Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 7Aqh+mRE7UEuZVeEZ4/oXmi+c1dph7pd7df/h4fV8e8=
Subject key identifier: 63:A6:54:58:12:D8:18:B1:D1:87:E5:16:16:94:B5:81:A3:D4:BE:9D
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 35EDE1B92A2E54362BDAB239D59B23AE69B0FCDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03A5
Signing time: Thu 24 Sep 2026 04:29:33 +0000
Manifest this update: Thu 24 Sep 2026 04:24:33 +0000
Manifest next update: Fri 25 Sep 2026 04:53:33 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Y6hHrs9dAMqzOo0O4C/j02mZrkEUkOBc1nuUie97cDU=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ed:e1:b9:2a:2e:54:36:2b:da:b2:39:d5:9b:23:ae:69:b0:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 24 04:24:33 2026 GMT
Not After : Sep 25 04:53:33 2026 GMT
Subject: CN=63A6545812D818B1D187E5161694B581A3D4BE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:46:c8:0b:d8:15:59:09:2f:be:a9:9b:f3:
40:c4:3d:17:47:26:46:c5:96:aa:de:e1:b7:fb:d4:
32:0c:99:ea:1f:de:90:cc:26:05:01:21:05:d9:75:
ea:2d:dd:73:7e:99:07:57:d8:4e:c0:51:b5:d8:3e:
8b:ff:bb:9d:85:a4:e7:f0:93:83:7f:7f:94:7a:3c:
d4:ee:9f:76:d2:1d:2e:bb:6e:31:96:fc:a2:ed:72:
84:4d:2b:55:41:a8:45:2f:a1:5b:10:86:9f:b3:c3:
0b:31:89:bb:2d:5a:40:8e:c1:5e:a4:46:9d:86:52:
1f:e6:c1:30:05:a4:d6:1e:b2:91:c5:5d:e2:bb:45:
6f:c6:e7:35:d4:c6:46:6b:c1:89:3e:de:0f:f8:4c:
ad:d6:ed:08:94:39:2e:c0:cc:61:d0:c4:ba:60:cd:
32:f7:b7:e6:15:48:5a:ae:7e:45:61:e3:2e:89:1a:
6d:bc:c9:3a:60:fd:ba:4c:38:c9:69:01:92:d3:34:
70:fd:62:1f:0d:2d:18:71:5b:f0:f9:fd:3e:70:1f:
1a:ed:2d:85:fa:67:d7:e8:b4:39:4e:3a:ee:f6:49:
f6:0a:ce:bd:c9:f5:ac:eb:f6:46:91:94:c1:78:5f:
00:35:14:4e:45:98:e4:fd:4b:68:06:85:71:01:af:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:54:58:12:D8:18:B1:D1:87:E5:16:16:94:B5:81:A3:D4:BE:9D
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0d:ce:eb:6b:fe:1d:1f:52:d0:67:61:c0:30:b2:75:17:54:
e2:43:d9:20:08:23:c5:ad:2a:d2:42:50:27:d3:ca:fe:08:83:
af:5e:a2:4b:4f:77:c0:18:b7:e0:5d:07:35:4c:32:71:0d:87:
8a:bd:c9:45:80:6c:3f:05:8a:f6:45:a5:c8:35:55:06:3c:f8:
a5:92:cf:7d:ff:a7:08:af:ae:52:66:36:04:22:10:62:b7:a0:
0d:cf:45:be:5d:3d:0b:27:7c:d9:fd:5e:93:c3:a0:e8:09:02:
fe:11:95:b1:fb:ad:b8:a3:ff:a6:89:3a:5f:05:c8:60:e7:fe:
d7:b5:43:22:6d:14:e6:65:93:6c:c3:a7:c4:f6:34:b0:e7:1f:
ba:8c:6c:29:4b:86:ef:3a:ca:b8:04:9e:49:63:c9:41:55:5e:
39:ae:cb:58:d9:8f:f8:68:6c:d4:d7:1c:40:23:63:57:95:9c:
e3:99:2f:54:41:bd:e8:c2:cd:64:ed:04:24:07:31:78:0a:34:
04:f3:bf:ed:75:88:df:3e:59:e2:96:a2:5a:58:4e:fb:01:af:
20:42:f3:37:da:89:a7:1c:73:fc:5d:8b:04:f2:47:98:cd:e3:
11:05:7a:7d:89:bb:79:1a:61:e9:90:9b:5d:df:b9:28:93:f6:
ef:47:ad:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:17:41 2026 by rpki-client