Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: rA4TzF1FnWggI4VnV01rAjKCG+vS0L3HEXE+VVWivWY=
Subject key identifier: 4D:4F:62:E1:72:64:B0:8A:65:86:ED:61:F6:26:7A:B7:51:97:FA:2B
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 4D2A74F1474EB909D73BB079F739F033D974CEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: BA
Signing time: Sat 28 Feb 2026 20:55:13 +0000
Manifest this update: Sat 28 Feb 2026 20:50:13 +0000
Manifest next update: Sun 01 Mar 2026 23:41:13 +0000
Files and hashes: 1: AS60900.asa (hash: 0qS0zdFcBvyQExHkj36nBj+yE156nW7QF8snzcfkGFc=)
2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: ZkE7bCHFB0IIWwlz9Dlev8oFqhHG7xsJs0euxWAMHw4=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 23:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:2a:74:f1:47:4e:b9:09:d7:3b:b0:79:f7:39:f0:33:d9:74:ce:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Feb 28 20:50:13 2026 GMT
Not After : Mar 1 23:41:13 2026 GMT
Subject: CN=4D4F62E17264B08A6586ED61F6267AB75197FA2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3f:34:64:09:1b:83:06:c9:14:5a:b8:a8:4a:
40:81:cf:79:09:a2:05:75:99:27:f1:9b:ec:6d:1c:
d0:15:6c:6f:3c:23:bd:e5:7f:f2:bb:43:81:4b:c4:
b9:c8:b5:18:62:26:e4:5d:81:de:07:31:85:c8:a6:
f6:2f:91:c3:c9:7b:2a:fa:76:82:d1:c9:d5:96:00:
af:03:8d:d7:e9:e3:ec:81:52:4b:80:39:97:4c:b1:
35:2b:40:61:28:e5:0c:3c:eb:ea:5c:2f:35:4a:c3:
7d:bf:39:92:de:ad:4e:13:3c:c3:11:f2:1e:17:70:
db:c2:4f:db:53:1a:02:6c:25:05:36:d0:c6:c2:de:
68:a2:80:ef:48:7f:c3:42:1a:ff:bd:b7:8d:aa:b1:
2d:7d:f8:e1:9a:b2:c8:ab:39:65:70:f3:83:6c:62:
12:b6:4a:cb:f0:7a:2c:c9:48:8e:cc:05:2f:cf:2e:
0c:ae:e3:20:59:5d:8a:8d:55:15:09:07:72:d6:1e:
01:c6:0f:88:07:44:6a:c1:bc:86:62:bb:26:04:de:
d6:94:a8:84:cd:ee:41:44:f5:57:54:f8:44:45:31:
b5:c0:eb:13:71:bc:fe:1b:80:e9:d2:c6:d4:5c:e2:
70:b3:cc:f3:4f:b5:c1:ea:94:cb:4c:4d:7f:a4:83:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:62:E1:72:64:B0:8A:65:86:ED:61:F6:26:7A:B7:51:97:FA:2B
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a7:ed:9a:6b:9c:3c:8a:fe:2a:ca:03:c6:16:2d:26:a6:8d:
ee:54:b4:94:cb:76:c7:f8:e6:92:39:c2:33:62:28:d5:60:ed:
24:ea:78:44:85:c7:5f:87:ae:32:34:55:b4:e5:e0:f7:3c:4e:
6a:8e:4a:b7:bb:b7:99:4d:2a:48:8b:84:b1:fb:91:73:57:3e:
8e:74:9d:c1:f5:bf:41:5b:74:9f:d4:31:5c:b0:6a:fc:37:07:
ba:d3:ec:62:ba:22:ba:51:5b:ca:ec:73:24:a4:99:10:20:a1:
1a:46:41:44:11:a7:2a:32:36:b5:76:cb:30:a7:f1:3d:3c:81:
29:be:eb:04:1f:02:4a:00:5c:71:cd:64:89:7c:0f:3c:2a:fc:
ad:12:1e:ff:5c:37:e9:db:ec:70:d6:7f:64:8c:72:5c:36:56:
08:54:82:83:fb:8b:d0:ae:f7:dd:42:38:24:be:b9:83:ba:df:
67:78:e6:46:a3:24:f1:cb:ef:27:45:bc:cc:ca:69:31:48:c5:
10:45:38:9f:f7:56:c6:8b:e5:2c:9c:a0:ed:0f:54:eb:8f:f7:
0d:2d:fe:33:01:74:01:0e:90:d1:08:b5:37:72:69:0f:05:b2:
d5:46:e9:3e:be:c6:f5:0d:86:dc:96:37:eb:c6:0d:66:be:b8:
de:c8:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:30 2026 by rpki-client