Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: Ny7FgPBL/q4wmqx6F21BO7MvJDjJVepmtGAZHTVZsWI=
Subject key identifier: 87:42:CA:EC:21:6F:83:67:A6:D2:8A:FF:9A:25:FD:47:11:34:45:B0
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 515BADC9390643C645ACC9A7D95CFA0C473D0F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 70
Signing time: Tue 12 May 2026 19:39:28 +0000
Manifest this update: Tue 12 May 2026 19:34:28 +0000
Manifest next update: Wed 13 May 2026 22:57:28 +0000
Files and hashes: 1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: 6/kbc0U8sUL9QBG8cWe/SsbMjEt3RPcOAbz9o9A1ZPA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5b:ad:c9:39:06:43:c6:45:ac:c9:a7:d9:5c:fa:0c:47:3d:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: May 12 19:34:28 2026 GMT
Not After : May 13 22:57:28 2026 GMT
Subject: CN=8742CAEC216F8367A6D28AFF9A25FD47113445B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:10:ee:dd:ee:f6:61:3b:e1:6a:0f:7e:e1:
59:5f:6c:b1:8e:16:72:4a:a1:ab:09:06:96:26:45:
43:a1:79:b7:bd:9b:6b:97:2a:4d:08:34:59:72:97:
af:c9:b3:de:e9:b1:10:9f:b6:0e:41:8f:4f:21:1d:
4a:0e:fa:d5:f6:23:2c:89:17:18:fa:09:8d:42:1b:
11:85:33:e5:92:08:9e:0c:db:79:fb:3f:cd:43:21:
26:d4:f6:e1:e8:b4:55:c6:3c:70:53:71:ac:50:a2:
d3:d7:bb:5b:86:38:6e:3e:5e:bf:5a:34:5a:7f:22:
ea:c8:f9:ae:0c:20:d2:75:15:c6:d0:50:07:19:ac:
5e:2f:d3:2a:9d:17:f0:7a:2a:04:7d:f4:e8:a7:84:
81:c0:ce:87:bd:b2:d2:77:4a:56:08:76:65:83:2f:
b8:d1:67:90:f1:40:a0:2a:85:86:c3:b1:e8:c3:9e:
6b:e6:cd:50:81:92:a4:2b:a1:a1:68:26:13:56:99:
89:0d:ba:fb:81:87:26:7f:44:90:f2:b9:90:c3:94:
c3:9b:d5:ae:73:8c:10:34:01:ad:62:39:39:74:61:
24:79:70:e0:86:18:5e:72:a6:8c:65:f1:5d:f4:8d:
02:73:59:cb:a5:3e:f9:34:cc:0a:a2:c0:e5:82:54:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:CA:EC:21:6F:83:67:A6:D2:8A:FF:9A:25:FD:47:11:34:45:B0
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:25:8e:e9:d1:50:07:79:01:6c:61:57:e9:15:30:69:fd:
d0:9e:b5:b7:35:2e:33:c6:e7:ab:c1:e7:29:f9:4e:21:0e:8b:
80:1d:1f:f3:e7:60:77:8d:0f:56:27:e4:84:b4:c6:17:7f:d9:
4e:ba:c5:e6:de:81:72:a2:b9:51:89:fe:09:91:36:a3:49:f2:
5c:c6:b0:93:e8:c9:8f:52:cd:4b:5d:fe:77:8a:9e:11:74:ae:
5c:8c:6f:a1:be:e7:45:70:9b:18:b0:d0:04:ff:1d:de:88:54:
44:e7:08:7e:ac:e7:38:2c:44:16:90:2d:ca:74:4a:8b:f7:05:
d3:7e:11:b7:1b:1e:6d:83:79:33:7f:aa:f6:13:7c:a7:0e:a3:
31:3f:91:3b:6f:36:33:ac:c5:55:70:42:62:a6:c1:44:7a:bb:
0d:09:7e:39:6c:35:0c:18:f7:3f:b8:b0:f5:63:22:37:b1:94:
17:77:84:aa:4b:f4:ee:d6:b2:79:9c:f9:38:f5:ac:33:1d:9b:
f9:12:f4:e0:8d:2a:31:9f:1c:9e:57:be:22:44:90:56:f9:d7:
0c:8d:fe:34:fc:96:9a:4d:2b:85:b3:43:7f:07:b8:57:73:94:
33:58:5f:3f:2b:e6:8d:37:e1:f8:5d:4d:c2:42:d8:dc:e3:07:
47:c4:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:44 2026 by rpki-client