
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
File: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft (raw, json)
Hash identifier: D+xj8dEp/zoHuEx7UCmdGCDd9VXd7GifweSjzcOI39Y=
Subject key identifier: 48:69:B3:2A:02:3B:AD:D7:E4:7E:04:19:46:28:0C:32:E3:6A:0F:9C
Authority key identifier: DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
Certificate issuer: /CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Certificate serial: 66D9804D4D503E8DA36D8AABD28A44A098F04378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject info access: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
Manifest number: DC
Signing time: Wed 25 Mar 2026 16:08:16 +0000
Manifest this update: Wed 25 Mar 2026 16:03:16 +0000
Manifest next update: Thu 26 Mar 2026 18:18:16 +0000
Files and hashes: 1: DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl (hash: tbUA45amiKHsptUW5qBTWKrtmPY6vrPtEPsegDP3jq8=)
2: AS60900.asa (hash: dCbHK8QnJn0GjfqUYkqvzSYjLA92Os/T9LYyF/At47k=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d9:80:4d:4d:50:3e:8d:a3:6d:8a:ab:d2:8a:44:a0:98:f0:43:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca6d00b058a2a65a44292e830ada3ece9c1eedb
Validity
Not Before: Mar 25 16:03:16 2026 GMT
Not After : Mar 26 18:18:16 2026 GMT
Subject: CN=4869B32A023BADD7E47E041946280C32E36A0F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:06:04:8c:4c:e5:e1:64:59:16:94:3c:55:
7d:5d:e9:10:48:e1:91:37:a7:33:32:c7:22:ee:d6:
2c:a4:66:41:03:e1:d8:59:5e:65:a5:0e:0f:fa:87:
ed:a4:b0:e6:41:23:ba:79:e6:1b:3c:eb:c7:22:be:
66:ea:a9:8f:a4:a9:08:36:44:b9:81:c8:8f:da:f9:
2f:c8:30:4e:58:cc:bd:59:38:ad:c7:25:04:34:e1:
2e:7a:37:92:c7:68:3f:6a:da:ea:9d:2d:30:a4:1e:
5d:36:98:d4:c9:d1:bb:8d:04:ff:d4:c2:c2:8e:1a:
0d:6d:43:bd:3b:25:d8:75:85:52:12:0a:9e:81:df:
ae:64:62:70:aa:bd:e2:10:56:67:82:37:48:5a:84:
9d:ff:06:de:4f:5b:cd:36:d4:42:5f:c3:d4:2a:59:
a8:02:35:36:ba:0f:8d:01:b9:52:cd:dd:dd:02:55:
21:12:ef:04:2f:3c:5b:79:07:ab:7b:7f:62:99:fa:
15:d4:ee:2d:74:78:44:ed:fd:11:d1:95:03:71:38:
33:82:bf:52:a7:78:cc:d9:64:03:a1:d1:6c:d7:65:
a9:9c:a1:de:af:91:b5:03:c6:eb:af:9b:8a:bb:bf:
84:64:a8:57:44:e9:1e:4e:91:61:44:aa:9d:fa:f8:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:B3:2A:02:3B:AD:D7:E4:7E:04:19:46:28:0C:32:E3:6A:0F:9C
X509v3 Authority Key Identifier:
keyid:DC:A6:D0:0B:05:8A:2A:65:A4:42:92:E8:30:AD:A3:EC:E9:C1:EE:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KbQCwWKKmWkQpLoMK2j7OnB7ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/1/DCA6D00B058A2A65A44292E830ADA3ECE9C1EEDB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2b:c7:0d:43:cd:b4:3f:87:04:1d:19:fd:9e:54:29:8e:86:
f4:41:e2:58:f7:7f:11:04:ef:1e:11:9e:0f:2f:e0:42:aa:fd:
d1:5a:4b:c5:95:48:e4:27:4d:8a:09:1c:e6:80:25:4c:ec:ac:
65:9b:88:37:7e:5d:17:38:86:17:97:a4:b1:2d:55:eb:41:bc:
50:9a:a4:af:81:58:81:75:18:26:4d:c8:16:24:57:b8:8d:b0:
af:b0:07:fb:b7:7c:34:b2:3f:ab:59:bb:9a:ea:2f:85:22:a5:
76:3c:43:e1:f8:1b:e4:b6:91:9f:66:6d:00:4e:2a:08:1c:82:
49:95:c5:c8:e6:9a:9f:df:e1:25:8b:48:f6:72:88:91:3b:52:
93:4b:5b:37:0d:fd:94:a4:79:95:59:3e:17:23:6a:3a:57:fe:
59:59:2a:c6:fa:e7:28:89:9a:58:4b:1d:8c:bc:00:96:b1:7f:
75:67:71:dd:dc:8c:d1:79:50:85:7e:1e:4a:38:6a:e9:ab:40:
cc:cb:9a:25:73:38:88:2a:41:21:21:f5:36:ed:ff:b4:f4:25:
8f:c5:7c:0a:8f:af:a1:4b:7b:dd:ea:7b:8c:ee:ff:c1:81:55:
ed:ff:b9:c9:74:35:03:a9:80:f7:e5:92:a5:23:de:05:ee:38:
a6:27:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:53 2026 by rpki-client