Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: DEA6iH8U2ufY4PJDuUgngTBGO0Yx9mlVsQLwCluCcHo=
Subject key identifier: DB:A9:B8:76:53:99:67:42:FB:F8:D9:8D:56:FE:03:78:10:CA:35:15
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4401753395E17DEC5D89A7A05E0BF27F3F5B943F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03CB
Signing time: Fri 23 Oct 2026 01:16:45 +0000
Manifest this update: Fri 23 Oct 2026 01:11:45 +0000
Manifest next update: Sat 24 Oct 2026 04:38:45 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Ud3LyUfPtThonu9FeUEDSqwgA3qQ3OaZUYGUUhCdTMA=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 04:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:01:75:33:95:e1:7d:ec:5d:89:a7:a0:5e:0b:f2:7f:3f:5b:94:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 23 01:11:45 2026 GMT
Not After : Oct 24 04:38:45 2026 GMT
Subject: CN=DBA9B87653996742FBF8D98D56FE037810CA3515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:64:76:15:03:bf:19:53:f3:44:f1:2d:da:
a0:23:2b:59:09:cc:77:c0:b3:ad:8a:68:77:51:8a:
09:04:09:9e:ce:3a:82:8c:8b:6e:05:36:ce:68:0d:
d7:c7:f0:83:08:8f:5f:65:c5:75:66:eb:27:f1:00:
af:30:a0:3c:fe:9d:07:d7:a3:b3:50:63:23:da:cd:
3a:d8:c7:49:11:fc:a4:bd:27:03:05:df:7e:4a:9d:
30:14:24:66:e3:91:63:1a:0a:53:21:6f:37:0d:95:
7c:69:b8:20:a2:b6:33:a6:3d:f7:75:a1:08:6c:77:
00:74:12:e4:e5:c0:4f:69:c4:4b:42:ea:ab:12:7a:
2d:5b:5b:ec:e0:51:43:59:b8:13:86:0f:f4:85:3f:
7a:85:b6:17:e3:71:ec:5f:58:db:a1:f6:53:62:3f:
70:b8:e5:23:79:75:9f:97:ed:4a:80:66:85:b9:aa:
41:ce:e2:46:ce:d8:06:b5:20:6c:79:dd:8e:5e:28:
f9:55:f1:99:50:14:9f:e1:3e:d4:47:94:6a:37:d2:
cf:35:c2:9f:5a:3a:06:1e:ce:09:61:a3:31:ff:6d:
ef:30:39:37:e5:43:d2:fe:92:ea:26:7d:ce:76:f5:
c9:8e:c9:1b:ab:61:fd:5f:9d:e9:11:74:cc:85:ae:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:B8:76:53:99:67:42:FB:F8:D9:8D:56:FE:03:78:10:CA:35:15
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:53:17:25:64:f9:34:8d:4a:41:d1:b6:c1:8c:21:58:4d:4e:
3f:5c:26:8c:d4:0b:6e:75:34:4b:1c:71:f5:13:08:2d:70:a1:
1a:fd:fa:d5:86:e7:7c:01:a9:d4:2f:74:a9:ee:fb:1e:40:28:
74:ce:1d:38:64:be:a8:de:43:3d:49:f9:04:a6:11:92:4a:2b:
90:12:0c:49:04:37:32:e5:2e:89:6b:17:d5:9e:0a:14:f7:4b:
0c:0a:82:f7:1b:c4:76:44:c4:97:d3:30:d8:ce:40:94:02:ab:
1a:42:16:7b:cf:fc:93:12:78:94:3b:ef:2e:9c:72:77:80:0a:
82:7b:22:12:33:54:94:26:b2:29:6d:30:96:12:bc:05:90:8b:
54:dd:7d:24:6c:cc:03:57:c5:38:ed:3b:03:3b:d1:1a:05:9f:
61:f3:6d:6b:2e:1e:be:e8:27:ce:b5:dd:4e:24:58:40:52:f1:
57:b7:4d:be:5e:4e:0f:7f:ca:d3:76:dc:c1:be:de:ab:1e:e9:
be:a4:49:95:ff:97:7d:60:47:35:36:3b:eb:1c:42:81:53:c4:
e2:39:93:d0:79:1d:87:fb:ab:1b:5b:ff:c9:83:2c:46:21:cd:
1e:9e:ec:a6:1e:94:a2:54:ac:74:1f:cb:39:1e:ff:90:79:30:
58:dd:c8:7b
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIURAF1M5XhfexdiaegXgvyfz9blD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjEwMjMwMTExNDVaFw0yNjEwMjQwNDM4NDVaMDMxMTAvBgNV
BAMTKERCQTlCODc2NTM5OTY3NDJGQkY4RDk4RDU2RkUwMzc4MTBDQTM1MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7mR2FQO/GVPzRPEt2qAjK1kJ
zHfAs62KaHdRigkECZ7OOoKMi24FNs5oDdfH8IMIj19lxXVm6yfxAK8woDz+nQfX
o7NQYyPazTrYx0kR/KS9JwMF335KnTAUJGbjkWMaClMhbzcNlXxpuCCitjOmPfd1
oQhsdwB0EuTlwE9pxEtC6qsSei1bW+zgUUNZuBOGD/SFP3qFthfjcexfWNuh9lNi
P3C45SN5dZ+X7UqAZoW5qkHO4kbO2Aa1IGx53Y5eKPlV8ZlQFJ/hPtRHlGo30s81
wp9aOgYezglhozH/be8wOTflQ9L+kuomfc529cmOyRurYf1fnekRdMyFrgTbAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU26m4dlOZZ0L7+NmNVv4DeBDKNRUwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAuVMXJWT5NI1KQdG2wYwhWE1OP1wmjNQLbnU0Sxxx9RMILXChGv361Ybn
fAGp1C90qe77HkAodM4dOGS+qN5DPUn5BKYRkkorkBIMSQQ3MuUuiWsX1Z4KFPdL
DAqC9xvEdkTEl9Mw2M5AlAKrGkIWe8/8kxJ4lDvvLpxyd4AKgnsiEjNUlCayKW0w
lhK8BZCLVN19JGzMA1fFOO07AzvRGgWfYfNtay4evugnzrXdTiRYQFLxV7dNvl5O
D3/K03bcwb7eqx7pvqRJlf+XfWBHNTY76xxCgVPE4jmT0Hkdh/urG1v/yYMsRiHN
Hp7sph6UolSsdB/LOR7/kHkwWN3Iew==
-----END CERTIFICATE-----
Generated at Fri Oct 23 20:35:14 2026 by rpki-client