Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: GshRteNkJVEWfQRTD5kdEamQGCrckTmudpPDAhsBspw=
Subject key identifier: 5F:40:FC:65:83:09:56:FF:0A:47:50:7F:32:0B:09:68:F2:BE:5F:D1
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 20286C61C552ECEB52F5918C6669EA102EDC1565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 27
Signing time: Wed 25 Mar 2026 13:19:28 +0000
Manifest this update: Wed 25 Mar 2026 13:14:28 +0000
Manifest next update: Thu 26 Mar 2026 15:21:28 +0000
Files and hashes: 1: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: 7nHNYlg6rytg/tPjrBi6m6Egqt9Yw4/cpQN86+/uV9I=)
2: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:28:6c:61:c5:52:ec:eb:52:f5:91:8c:66:69:ea:10:2e:dc:15:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Mar 25 13:14:28 2026 GMT
Not After : Mar 26 15:21:28 2026 GMT
Subject: CN=5F40FC65830956FF0A47507F320B0968F2BE5FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:4b:12:fa:ad:8c:ca:dc:75:bc:f1:99:cd:
a7:11:b6:f3:8c:98:cb:46:03:1e:55:62:0e:eb:31:
bc:7c:c5:f5:9f:eb:0c:ca:bc:46:c3:4d:ef:d3:3a:
21:e6:27:03:fe:1b:ad:77:8f:a0:33:48:f2:ae:7c:
be:7a:70:d7:e2:7e:10:60:cc:be:ac:06:c1:0c:f6:
b5:26:7e:de:a9:f8:09:d8:e1:d7:25:a6:e6:e8:fe:
e1:ff:58:d9:fa:72:0b:aa:da:95:1c:4e:4c:1b:c2:
bc:16:cd:08:53:5f:f9:04:a2:3f:e6:1e:14:c1:38:
35:0a:9c:16:78:49:0a:1b:a0:3f:ed:ac:64:31:bb:
96:c2:53:4a:97:76:45:ba:7e:ca:d3:6b:d6:1e:b5:
54:1f:9c:45:b9:eb:72:d6:bb:69:8c:f8:df:75:36:
54:49:48:0e:b5:15:71:15:2c:c4:6e:2b:3e:e6:8a:
d0:9e:11:c6:20:10:55:0c:dc:ca:df:07:98:14:62:
2e:4b:f4:be:c3:1e:59:0b:d1:62:9b:3b:52:3d:64:
78:5e:65:4d:cb:92:16:15:ae:66:0c:7a:83:ff:3c:
52:08:0f:6c:af:5a:dd:36:15:f8:32:04:ba:31:81:
a2:7f:b0:a5:8a:a4:45:a6:ab:c3:3e:99:d2:9a:af:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:FC:65:83:09:56:FF:0A:47:50:7F:32:0B:09:68:F2:BE:5F:D1
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:57:df:8e:cd:3c:12:42:20:a3:2f:ea:25:a6:63:1d:69:c7:
ce:34:03:fa:df:06:23:31:a3:1e:c9:76:a4:d2:34:e2:a2:fb:
f1:e1:90:bc:ec:6e:c5:01:50:7e:08:48:61:7f:e6:33:56:86:
02:e7:02:28:5e:3c:e5:45:aa:42:9a:85:49:fb:7f:e4:32:2d:
ee:6a:17:b2:d6:13:1a:a0:c3:bc:5a:6d:9e:f0:3e:34:40:f4:
74:d0:fe:11:a7:79:f9:9e:e6:b1:1f:14:cd:bd:94:be:6d:88:
da:67:98:df:df:41:d1:14:1e:78:69:7b:be:bd:82:c3:1e:81:
fb:00:dd:bc:88:24:e0:48:d9:78:af:c8:b6:ea:cb:6c:1f:0d:
9b:d4:42:6d:a3:24:06:e1:e4:c2:d9:79:73:94:a6:dc:ec:7e:
d3:9e:c3:0d:56:aa:f5:53:40:c3:05:93:ee:12:39:87:58:9f:
60:72:3c:d1:49:af:d0:1c:f4:25:ed:3e:d8:f1:98:7c:9e:1b:
1c:3e:20:16:ed:90:23:ad:3a:9c:f9:24:13:a5:22:4a:a9:fd:
b6:b2:96:28:19:50:7f:5a:09:60:ac:77:60:59:28:c4:19:95:
31:4f:db:15:7e:c2:ac:bf:b6:b6:72:6d:7c:06:4c:a2:2b:48:
0a:a0:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:02 2026 by rpki-client