Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: Yl6wrZ+sXsKxDatdlLdGTpaaRk/AQCo8mHgC4AZvs7Q=
Subject key identifier: 92:2C:8D:A5:23:CE:8C:66:F8:87:21:8F:7D:F9:C2:A0:C6:C5:2E:2A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 547F091079C8CED5EDB68D3E04D86A9B50D04F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0289
Signing time: Mon 23 Feb 2026 08:28:30 +0000
Manifest this update: Mon 23 Feb 2026 08:23:30 +0000
Manifest next update: Tue 24 Feb 2026 10:35:30 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: vZ2aE+kBdRliBfj2R9prux85QUAIgx7NVrEirvcZOTQ=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 10:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7f:09:10:79:c8:ce:d5:ed:b6:8d:3e:04:d8:6a:9b:50:d0:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 23 08:23:30 2026 GMT
Not After : Feb 24 10:35:30 2026 GMT
Subject: CN=922C8DA523CE8C66F887218F7DF9C2A0C6C52E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:92:e2:3b:d6:eb:ec:85:0a:0e:2f:5d:41:
44:26:2e:03:64:d4:49:f0:7e:26:e3:d9:8f:5f:55:
8e:f2:dc:19:24:27:39:7e:67:8b:d2:2e:dd:85:ef:
c8:27:6c:3e:d4:e1:ca:c8:73:2b:7e:b6:2a:04:74:
fa:86:70:4d:bf:e1:a6:3f:2b:57:98:0f:19:b0:ac:
ab:cc:64:97:31:d6:ad:4d:dd:9b:c4:e3:d2:0c:d6:
5e:93:09:34:01:bb:af:d9:aa:38:9f:b5:f8:ea:67:
05:8b:6c:8b:74:e4:0f:dd:09:c7:0e:ff:10:8b:29:
c5:a0:1d:d2:de:c1:a6:6f:f8:08:82:cf:f1:3a:8e:
6f:11:a3:51:a5:07:08:5c:a1:d0:fb:0e:f4:89:02:
b2:69:87:70:ef:17:c7:68:a3:70:df:a8:f7:1e:c0:
37:45:98:1a:5e:49:37:2a:b5:44:6b:55:e3:e1:12:
19:93:6f:2b:e3:c3:d2:1e:6f:55:6b:e6:8f:25:16:
52:85:4e:3a:75:49:59:e8:7a:8e:1d:fc:92:2b:c2:
bc:4d:9c:ff:be:a4:7a:61:08:92:49:19:2b:e1:4b:
26:63:fc:8b:77:26:35:91:3c:77:8a:e2:7f:81:5d:
c6:a9:b0:0f:ed:1a:d1:93:d8:6f:1d:22:88:0f:7a:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2C:8D:A5:23:CE:8C:66:F8:87:21:8F:7D:F9:C2:A0:C6:C5:2E:2A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:00:fc:39:dc:9f:3f:00:cd:da:f4:6f:e1:d2:9f:74:f0:
21:a7:5a:04:45:8f:c4:cd:38:e1:f3:53:da:a5:10:c2:a0:ec:
b1:64:f5:21:7f:65:56:d7:0c:c2:76:5d:b7:50:02:0c:86:74:
d2:9c:52:9a:a4:92:24:96:aa:22:82:8a:9d:a6:91:bb:d7:46:
9b:2f:17:bb:f7:97:a5:69:37:9e:27:97:88:47:e5:05:5f:f8:
ac:14:79:23:16:0b:3b:4b:98:5a:be:a1:84:8d:79:cd:7c:93:
ad:71:3b:04:e4:5a:2b:e4:50:a9:c7:bc:d2:17:51:b5:32:a9:
c8:aa:19:e9:57:00:f4:05:62:d4:91:87:47:96:5e:79:dd:6f:
b0:04:99:93:c3:4f:90:c4:55:e0:31:cd:6c:57:d7:b2:3b:c8:
d9:e5:c7:99:88:38:e5:b6:48:88:fc:7a:15:7c:4f:73:c5:66:
e3:7b:59:78:22:49:58:ca:77:0d:00:60:60:47:1f:1b:7b:c8:
c3:b8:2a:b5:5a:3e:b6:ce:c0:b2:4c:07:98:49:de:e3:4a:10:
c8:bf:d7:d6:06:7e:75:b4:18:fa:2b:d5:24:81:b9:c3:99:58:
e8:12:3b:50:7e:93:bd:98:a7:63:f3:2f:db:73:9f:28:02:f8:
7a:92:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:40:19 2026 by rpki-client