Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: g2ktOYOQ+EdjtP2f/Sb+NR2V06rb1dlaDKEBUoNdJbs=
Subject key identifier: 86:89:76:DE:CC:E4:05:46:72:1F:FC:98:9E:88:84:FB:0C:CE:BB:07
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 16395B01600EB05D692C5D9405A903F65A2A7618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02FB
Signing time: Wed 20 May 2026 19:13:10 +0000
Manifest this update: Wed 20 May 2026 19:08:10 +0000
Manifest next update: Thu 21 May 2026 22:25:10 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: gBJ9HTQWxd6hAcnc0uVki3Eim8SbKBXAWLZPqmPUcys=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 22:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:39:5b:01:60:0e:b0:5d:69:2c:5d:94:05:a9:03:f6:5a:2a:76:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 20 19:08:10 2026 GMT
Not After : May 21 22:25:10 2026 GMT
Subject: CN=868976DECCE40546721FFC989E8884FB0CCEBB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:68:93:e9:73:f1:99:b1:8e:85:1f:67:d0:
45:5b:a5:c0:d2:51:9c:45:2d:ca:df:b6:15:52:66:
90:31:73:cb:10:fd:cf:b7:98:e1:b2:cb:82:eb:48:
d8:f4:86:f3:d9:08:10:90:a5:72:ce:02:58:e0:1a:
6a:d2:6b:5d:0f:f0:51:c5:4b:82:e4:2d:30:36:a8:
09:c4:43:a8:9e:7d:72:ad:c3:b1:15:c8:81:e5:c6:
b4:4c:93:a5:17:47:96:41:16:41:31:ad:af:2e:98:
f6:49:54:41:1c:e2:19:c4:df:6e:35:f9:5e:be:cf:
fa:6f:bb:fb:9b:5c:86:b5:f1:e8:d7:8b:c6:aa:ee:
6b:eb:d2:4f:13:9b:7c:a8:34:ba:1b:13:e0:80:7b:
76:74:68:1b:af:9e:bf:65:fb:36:2c:5b:01:c4:e9:
fa:23:87:45:6e:29:d6:52:7f:1c:d1:92:b0:b3:fb:
8d:fd:8a:6e:89:cf:74:ef:8f:ee:a5:2e:37:5b:0a:
b5:9a:8c:1d:af:42:38:c1:fe:2a:ec:9e:f5:02:28:
9d:1c:6f:70:67:a5:1a:d6:1a:51:9a:10:5d:00:e5:
9c:f2:71:65:3f:0e:33:c2:27:2b:bd:ef:58:0f:65:
4f:77:70:f4:5b:22:d1:a1:e5:b8:c0:b4:be:e2:43:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:76:DE:CC:E4:05:46:72:1F:FC:98:9E:88:84:FB:0C:CE:BB:07
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9f:97:ee:32:8e:ff:17:b0:0d:af:07:52:9e:75:3a:ee:66:
e7:50:95:e6:f9:bd:82:5a:65:fb:e0:05:0b:1b:d2:84:21:42:
84:69:e6:bb:ae:6b:a2:b0:7b:c7:09:54:6d:a4:cb:64:4b:0c:
68:cc:0a:fc:b4:98:a9:cd:92:cd:d3:51:53:2f:c8:84:58:de:
7e:c8:a2:17:26:51:c6:7f:d2:dd:3c:d5:88:12:ed:67:7b:5c:
23:4e:41:97:06:56:f8:c8:8b:e0:da:32:e2:77:5a:2f:4c:7c:
51:fd:d0:d6:2d:4d:c1:3c:f2:28:3c:8e:87:3f:46:0a:44:c0:
f4:68:d1:6d:93:d2:96:0b:f7:0f:30:6c:50:9c:dd:e5:9d:fc:
7c:14:b9:b0:b1:ed:63:5b:16:51:08:e5:6f:9c:36:ef:ab:a2:
98:f4:88:af:09:56:a1:ff:80:04:4c:30:6d:ac:2b:31:80:3e:
56:50:1c:f6:7a:dd:67:f6:f9:9f:5d:82:cc:56:6d:b0:1e:32:
66:cc:07:cb:2e:da:31:9c:cd:2d:ed:c7:45:64:cb:8f:4f:dc:
ae:27:f0:61:07:11:81:8b:4f:20:fa:ad:d5:c3:22:d2:84:31:
48:c2:16:8a:9c:c8:a3:2d:1c:e1:81:c2:57:f5:83:53:38:6a:
42:88:d8:fa
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUFjlbAWAOsF1pLF2UBakD9loqdhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MjAxOTA4MTBaFw0yNjA1MjEyMjI1MTBaMDMxMTAvBgNV
BAMTKDg2ODk3NkRFQ0NFNDA1NDY3MjFGRkM5ODlFODg4NEZCMENDRUJCMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIGiT6XPxmbGOhR9n0EVbpcDS
UZxFLcrfthVSZpAxc8sQ/c+3mOGyy4LrSNj0hvPZCBCQpXLOAljgGmrSa10P8FHF
S4LkLTA2qAnEQ6iefXKtw7EVyIHlxrRMk6UXR5ZBFkExra8umPZJVEEc4hnE3241
+V6+z/pvu/ubXIa18ejXi8aq7mvr0k8Tm3yoNLobE+CAe3Z0aBuvnr9l+zYsWwHE
6fojh0VuKdZSfxzRkrCz+439im6Jz3Tvj+6lLjdbCrWajB2vQjjB/irsnvUCKJ0c
b3BnpRrWGlGaEF0A5ZzycWU/DjPCJyu971gPZU93cPRbItGh5bjAtL7iQz2nAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUhol23szkBUZyH/yYnoiE+wzOuwcwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAip+X7jKO/xewDa8HUp51Ou5m51CV5vm9glpl++AFCxvShCFChGnmu65r
orB7xwlUbaTLZEsMaMwK/LSYqc2SzdNRUy/IhFjefsiiFyZRxn/S3TzViBLtZ3tc
I05BlwZW+MiL4Noy4ndaL0x8Uf3Q1i1NwTzyKDyOhz9GCkTA9GjRbZPSlgv3DzBs
UJzd5Z38fBS5sLHtY1sWUQjlb5w276uimPSIrwlWof+ABEwwbawrMYA+VlAc9nrd
Z/b5n12CzFZtsB4yZswHyy7aMZzNLe3HRWTLj0/crifwYQcRgYtPIPqt1cMi0oQx
SMIWipzIoy0c4YHCV/WDUzhqQojY+g==
-----END CERTIFICATE-----
Generated at Thu May 21 13:21:53 2026 by rpki-client