Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: mddu5hO4a4XUO3YXZ5kR89cmNMDPCOLlBv2nHg46JhE=
Subject key identifier: B9:8A:51:C7:34:9A:54:5C:0C:5C:5F:CF:0B:B1:AF:FA:8F:E7:EA:D3
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 0605BA8258634CE28AB75FFF5EEAF72DD40E05EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 028A
Signing time: Tue 24 Feb 2026 02:38:30 +0000
Manifest this update: Tue 24 Feb 2026 02:33:30 +0000
Manifest next update: Wed 25 Feb 2026 05:35:30 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Ylhq7waIJI++PXJXMCgMRxgiNUnJPmMCjTZA42/XGbg=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Feb 2026 05:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:05:ba:82:58:63:4c:e2:8a:b7:5f:ff:5e:ea:f7:2d:d4:0e:05:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 24 02:33:30 2026 GMT
Not After : Feb 25 05:35:30 2026 GMT
Subject: CN=B98A51C7349A545C0C5C5FCF0BB1AFFA8FE7EAD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:01:dd:68:97:4a:23:49:98:a0:70:06:19:
1a:91:53:9b:e1:92:6a:83:de:86:d2:5d:93:96:d6:
d3:fd:d3:bb:86:c7:14:d8:dc:92:d5:ce:a6:04:70:
c2:91:d5:3c:24:57:a6:a8:f9:7e:eb:a5:88:39:ac:
85:89:b1:93:bd:e7:0c:03:87:25:ee:8b:72:9c:5f:
13:3f:7d:11:52:f7:5e:cc:27:c9:08:3c:78:60:00:
c5:99:c1:bd:ab:2c:7e:81:3f:95:5d:2e:dc:57:61:
90:d7:dc:4c:03:20:54:20:39:ee:78:98:8a:ce:88:
8f:9b:e5:a6:89:fb:9f:6d:b1:95:fd:b8:fb:63:0b:
49:6d:e8:54:c1:25:3d:42:7d:2d:26:ff:a1:48:dd:
e1:2c:87:8c:90:d0:3e:57:69:be:38:32:92:5a:47:
22:cb:b8:e2:32:fb:9f:cf:ac:f1:32:1c:26:36:7f:
94:d9:03:6a:18:40:46:c4:9e:6f:25:ee:f2:ac:46:
dd:e0:09:bb:3c:d9:a1:89:7f:0a:f9:2a:90:bf:44:
ac:23:a4:ad:b6:0d:07:57:bb:c8:8e:f9:bd:98:9c:
ab:6f:8d:9d:50:5c:4d:bd:96:dd:59:30:6e:88:50:
68:dc:e6:4e:9c:c2:a1:0d:e6:bf:18:98:b9:3b:af:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8A:51:C7:34:9A:54:5C:0C:5C:5F:CF:0B:B1:AF:FA:8F:E7:EA:D3
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6e:b3:01:f7:88:41:df:c3:d9:ae:5a:71:04:41:db:bf:da:
fb:af:f6:4c:6e:5b:2c:ff:d1:34:fe:bd:d2:7d:99:24:69:af:
f7:8c:ff:19:30:55:f1:b0:2b:70:68:c1:4b:56:61:5f:39:2d:
51:a8:eb:2a:bc:db:8f:82:ba:0a:97:53:57:04:15:64:20:f3:
f8:e4:08:b9:41:49:b6:ca:54:50:e6:28:63:38:6d:b8:44:19:
1d:a7:06:29:91:ea:1f:f0:57:8b:20:1e:ad:9b:df:fe:f3:3e:
6c:37:40:08:b6:e9:10:25:40:96:4b:a0:6b:08:22:1d:3b:43:
14:79:97:29:1b:0d:dc:0c:8e:09:50:c0:cd:b5:0b:8f:67:88:
73:a7:50:cc:2e:d9:e9:f1:27:d6:74:32:c5:7f:b4:6c:04:5a:
65:c9:27:c8:eb:f2:6c:9e:e5:7a:eb:b2:87:cb:d4:15:e9:54:
96:49:53:34:c4:e8:23:a7:d4:23:b7:21:9c:53:2c:27:2b:95:
ae:9c:16:de:33:f0:69:25:79:f7:7d:f8:78:30:fe:db:46:12:
7c:cd:2c:34:45:89:f2:eb:aa:53:2b:99:01:14:50:8e:10:6a:
64:33:dd:ca:06:0f:fc:9c:19:21:a3:b8:97:e3:16:2b:f6:a6:
e1:05:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 14:26:02 2026 by rpki-client