
Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: ahxeSnaUiJ5lQWq+2kct2LA/4oEbzWv/K6mf8rL2nTE=
Subject key identifier: 81:AA:98:E3:ED:41:D2:5B:12:19:E4:F5:5A:8F:45:2B:B9:B9:1E:A1
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 5FEEC982F66B6D494588F747236BBA57539C58E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: 01D5
Signing time: Sun 20 Sep 2026 13:38:07 +0000
Manifest this update: Sun 20 Sep 2026 13:33:07 +0000
Manifest next update: Mon 21 Sep 2026 17:18:07 +0000
Files and hashes: 1: AS60900.asa (hash: E2Y5BcAdAzI2h72fHsjqCJl4Lu1+lFCx/U+vjSkrAlA=)
2: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: 9gncZ70nQAD286t+z/O0TtrD92fdzlvZcWMd4VH9BKs=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 17:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ee:c9:82:f6:6b:6d:49:45:88:f7:47:23:6b:ba:57:53:9c:58:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Sep 20 13:33:07 2026 GMT
Not After : Sep 21 17:18:07 2026 GMT
Subject: CN=81AA98E3ED41D25B1219E4F55A8F452BB9B91EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:e5:e0:cf:54:8b:fb:e9:c7:98:ed:a4:c1:
3e:38:82:1b:c7:8f:c2:6f:2d:0c:d3:82:22:4f:ee:
91:ae:a2:fe:5f:84:6c:22:2d:ec:c4:c2:3e:80:8c:
6e:6e:42:5f:ac:df:45:90:03:40:90:6d:61:f6:be:
39:c3:50:51:79:db:ee:ab:4f:ad:0e:d5:fa:1a:9c:
03:4c:69:ec:03:0d:41:3e:84:e9:a2:43:ee:7d:92:
b5:46:e1:f9:4d:7f:da:ab:97:da:4b:48:56:42:1e:
04:8c:5b:68:a8:48:58:7b:bf:3f:1f:f4:13:f5:cc:
7d:36:68:f4:f8:ca:4e:39:1a:f5:75:c8:e8:6a:f1:
d7:5e:19:6f:48:06:64:89:e8:c0:31:8f:2f:19:95:
f1:8e:b4:c5:6a:31:49:de:26:ef:05:ec:f5:00:3a:
bf:0f:47:70:22:23:ad:16:62:42:ca:7b:b4:c7:2b:
f4:93:4d:d6:86:d1:77:e2:03:58:c8:d7:46:37:38:
0f:c1:e2:1b:d9:47:f5:5a:95:53:f6:7d:b0:dd:74:
8d:96:3b:00:fc:15:bd:0a:a8:68:79:82:4d:d8:94:
5c:dd:21:49:73:4a:e7:c2:9f:fa:c8:25:cd:d0:02:
7d:bc:76:6c:e3:2d:2f:a4:b0:fd:d3:a1:d0:45:53:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:98:E3:ED:41:D2:5B:12:19:E4:F5:5A:8F:45:2B:B9:B9:1E:A1
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:30:6f:11:86:6c:51:37:18:ca:fc:2f:bf:7a:33:9a:ef:
6b:4b:6c:d4:96:39:de:66:d7:6b:23:28:4f:bf:f4:27:12:b9:
1e:0d:f9:41:a5:0d:5b:e9:51:b4:ff:9f:94:ac:9b:b9:83:31:
1a:20:be:4b:d6:1d:9e:25:5c:52:f1:51:f6:82:e8:e6:c6:20:
23:c8:74:00:06:2a:7e:f2:eb:b9:ab:fd:65:4e:ee:29:cd:61:
2a:b7:bc:a9:6b:6d:9b:ba:f1:3b:d1:a0:1d:ff:df:eb:e0:fc:
a9:41:3d:33:2f:fc:89:2f:74:dd:e6:e9:95:0a:15:e4:83:9f:
e1:78:c5:68:a5:d2:2e:5e:6e:07:e0:2e:11:4b:79:8d:73:b8:
c0:89:82:9e:9a:b0:37:4b:7c:1c:85:f8:b6:93:ae:4b:34:53:
80:3c:37:11:4d:de:85:e5:5f:47:6d:9b:be:94:ad:fc:cc:29:
b7:58:d6:71:77:b8:be:f8:c5:eb:34:ca:ce:bd:26:bc:f1:e5:
94:ad:1e:fd:9e:c7:82:ce:ec:2c:9b:c1:dd:00:ae:b3:4d:11:
a5:a6:9c:a0:fe:f4:52:14:e2:55:f4:0e:6c:ef:42:85:13:a7:
b5:79:48:f8:6f:25:9e:db:68:4b:98:5e:c8:38:ad:78:30:81:
0a:d7:d6:8a
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUX+7JgvZrbUlFiPdHI2u6V1OcWOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGNhNmQwMGIwNThhMmE2NWE0NDI5MmU4MzBhZGEzZWNl
OWMxZWVkYjAeFw0yNjA5MjAxMzMzMDdaFw0yNjA5MjExNzE4MDdaMDMxMTAvBgNV
BAMTKDgxQUE5OEUzRUQ0MUQyNUIxMjE5RTRGNTVBOEY0NTJCQjlCOTFFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSOXgz1SL++nHmO2kwT44ghvH
j8JvLQzTgiJP7pGuov5fhGwiLezEwj6AjG5uQl+s30WQA0CQbWH2vjnDUFF52+6r
T60O1foanANMaewDDUE+hOmiQ+59krVG4flNf9qrl9pLSFZCHgSMW2ioSFh7vz8f
9BP1zH02aPT4yk45GvV1yOhq8ddeGW9IBmSJ6MAxjy8ZlfGOtMVqMUneJu8F7PUA
Or8PR3AiI60WYkLKe7THK/STTdaG0XfiA1jI10Y3OA/B4hvZR/ValVP2fbDddI2W
OwD8Fb0KqGh5gk3YlFzdIUlzSufCn/rIJc3QAn28dmzjLS+ksP3TodBFU4FDAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUgaqY4+1B0lsSGeT1Wo9FK7m5HqEwHwYDVR0j
BBgwFoAU3KbQCwWKKmWkQpLoMK2j7OnB7tswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvY2EyYjEyYWZjNDI4NDNkYmFlNGIwNWNmMzYwZDk1MmQvMS9EQ0E2RDAwQjA1
OEEyQTY1QTQ0MjkyRTgzMEFEQTNFQ0U5QzFFRURCLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM0tiUUN3V0tLbVdrUXBMb01LMmo3T25CN3RzLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvY2EyYjEyYWZjNDI4NDNkYmFlNGIwNWNmMzYwZDk1MmQv
MS9EQ0E2RDAwQjA1OEEyQTY1QTQ0MjkyRTgzMEFEQTNFQ0U5QzFFRURCLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAmDQwbxGGbFE3GMr8L796M5rva0ts1JY53mbXayMoT7/0JxK5Hg35QaUN
W+lRtP+flKybuYMxGiC+S9YdniVcUvFR9oLo5sYgI8h0AAYqfvLruav9ZU7uKc1h
Kre8qWttm7rxO9GgHf/f6+D8qUE9My/8iS903ebplQoV5IOf4XjFaKXSLl5uB+Au
EUt5jXO4wImCnpqwN0t8HIX4tpOuSzRTgDw3EU3eheVfR22bvpSt/Mwpt1jWcXe4
vvjF6zTKzr0mvPHllK0e/Z7Hgs7sLJvB3QCus00RpaacoP70UhTiVfQObO9ChROn
tXlI+G8lnttoS5heyDiteDCBCtfWig==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:40:52 2026 by rpki-client