Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: kV1wS20opOeDjVHv+MQqWJ/nRqDL5ADXwiv+99SQ9ZE=
Subject key identifier: C3:2A:E2:85:E2:6D:58:DA:79:D5:BD:8E:E0:39:F7:E2:D0:69:60:D4
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4E4A93F9CE2BCED429B33DA7FCF2265855A289D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03EA
Signing time: Sat 14 Nov 2026 10:38:28 +0000
Manifest this update: Sat 14 Nov 2026 10:33:28 +0000
Manifest next update: Sun 15 Nov 2026 14:32:28 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: GRQFUCgml3v+/6LZ4zhYuBACsbTt7R4aRgXis70E820=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4a:93:f9:ce:2b:ce:d4:29:b3:3d:a7:fc:f2:26:58:55:a2:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 14 10:33:28 2026 GMT
Not After : Nov 15 14:32:28 2026 GMT
Subject: CN=C32AE285E26D58DA79D5BD8EE039F7E2D06960D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:d2:1a:43:1a:7a:ba:1c:33:0f:8c:ae:c0:
1d:57:f1:69:00:32:29:b6:3b:bb:a9:b5:d7:e8:60:
28:43:0b:51:02:49:ad:b1:a8:69:dd:82:90:c6:5d:
2d:14:6b:ad:b1:49:a9:9a:53:1f:d7:a3:87:2a:d2:
54:02:b3:37:89:b8:db:e7:fb:2b:f7:ed:30:e5:94:
68:fa:35:e9:e7:1c:93:98:7a:bf:e8:77:41:6e:82:
0f:2a:33:53:ab:dc:d7:a8:63:b2:23:49:b7:0c:a3:
27:17:62:d5:24:1b:0a:a0:0b:e1:ba:b8:b1:19:ce:
92:5d:74:7b:5a:f3:35:dd:d7:75:0d:1d:05:26:6c:
99:d9:e9:81:f0:db:43:70:e2:57:4d:d6:90:a8:2e:
77:27:b6:12:87:21:8c:da:a6:b4:84:3a:36:7e:51:
96:df:e6:5b:81:55:c3:40:4c:a4:65:48:a0:54:08:
8c:30:c1:23:2c:b7:88:7a:eb:2e:49:fc:6c:e6:3c:
9b:81:ad:da:33:6c:44:7a:b1:fc:1e:7e:78:40:71:
a5:72:cf:bb:1d:c2:e7:f7:47:95:17:8c:33:e3:11:
7d:1d:db:f3:eb:c5:71:51:07:5c:e0:1a:e9:4e:d0:
21:b6:5f:cf:02:8d:24:e8:ef:34:57:cb:5f:8e:3a:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:E2:85:E2:6D:58:DA:79:D5:BD:8E:E0:39:F7:E2:D0:69:60:D4
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:00:2f:c9:56:28:be:36:41:e8:6a:48:12:bf:7d:89:b8:03:
5f:46:ab:3c:37:06:70:d7:68:51:f7:f2:4c:13:7f:db:ee:9f:
f1:15:3a:48:95:a6:49:96:c3:69:e9:62:f7:5f:48:8d:ff:db:
98:e4:e4:6b:3a:17:4c:08:fc:98:1c:04:2e:e5:fa:1a:2b:76:
c3:5f:aa:db:8f:b7:d4:ac:2e:94:a0:70:a0:26:a9:56:d0:90:
27:3f:19:7b:7c:fe:42:19:10:8a:e7:80:98:ae:9b:6f:ac:67:
8b:eb:e3:fb:0c:4f:55:68:2a:d5:cb:dc:69:51:27:d6:06:7b:
2c:01:6e:eb:60:89:32:00:81:c5:25:12:cd:4b:10:8a:49:50:
d2:21:77:1d:e9:d8:66:21:ca:6b:bd:6a:22:eb:1c:96:fe:c7:
9c:16:f9:a2:c8:42:9d:df:a1:46:5b:47:e6:20:4b:5d:09:49:
d5:05:cf:ea:be:05:9d:87:aa:9e:d5:1b:c4:ad:8d:69:ba:20:
35:b6:1b:5b:42:a9:15:9a:4e:e0:6d:8a:cd:f7:e0:67:21:8b:
15:7b:ac:75:e7:cf:e9:5d:44:ab:60:ad:c3:05:6e:0d:a7:68:
7c:55:48:fd:d6:8b:81:a6:70:46:10:30:1b:f1:bf:29:f9:94:
f5:ec:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:12:38 2026 by rpki-client