Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: BVik22les7lgq8dg4h9EWBHWtdUwEcrOU+i5evo0i5o=
Subject key identifier: E5:8E:44:24:4C:E4:DC:26:B9:E5:A1:1F:51:06:C7:5C:7A:1A:15:D4
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 435CBD125DBA314937727CEF82DC9B71252A5C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0392
Signing time: Wed 09 Sep 2026 19:23:04 +0000
Manifest this update: Wed 09 Sep 2026 19:18:04 +0000
Manifest next update: Thu 10 Sep 2026 21:08:04 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Gq6BBDNVZl9ZE+68J0LLVSsSXg76W2fMLp8RVtfwGKI=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5c:bd:12:5d:ba:31:49:37:72:7c:ef:82:dc:9b:71:25:2a:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 9 19:18:04 2026 GMT
Not After : Sep 10 21:08:04 2026 GMT
Subject: CN=E58E44244CE4DC26B9E5A11F5106C75C7A1A15D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:60:28:01:5f:17:17:10:c5:71:7f:a1:2e:
db:4a:7e:26:b5:db:21:bb:35:55:dd:e7:87:61:ab:
fc:3b:e2:57:fa:bd:64:fa:c4:a6:39:f1:1c:04:3d:
55:52:16:d4:2a:d4:cc:e6:76:46:9e:96:15:fd:6f:
e5:e3:8d:71:72:19:8a:08:c5:8e:45:37:22:75:1f:
ab:4c:8f:26:7a:da:c3:cf:09:88:01:5d:92:2d:5e:
a1:6d:e0:29:32:6e:5e:fc:01:7c:b6:2c:18:81:e6:
8b:b1:b3:5f:c8:cd:b0:af:e5:6e:00:d1:cc:62:dd:
af:28:05:4f:53:95:81:fb:7e:60:fc:f8:5b:92:af:
53:ab:6d:6e:8b:ad:11:b5:33:44:de:1b:a2:af:e8:
ae:07:db:ec:a1:7b:a6:ea:f4:bd:f0:a9:06:77:b7:
46:11:d6:09:4b:e3:bb:09:0a:d8:f6:ec:eb:15:fd:
65:de:66:28:3b:03:4e:a0:1e:25:70:e2:3b:a2:30:
8c:6b:b6:c9:e9:96:72:f0:9f:72:fd:18:f8:fa:69:
fd:15:0f:79:96:6e:a1:9c:54:ce:3c:bf:4b:49:70:
50:e1:bc:41:91:06:ff:79:0b:59:e5:ca:0e:35:b4:
a1:1a:48:3a:a9:11:77:d9:89:6f:d5:5b:aa:4c:14:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:44:24:4C:E4:DC:26:B9:E5:A1:1F:51:06:C7:5C:7A:1A:15:D4
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:05:f7:52:b8:7a:c9:f8:66:cb:95:7b:93:1e:9c:70:fd:38:
f3:8a:60:ac:3d:30:6b:ab:0c:f0:9d:cb:5d:a3:c1:50:db:57:
1a:68:a5:7a:a6:ac:2d:ba:89:54:a0:9f:f1:d4:69:92:a4:d2:
c6:bb:e6:f4:b8:cb:c5:b5:4d:c6:34:4b:df:5c:75:2e:c6:82:
4b:e6:19:97:28:0a:a0:8d:79:4f:71:05:a8:6b:d0:23:66:b9:
44:d7:a0:6f:63:4c:dc:ca:d8:e8:53:50:f4:67:fc:ec:30:0c:
d1:84:70:8e:97:40:f0:3a:45:ec:5c:93:f0:78:09:95:bf:3e:
f0:8c:60:b3:0a:40:36:27:17:61:43:3e:ec:4b:8b:e8:11:c3:
70:91:eb:09:d2:90:c9:b4:b4:a6:70:da:d1:f6:50:a8:b8:97:
8a:67:85:e8:0a:ff:38:72:0c:5f:9d:c2:9a:62:57:78:2d:cf:
20:8a:79:d6:dc:0e:1c:21:8d:71:08:5b:6c:45:3d:5a:d6:45:
69:85:12:a0:2e:d6:0c:2b:ee:3a:8f:81:74:d9:84:ea:63:01:
cf:1a:96:63:11:30:3c:5e:3a:85:f6:e7:24:f4:ff:6f:2d:47:
3f:66:cc:bf:a9:6d:15:25:84:cf:94:c0:7e:82:1a:0c:3e:8b:
f5:e8:6e:a6
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUQ1y9El26MUk3cnzvgtybcSUqXDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA5MDkxOTE4MDRaFw0yNjA5MTAyMTA4MDRaMDMxMTAvBgNV
BAMTKEU1OEU0NDI0NENFNERDMjZCOUU1QTExRjUxMDZDNzVDN0ExQTE1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqmAoAV8XFxDFcX+hLttKfia1
2yG7NVXd54dhq/w74lf6vWT6xKY58RwEPVVSFtQq1MzmdkaelhX9b+XjjXFyGYoI
xY5FNyJ1H6tMjyZ62sPPCYgBXZItXqFt4Ckybl78AXy2LBiB5ouxs1/IzbCv5W4A
0cxi3a8oBU9TlYH7fmD8+FuSr1OrbW6LrRG1M0TeG6Kv6K4H2+yhe6bq9L3wqQZ3
t0YR1glL47sJCtj27OsV/WXeZig7A06gHiVw4juiMIxrtsnplnLwn3L9GPj6af0V
D3mWbqGcVM48v0tJcFDhvEGRBv95C1nlyg41tKEaSDqpEXfZiW/VW6pMFLw7AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU5Y5EJEzk3Ca55aEfUQbHXHoaFdQwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAQAX3Urh6yfhmy5V7kx6ccP0484pgrD0wa6sM8J3LXaPBUNtXGmileqas
LbqJVKCf8dRpkqTSxrvm9LjLxbVNxjRL31x1LsaCS+YZlygKoI15T3EFqGvQI2a5
RNegb2NM3MrY6FNQ9Gf87DAM0YRwjpdA8DpF7FyT8HgJlb8+8IxgswpANicXYUM+
7EuL6BHDcJHrCdKQybS0pnDa0fZQqLiXimeF6Ar/OHIMX53CmmJXeC3PIIp51twO
HCGNcQhbbEU9WtZFaYUSoC7WDCvuOo+BdNmE6mMBzxqWYxEwPF46hfbnJPT/by1H
P2bMv6ltFSWEz5TAfoIaDD6L9ehupg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:32:29 2026 by rpki-client