Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 5x+jQw2dLtEKLvxI739zRdBGvic+zfacYoWsbQi+ZCU=
Subject key identifier: 5E:14:E1:4F:3F:A8:11:26:A1:02:E0:B8:31:1B:92:57:12:D1:77:A6
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5FC19B3AC04829CAABCDBA066156178BAC53DD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0352
Signing time: Fri 24 Jul 2026 01:19:53 +0000
Manifest this update: Fri 24 Jul 2026 01:14:53 +0000
Manifest next update: Sat 25 Jul 2026 03:37:53 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: QPafbCnGS8YSftAfdFHfvPM3rGedBzmNecAjnHw0leA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c1:9b:3a:c0:48:29:ca:ab:cd:ba:06:61:56:17:8b:ac:53:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jul 24 01:14:53 2026 GMT
Not After : Jul 25 03:37:53 2026 GMT
Subject: CN=5E14E14F3FA81126A102E0B8311B925712D177A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:a0:3f:72:09:80:14:9c:6d:5f:42:93:5f:
9a:f5:6e:f9:25:f3:b1:2d:87:6b:d9:43:5b:71:87:
6f:50:9a:dc:8f:83:ae:d2:17:e0:4a:37:b4:7d:e3:
14:b2:b8:83:e3:21:3e:23:47:3b:de:3c:88:e1:ba:
69:c5:89:a7:a1:85:c9:27:3f:57:15:9a:c2:ad:26:
6d:7c:2e:0c:2a:3d:12:8e:9a:16:ff:d9:7f:e0:a5:
0c:fd:67:e3:38:d5:c7:6b:d8:54:1c:65:97:b2:92:
9c:1f:f9:41:fd:59:cb:57:fd:c3:b3:a8:4b:73:7a:
88:4a:b6:ae:21:87:96:da:b6:a6:cc:c4:b1:33:ed:
3a:5f:a1:32:1f:5f:2f:ce:a5:2b:9a:f8:71:5c:bf:
91:f0:7a:4f:35:49:cb:dc:32:04:7d:f1:67:4c:0b:
f9:06:9a:82:78:df:2a:ad:7a:00:3e:18:a1:bc:36:
ed:c5:7e:8c:88:2a:1f:c0:75:ca:3c:b3:85:8b:00:
88:42:82:d1:fa:53:4b:7c:26:e6:09:1b:9c:11:e4:
11:25:5c:bb:f9:75:4e:1f:e0:6d:5a:97:59:27:d0:
21:4f:5d:76:45:58:80:b6:48:bc:51:68:56:50:85:
88:dd:8b:16:45:3e:ad:ee:ba:47:60:82:0e:a2:93:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:14:E1:4F:3F:A8:11:26:A1:02:E0:B8:31:1B:92:57:12:D1:77:A6
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4d:97:9c:a6:c5:fc:b7:39:12:76:f7:18:bd:50:9a:4c:85:
77:4c:09:d6:7d:cd:97:af:91:f2:a9:83:37:55:0e:dd:36:45:
e3:8e:c2:7c:b3:02:6e:5f:32:d5:21:2d:bd:06:e6:fb:5e:82:
0d:5e:d8:58:69:19:ff:f9:74:b0:79:70:32:f9:64:74:b1:d5:
95:75:08:d8:7f:bb:cf:46:6e:4a:fe:af:27:97:25:a2:e1:3e:
25:a9:06:2c:c3:06:a0:bc:f2:91:16:bf:a8:6b:0e:b0:f0:ed:
cd:90:9d:88:8b:51:9a:00:78:76:c8:8e:28:64:e9:f5:56:9c:
28:19:c9:38:48:01:f1:b0:dd:62:39:4e:bf:2f:51:a0:d0:6e:
8a:77:2b:64:a4:2c:af:95:11:cb:e4:61:c3:82:a8:59:62:bc:
7b:41:de:9f:2d:ee:ba:5b:42:9f:57:ba:15:41:57:bd:ad:ce:
b7:39:2f:8d:58:d0:1c:75:87:37:e4:20:06:56:2e:39:57:67:
56:f7:a2:fb:6e:58:e3:03:7e:ba:45:fd:0e:62:7e:8f:4b:1a:
5d:28:7b:d9:2f:bd:6a:fe:87:8b:a9:6d:95:86:e6:fb:66:ce:
28:b7:30:4b:9b:36:60:16:a2:de:29:40:f3:21:01:67:d3:2f:
e9:b9:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:40 2026 by rpki-client