Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: xHmKvcnZtfZIA6yYxyvqFbZqMLsQ31VJ0eLwSSHy8P4=
Subject key identifier: A3:AD:00:E8:99:87:E2:76:D6:66:E5:26:23:5F:E3:94:F8:2A:9B:1B
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 24F9179C869239D4C5AE4F69E565BE726E946FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02BA
Signing time: Wed 01 Apr 2026 17:09:37 +0000
Manifest this update: Wed 01 Apr 2026 17:04:37 +0000
Manifest next update: Thu 02 Apr 2026 17:28:37 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: XwOUpOWabdHLUqENcCKskZOAHy2SG8yKhF0ONSCkq2E=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Apr 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f9:17:9c:86:92:39:d4:c5:ae:4f:69:e5:65:be:72:6e:94:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 1 17:04:37 2026 GMT
Not After : Apr 2 17:28:37 2026 GMT
Subject: CN=A3AD00E89987E276D666E526235FE394F82A9B1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:9b:04:5e:f9:ce:a3:a6:de:e7:62:10:10:
ea:63:12:49:d9:a8:8b:a2:3a:13:96:2b:4f:0b:a1:
28:ef:f0:c2:0a:0b:32:2b:bf:93:fa:98:db:b2:65:
69:01:22:d8:01:ad:a0:24:8b:3f:1a:da:19:81:15:
68:16:c4:52:42:85:aa:a9:10:c4:78:68:70:00:55:
ca:78:c9:cd:58:46:ce:5b:eb:b7:12:5d:a4:c7:39:
8b:cd:3c:79:57:39:d5:56:8a:0e:a4:7a:04:af:be:
2b:27:5a:29:48:a3:0b:b9:75:1d:3a:47:03:76:ed:
0f:f7:76:74:18:49:93:c2:93:c6:29:3a:12:45:97:
a2:a4:9d:12:a0:aa:34:cb:b0:78:61:13:32:25:46:
d7:8e:fb:8b:44:00:db:44:6c:43:39:4b:d1:59:61:
34:ae:16:37:77:21:24:18:cf:81:16:cb:8d:48:eb:
57:8e:23:fe:8e:9a:47:a2:ed:51:dd:1c:81:aa:34:
e3:d6:d9:41:c5:c1:ee:f8:10:ec:d2:06:fb:48:a7:
20:4b:ce:7f:03:c2:cc:c4:38:8d:1b:22:53:2d:19:
52:8f:08:07:04:70:b0:8f:c7:0f:e4:05:39:52:b2:
8f:f2:4a:05:8b:31:61:a8:e2:fd:ab:75:ed:5c:f4:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:00:E8:99:87:E2:76:D6:66:E5:26:23:5F:E3:94:F8:2A:9B:1B
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:ce:9b:dd:7f:26:e6:e8:f1:3f:ee:50:b3:19:38:ac:33:
e6:d5:a4:3e:e3:c1:ce:f9:c9:da:22:7e:68:3f:2d:bf:5f:88:
67:cb:2b:c9:5c:4f:b3:6c:c2:fb:05:ad:04:41:a0:de:7e:88:
f9:ec:94:b5:33:ff:e8:14:73:e8:c4:4a:c4:76:4d:39:64:40:
62:b0:37:7d:3c:c5:da:b7:76:97:0c:3f:d0:58:47:c0:8d:07:
28:63:4d:ea:8a:a2:42:37:f6:53:b2:87:b3:b1:64:3e:be:1b:
8a:51:b0:9a:2d:70:06:9a:82:c2:aa:81:9d:9c:f3:f9:7b:79:
7e:e6:de:35:10:27:23:53:2b:40:d7:76:6f:63:bc:76:1f:00:
28:f3:4d:a1:67:99:76:66:45:39:4b:91:59:6b:5c:3b:7e:1f:
6c:d9:a4:2d:5b:10:ec:d1:d7:ef:43:2d:51:ed:60:25:63:bc:
3a:63:45:e1:46:4f:28:73:9c:2c:e3:a5:fe:77:b4:02:f8:12:
58:fa:b8:f2:66:6a:ad:e1:6f:8f:ce:b9:49:62:14:f0:60:a0:
fa:6d:55:51:57:09:5a:02:67:0b:49:fc:9e:a5:cd:60:34:52:
18:01:ba:06:78:58:9e:98:36:26:e7:f2:8f:42:70:f4:ba:02:
f9:9d:d2:51
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUJPkXnIaSOdTFrk9p5WW+cm6Ub9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA0MDExNzA0MzdaFw0yNjA0MDIxNzI4MzdaMDMxMTAvBgNV
BAMTKEEzQUQwMEU4OTk4N0UyNzZENjY2RTUyNjIzNUZFMzk0RjgyQTlCMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEJsEXvnOo6be52IQEOpjEknZ
qIuiOhOWK08LoSjv8MIKCzIrv5P6mNuyZWkBItgBraAkiz8a2hmBFWgWxFJChaqp
EMR4aHAAVcp4yc1YRs5b67cSXaTHOYvNPHlXOdVWig6kegSvvisnWilIowu5dR06
RwN27Q/3dnQYSZPCk8YpOhJFl6KknRKgqjTLsHhhEzIlRteO+4tEANtEbEM5S9FZ
YTSuFjd3ISQYz4EWy41I61eOI/6Omkei7VHdHIGqNOPW2UHFwe74EOzSBvtIpyBL
zn8DwszEOI0bIlMtGVKPCAcEcLCPxw/kBTlSso/ySgWLMWGo4v2rde1c9HGlAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUo60A6JmH4nbWZuUmI1/jlPgqmxswHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAl1LOm91/Jubo8T/uULMZOKwz5tWkPuPBzvnJ2iJ+aD8tv1+IZ8sryVxP
s2zC+wWtBEGg3n6I+eyUtTP/6BRz6MRKxHZNOWRAYrA3fTzF2rd2lww/0FhHwI0H
KGNN6oqiQjf2U7KHs7FkPr4bilGwmi1wBpqCwqqBnZzz+Xt5fubeNRAnI1MrQNd2
b2O8dh8AKPNNoWeZdmZFOUuRWWtcO34fbNmkLVsQ7NHX70MtUe1gJWO8OmNF4UZP
KHOcLOOl/ne0AvgSWPq48mZqreFvj865SWIU8GCg+m1VUVcJWgJnC0n8nqXNYDRS
GAG6BnhYnpg2Jufyj0Jw9LoC+Z3SUQ==
-----END CERTIFICATE-----
Generated at Thu Apr 2 00:53:44 2026 by rpki-client