:ae:2a:6b:11:42:e0:68:e4:
d5:66:4c:f1:9a:5b:80:69:42:23:8d:54:3e:8d:ea:
e7:52:83:d5:7c:9c:51:3c:9c:a5:95:7c:e3:1f:99:
e2:93:e7:fd:8a:96:cc:ae:84:4d:ff:27:b0:a0:40:
66:ad:89:ee:10:d8:03:f7:1c:44:cc:35:3b:83:6c:
69:58:89:0e:1c:29:89:49:7f:b1:ce:ba:f1:58:36:
5e:7d:ee:5a:8c:13:10:f3:cb:90:bf:69:bd:a8:bb:
a1:f0:81:03:2a:f1:0a:94:6d:f1:4c:2a:ed:12:6f:
9c:6b:e4:11:e9:89:f0:dc:bf:bb:cd:b6:51:de:c2:
3b:df:f9:38:37:70:c7:cd:cd:86:10:33:db:77:96:
47:7d:75:1b:1d:fb:d2:20:b0:67:43:1d:ee:4c:dc:
cd:c7:59:f4:c9:e1:0d:b1:19:10:05:09:de:21:69:
b0:4b:a4:55:b2:45:22:c8:4e:d9:fe:a6:29:44:49:
76:f6:80:30:e9:87:e6:21:bb:00:40:a1:70:a1:97:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:DA:6D:8E:17:AC:B2:40:FD:2F:92:76:C5:9E:C3:52:5D:30:FD
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:b2:e4:bf:fd:a3:2a:42:ec:6d:1b:63:aa:94:1f:66:a7:
e6:6b:15:76:31:21:5c:24:45:51:5e:a6:34:f5:46:e2:25:d0:
e8:84:0e:28:a7:81:e7:3b:19:a4:cf:38:de:41:29:e5:d6:b2:
68:f7:c3:a8:e3:db:c2:35:aa:77:17:20:2a:8d:31:89:15:c3:
a9:97:18:9b:82:64:2c:a3:98:37:0c:d6:bc:34:ba:a5:96:c2:
58:2b:99:47:e9:2a:00:cd:e8:64:70:ac:2c:6c:d7:14:5c:e5:
ca:20:08:4d:b7:98:ea:8b:ba:aa:d8:c5:d3:9b:67:f5:c0:65:
99:27:ef:da:ce:5c:ac:88:9d:04:ee:ba:04:2b:17:69:fb:60:
d1:99:19:22:ec:b9:1d:7e:4f:51:a7:7d:6b:ca:d1:16:47:15:
55:4d:f4:0c:2f:cb:97:bb:9a:96:bf:61:f1:ce:44:3c:f5:1e:
c1:f9:75:bc:ca:bb:9a:72:ee:8a:aa:d7:c1:e3:59:88:ac:42:
63:52:83:e6:bf:6e:96:c6:d7:6e:66:30:ed:f6:15:6c:a0:37:
b6:68:6b:c0:1d:d6:70:f1:b0:42:52:71:f4:26:ec:90:86:21:
ad:ec:ad:a8:51:36:af:be:10:b0:e2:84:09:90:6b:24:41:78:
49:1e:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:22 2026 by rpki-client