Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: 4PBGHiMZjKLfsT92qV1zGwuZ3GcVezRPPCxPUQUIxyQ=
Subject key identifier: EF:11:BE:A2:47:9A:50:18:7E:57:17:D5:9B:32:6F:0D:98:05:08:88
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 50AB583F0D7785F5C945DC744CB5997E5F5AEAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: BB
Signing time: Sun 01 Mar 2026 15:45:13 +0000
Manifest this update: Sun 01 Mar 2026 15:40:13 +0000
Manifest next update: Mon 02 Mar 2026 18:19:13 +0000
Files and hashes: 1: AS60900.asa (hash: 0qS0zdFcBvyQExHkj36nBj+yE156nW7QF8snzcfkGFc=)
2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: tVk2Ebj0I6OotkmmuEUnlHw708UiNcjbMelL+Pz0W2E=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ab:58:3f:0d:77:85:f5:c9:45:dc:74:4c:b5:99:7e:5f:5a:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Mar 1 15:40:13 2026 GMT
Not After : Mar 2 18:19:13 2026 GMT
Subject: CN=EF11BEA2479A50187E5717D59B326F0D98050888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:c1:59:87:91:fb:ab:2c:c5:68:07:a7:5e:
51:26:b1:89:9d:5e:06:98:be:36:9a:c4:b7:2a:2e:
93:af:64:2f:32:0b:69:ea:03:6b:c8:37:0e:bd:74:
d4:d4:ad:bb:09:87:43:4f:df:40:14:d3:b1:3c:ca:
ee:67:51:f4:14:65:1d:ac:e9:82:3c:55:96:30:f6:
20:ae:4d:8b:9f:c1:d7:a7:85:41:19:8f:04:0b:5f:
5e:d1:8c:88:55:16:43:00:92:d4:58:8f:4c:a6:fe:
d5:66:78:61:d4:aa:5c:52:cd:76:8c:d0:6b:a2:9c:
27:17:8b:ba:ac:86:5a:4a:21:6d:72:05:a9:dd:2c:
fa:fe:84:8a:96:4a:ae:4d:32:c3:41:ec:5b:4e:1b:
63:0b:c6:ee:c8:fb:71:75:a8:c4:23:5c:b7:1a:55:
47:44:fa:ab:eb:c9:0b:e6:62:9a:94:bd:f2:87:b3:
06:26:45:f2:94:58:40:6e:95:15:41:82:f5:7a:f5:
cf:1e:ec:8c:be:5f:0a:a6:77:14:3b:4d:05:78:42:
09:c0:ab:fb:58:d6:f5:30:ca:f3:e5:88:b4:cd:fa:
a8:e7:00:12:66:46:bc:68:32:4c:41:b4:d3:b8:0e:
b8:b5:f1:72:33:5c:c5:50:e5:b3:2b:9a:f3:af:0c:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:BE:A2:47:9A:50:18:7E:57:17:D5:9B:32:6F:0D:98:05:08:88
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:55:2d:92:f2:2a:a6:85:84:8b:6e:72:ff:83:dd:63:65:d9:
ae:2b:ac:99:fe:7a:a7:72:55:54:9c:85:d3:ae:d1:15:d7:cf:
fb:e1:bb:26:03:73:ac:a8:52:2d:e4:00:07:0c:fe:65:39:ea:
2f:ca:48:25:6c:18:3a:e2:84:dd:d7:65:f7:49:54:63:f2:5e:
54:d3:7e:1c:dc:a2:9f:a3:d7:ae:f9:75:31:b9:2e:a3:85:3d:
4e:ff:39:e8:73:e9:83:d3:b2:40:a8:9a:30:3b:95:73:79:7a:
65:a0:d9:40:6c:be:f8:3e:1a:62:31:9f:6e:e0:86:fa:c8:ca:
d2:1f:e6:d6:6d:e8:16:0d:cd:38:77:85:dc:40:57:02:ac:d2:
8b:33:d4:67:2a:a7:0d:e0:56:d0:dc:6c:94:14:2c:14:6e:07:
0b:27:1b:76:ea:e2:28:26:ae:9d:a6:b2:f6:ff:21:0b:73:c8:
10:3d:e8:62:fc:0d:32:95:e9:2e:82:80:35:df:46:e3:86:b2:
85:a8:6c:43:da:27:80:60:7f:82:1f:fa:c2:b4:07:22:bb:da:
bd:1d:af:6e:6c:0c:47:9d:87:18:ed:71:66:68:f9:19:fc:59:
a0:9a:e5:52:27:e7:e3:52:f1:b6:44:01:a1:25:29:43:6f:9b:
0a:d3:e3:31
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUUKtYPw13hfXJRdx0TLWZfl9a6q8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGNhNmQwMGIwNThhMmE2NWE0NDI5MmU4MzBhZGEzZWNl
OWMxZWVkYjAeFw0yNjAzMDExNTQwMTNaFw0yNjAzMDIxODE5MTNaMDMxMTAvBgNV
BAMTKEVGMTFCRUEyNDc5QTUwMTg3RTU3MTdENTlCMzI2RjBEOTgwNTA4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTrcFZh5H7qyzFaAenXlEmsYmd
XgaYvjaaxLcqLpOvZC8yC2nqA2vINw69dNTUrbsJh0NP30AU07E8yu5nUfQUZR2s
6YI8VZYw9iCuTYufwdenhUEZjwQLX17RjIhVFkMAktRYj0ym/tVmeGHUqlxSzXaM
0GuinCcXi7qshlpKIW1yBandLPr+hIqWSq5NMsNB7FtOG2MLxu7I+3F1qMQjXLca
VUdE+qvryQvmYpqUvfKHswYmRfKUWEBulRVBgvV69c8e7Iy+XwqmdxQ7TQV4QgnA
q/tY1vUwyvPliLTN+qjnABJmRrxoMkxBtNO4Dri18XIzXMVQ5bMrmvOvDDTLAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU7xG+okeaUBh+VxfVmzJvDZgFCIgwHwYDVR0j
BBgwFoAU3KbQCwWKKmWkQpLoMK2j7OnB7tswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvY2EyYjEyYWZjNDI4NDNkYmFlNGIwNWNmMzYwZDk1MmQvMS9EQ0E2RDAwQjA1
OEEyQTY1QTQ0MjkyRTgzMEFEQTNFQ0U5QzFFRURCLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM0tiUUN3V0tLbVdrUXBMb01LMmo3T25CN3RzLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvY2EyYjEyYWZjNDI4NDNkYmFlNGIwNWNmMzYwZDk1MmQv
MS9EQ0E2RDAwQjA1OEEyQTY1QTQ0MjkyRTgzMEFEQTNFQ0U5QzFFRURCLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAUVUtkvIqpoWEi25y/4PdY2XZriusmf56p3JVVJyF067RFdfP++G7JgNz
rKhSLeQABwz+ZTnqL8pIJWwYOuKE3ddl90lUY/JeVNN+HNyin6PXrvl1Mbkuo4U9
Tv856HPpg9OyQKiaMDuVc3l6ZaDZQGy++D4aYjGfbuCG+sjK0h/m1m3oFg3NOHeF
3EBXAqzSizPUZyqnDeBW0NxslBQsFG4HCycbduriKCaunaay9v8hC3PIED3oYvwN
MpXpLoKANd9G44ayhahsQ9ongGB/gh/6wrQHIrvavR2vbmwMR52HGO1xZmj5GfxZ
oJrlUifn41LxtkQBoSUpQ2+bCtPjMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:54 2026 by rpki-client