Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
File: C1DC25C780E7A24817139D980A28A9781FA6A493.mft (raw, json)
Hash identifier: JoLLbmZmX7u4vdj+ZVDJczpXQQnoA88mdGQI0ie6pPk=
Subject key identifier: 21:A0:5D:BD:3C:D4:A5:C5:E0:A1:F7:2F:03:B6:CD:DC:F1:35:E4:7B
Authority key identifier: C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
Certificate issuer: /CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Certificate serial: 33091C52A8847F1A5999E8519BD277E47283EECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
Manifest number: 0222
Signing time: Thu 24 Sep 2026 05:37:38 +0000
Manifest this update: Thu 24 Sep 2026 05:32:38 +0000
Manifest next update: Fri 25 Sep 2026 09:06:38 +0000
Files and hashes: 1: 326130343a646338303a3a2f32392d3438203d3e20313937353337.roa (hash: ArUfILTVdPV/xNgrUMZFDYhaVkRFzlTnphTzuDha7tw=)
2: C1DC25C780E7A24817139D980A28A9781FA6A493.crl (hash: ZyoZ9rO15l97EyFlkiGyOx2ThTa1Zcd0ZS1F2nQzzh8=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:09:1c:52:a8:84:7f:1a:59:99:e8:51:9b:d2:77:e4:72:83:ee:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc25c780e7a24817139d980a28a9781fa6a493
Validity
Not Before: Sep 24 05:32:38 2026 GMT
Not After : Sep 25 09:06:38 2026 GMT
Subject: CN=21A05DBD3CD4A5C5E0A1F72F03B6CDDCF135E47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:f3:1e:ed:c2:1f:ba:ee:9b:ae:6c:51:28:
b8:e3:3e:88:6c:46:3a:66:f8:cd:2d:c1:22:e4:3c:
49:b1:60:88:62:2a:93:c8:a7:13:09:4a:d9:5f:b4:
7a:6f:ff:16:de:ce:9a:20:b0:11:b6:c0:7a:48:b3:
f2:12:93:3d:6a:a2:ce:2f:16:0b:0b:17:cb:d0:0b:
a5:2f:6d:2b:62:70:83:5d:c1:92:a7:a1:2f:42:da:
d7:18:91:a0:e9:81:b7:88:70:3e:c5:09:f1:6f:ec:
a1:39:4e:68:ad:88:4a:c1:d1:de:bb:73:e1:9b:9d:
f7:c2:97:50:93:43:53:35:96:2a:9f:bb:a9:1b:81:
fa:de:48:23:da:dc:99:da:b7:9a:c0:33:fe:35:cf:
57:03:c8:09:ad:03:42:ed:b8:1d:56:30:8f:2b:ab:
4e:a2:9c:9d:b0:d7:22:e6:be:9b:f4:9e:ce:df:1b:
4c:1f:1e:d3:09:2a:55:55:22:43:c3:1b:31:2a:f6:
0f:b2:4e:6a:8c:78:d6:8d:90:3a:5f:69:f4:c5:c5:
ea:2b:d9:d9:4a:d5:4d:31:ab:bf:5e:bf:4e:fe:4b:
64:b2:5e:26:28:60:fd:76:8d:56:4d:97:a8:a0:87:
a8:f1:c7:80:27:ea:1b:70:63:c2:a5:b9:1b:fb:0a:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A0:5D:BD:3C:D4:A5:C5:E0:A1:F7:2F:03:B6:CD:DC:F1:35:E4:7B
X509v3 Authority Key Identifier:
keyid:C1:DC:25:C7:80:E7:A2:48:17:13:9D:98:0A:28:A9:78:1F:A6:A4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwlx4DnokgXE52YCiipeB-mpJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/2/C1DC25C780E7A24817139D980A28A9781FA6A493.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7f:ea:eb:9e:f5:35:23:61:1c:fb:45:60:00:b4:fd:7b:97:
04:d9:48:d2:5c:96:1d:a8:80:95:6e:a9:14:32:7f:c2:a6:d8:
9d:30:19:fb:fb:4e:70:f5:72:0a:da:6a:d0:b5:4f:f2:06:74:
b1:cc:d7:fd:5d:97:4c:87:46:53:8d:67:70:70:58:04:1d:2a:
c5:23:22:ab:a8:f9:d4:d8:0d:3c:9b:62:96:dd:a7:39:b0:cf:
8c:08:30:fa:23:98:35:41:08:fd:d5:5b:a1:f0:f9:af:0d:b2:
49:75:2b:bd:79:53:7f:db:d5:fd:82:8d:9c:95:c0:f8:7a:7e:
37:6d:bc:d5:b5:99:64:49:19:ad:86:ae:56:b3:52:4b:4c:00:
36:80:1f:b5:1b:98:ba:fb:37:ff:a9:54:c9:8b:b1:7a:72:51:
3a:08:e0:02:3d:6c:3d:6d:f1:1a:38:41:56:53:f6:64:d0:84:
44:f5:4c:20:ce:9c:f3:44:4a:8d:46:b2:67:8e:6b:14:43:e7:
c0:ba:3f:19:89:7f:21:59:f3:13:96:7e:af:d8:9c:d7:66:9b:
68:e4:c4:0f:c2:a5:e3:10:8a:49:cd:ca:ef:54:53:ef:eb:04:
c1:e7:d2:b1:5b:7e:7f:1c:b5:27:60:ff:75:82:9c:54:5b:34:
bf:0d:4d:51
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUMwkcUqiEfxpZmehRm9J35HKD7swwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzFkYzI1Yzc4MGU3YTI0ODE3MTM5ZDk4MGEyOGE5Nzgx
ZmE2YTQ5MzAeFw0yNjA5MjQwNTMyMzhaFw0yNjA5MjUwOTA2MzhaMDMxMTAvBgNV
BAMTKDIxQTA1REJEM0NENEE1QzVFMEExRjcyRjAzQjZDRERDRjEzNUU0N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZTfMe7cIfuu6brmxRKLjjPohs
Rjpm+M0twSLkPEmxYIhiKpPIpxMJStlftHpv/xbezpogsBG2wHpIs/ISkz1qos4v
FgsLF8vQC6UvbSticINdwZKnoS9C2tcYkaDpgbeIcD7FCfFv7KE5TmitiErB0d67
c+GbnffCl1CTQ1M1liqfu6kbgfreSCPa3Jnat5rAM/41z1cDyAmtA0LtuB1WMI8r
q06inJ2w1yLmvpv0ns7fG0wfHtMJKlVVIkPDGzEq9g+yTmqMeNaNkDpfafTFxeor
2dlK1U0xq79ev07+S2SyXiYoYP12jVZNl6igh6jxx4An6htwY8KluRv7ClrnAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUIaBdvTzUpcXgofcvA7bN3PE15HswHwYDVR0j
BBgwFoAUwdwlx4DnokgXE52YCiipeB+mpJMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYvMi9DMURDMjVDNzgw
RTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvd2R3bHg0RG5va2dYRTUyWUNpaXBlQi1tcEpNLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvODIxZWVmN2UwNjAzNDVlNGJlNTY5Y2QzNDdjY2JlMzYv
Mi9DMURDMjVDNzgwRTdBMjQ4MTcxMzlEOTgwQTI4QTk3ODFGQTZBNDkzLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAG3/q6571NSNhHPtFYAC0/XuXBNlI0lyWHaiAlW6pFDJ/wqbYnTAZ+/tO
cPVyCtpq0LVP8gZ0sczX/V2XTIdGU41ncHBYBB0qxSMiq6j51NgNPJtilt2nObDP
jAgw+iOYNUEI/dVbofD5rw2ySXUrvXlTf9vV/YKNnJXA+Hp+N2281bWZZEkZrYau
VrNSS0wANoAftRuYuvs3/6lUyYuxenJROgjgAj1sPW3xGjhBVlP2ZNCERPVMIM6c
80RKjUayZ45rFEPnwLo/GYl/IVnzE5Z+r9ic12abaOTED8Kl4xCKSc3K71RT7+sE
wefSsVt+fxy1J2D/dYKcVFs0vw1NUQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:39:56 2026 by rpki-client