Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
File: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft (raw, json)
Hash identifier: Op8FW21FrC/gvDc2I8qeuJoc8vme5ljI/GGaZD6OgBg=
Subject key identifier: BF:DF:54:F9:FE:4F:5B:C8:3B:0E:44:6E:14:0F:6B:32:5A:F3:DF:13
Authority key identifier: 37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
Certificate issuer: /CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Certificate serial: 301719D1D37B1C71958C9D8690C2337EA458F5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
Manifest number: 013D
Signing time: Thu 24 Sep 2026 15:01:04 +0000
Manifest this update: Thu 24 Sep 2026 14:56:04 +0000
Manifest next update: Fri 25 Sep 2026 16:35:04 +0000
Files and hashes: 1: AS202400.asa (hash: q3LpUDw4r+6l/2jI7qXsY7UJ5ooy5LBROGNPifJnhcc=)
2: 3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl (hash: XArmjrDwjIxuFmFOa8mrYR0PSUS+Y/CVBNxKKJfsrLM=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:17:19:d1:d3:7b:1c:71:95:8c:9d:86:90:c2:33:7e:a4:58:f5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3707ac2ece73e50c9eae2ff086f24d45a8175b7b
Validity
Not Before: Sep 24 14:56:04 2026 GMT
Not After : Sep 25 16:35:04 2026 GMT
Subject: CN=BFDF54F9FE4F5BC83B0E446E140F6B325AF3DF13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:d5:d7:ab:29:c0:e4:78:14:c9:17:f9:8d:
10:f6:47:45:e2:43:21:e8:5b:5f:b8:96:99:39:ed:
24:80:b2:6e:05:25:d0:58:5a:4c:cb:63:3a:2f:08:
3e:0e:9d:b6:0c:2b:c9:bb:9f:bf:8d:ea:aa:44:48:
ff:07:15:ef:d3:e2:9a:a9:35:f9:32:3e:97:9a:eb:
c5:44:d7:5b:d9:24:ee:63:a0:ad:7a:88:ad:02:bc:
40:a2:18:3c:f6:4f:03:87:31:b1:e1:4d:7c:97:a8:
2b:f2:2d:03:0f:a0:97:65:d3:ef:18:a8:b3:b1:f2:
d9:1e:fd:1c:1f:c3:7d:f2:a3:a2:86:b7:22:9a:f3:
82:4f:26:8a:7b:15:cc:b8:87:fb:20:69:c8:00:e1:
c3:27:30:07:54:70:b9:ec:31:4e:4f:1f:fc:c3:3e:
c0:7f:a2:36:26:9a:2e:a3:81:c8:f0:99:0f:07:6e:
d8:c2:7b:83:27:26:ae:7f:85:91:94:0b:07:8f:f5:
37:2b:c2:aa:7d:30:0c:a9:ad:62:05:9a:f9:01:69:
fb:1d:34:88:ad:6e:f9:f0:94:66:b8:b5:89:7f:6b:
c6:33:17:dd:aa:97:d8:4f:7d:79:9e:b9:bb:d1:b4:
c1:eb:af:63:d5:25:00:95:a9:67:a2:fa:a5:5c:b3:
bd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:54:F9:FE:4F:5B:C8:3B:0E:44:6E:14:0F:6B:32:5A:F3:DF:13
X509v3 Authority Key Identifier:
keyid:37:07:AC:2E:CE:73:E5:0C:9E:AE:2F:F0:86:F2:4D:45:A8:17:5B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwesLs5z5Qyeri_whvJNRagXW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/2/3707AC2ECE73E50C9EAE2FF086F24D45A8175B7B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:60:69:4b:47:e9:18:9f:4d:b6:f9:b0:92:be:1a:a1:46:e4:
1b:54:bb:e0:e5:90:6e:a4:ae:63:7b:07:f9:f6:cd:71:c7:a2:
56:7c:23:62:07:33:6f:49:54:9b:b3:6e:2f:9e:5b:ce:9e:1f:
4a:ff:0d:48:7a:e1:5d:69:0b:9b:cc:15:04:0b:e2:14:1d:fe:
d7:eb:ba:c5:36:2f:8b:7b:0f:8c:f8:8f:32:90:c0:0d:02:ca:
41:f8:1b:06:82:7d:df:84:b1:d1:24:96:46:08:74:e7:59:ab:
a4:d0:8b:d5:fc:68:ae:4e:b9:53:59:45:a9:5d:8a:b3:95:e1:
28:a9:ec:72:66:75:cc:41:d9:77:5e:9f:0b:e3:b5:e3:b8:ca:
6b:69:e4:66:ae:1a:f9:2b:37:28:77:b3:0d:3e:8d:84:89:94:
6f:58:2e:76:4b:f2:44:43:4d:b6:0c:89:dc:62:4c:b5:2f:b3:
2b:f5:bd:16:b3:48:53:c6:74:22:f9:0c:37:3e:f3:f5:08:0d:
6e:cd:aa:29:eb:4c:fe:c3:4a:dc:d1:b8:3f:3d:c7:17:f2:b7:
f2:1f:f3:e3:98:a5:66:99:5c:0c:c1:ba:bb:d4:23:2a:bc:61:
c8:f6:ff:de:59:df:f4:f9:72:b3:9e:cf:ba:f1:7d:9a:5a:cd:
3a:4e:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:38:37 2026 by rpki-client