Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: FlHhdB3LQLnpQFFQbmSiVSSdZuMXRZlP0NAvPajmNdE=
Subject key identifier: 4A:C3:07:E0:12:63:47:42:9F:50:F2:DB:EC:EF:91:C3:44:ED:08:D5
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 2E15CBF7B0379436A3AB9BF8984625218E026162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 028B
Signing time: Tue 24 Feb 2026 21:38:30 +0000
Manifest this update: Tue 24 Feb 2026 21:33:30 +0000
Manifest next update: Wed 25 Feb 2026 23:16:30 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: vFcl3dT5cGkKI7+GkTCTJHbccZXpO03Is2REFPJlmas=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Feb 2026 23:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:15:cb:f7:b0:37:94:36:a3:ab:9b:f8:98:46:25:21:8e:02:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 24 21:33:30 2026 GMT
Not After : Feb 25 23:16:30 2026 GMT
Subject: CN=4AC307E0126347429F50F2DBECEF91C344ED08D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:38:c0:a8:a8:86:13:5e:79:cf:7d:00:0b:
21:45:34:e7:50:56:a4:41:39:bd:49:dc:f9:7d:d4:
88:6d:ba:fb:28:f0:69:5a:35:63:1e:6d:84:7f:36:
c2:62:5b:f6:d5:69:2d:88:1e:16:22:1b:e3:f9:9c:
0b:8e:66:19:31:18:57:3c:fa:60:a9:9c:34:70:33:
0b:4a:d8:72:a3:3d:59:28:d9:a5:e2:85:01:b0:7e:
a6:0b:b1:fd:f3:d7:90:f9:0a:30:6a:53:c2:9e:f9:
23:19:b7:1e:a0:4b:0c:32:20:52:ce:d9:0a:16:d4:
74:8e:c0:1f:45:d9:89:7a:ab:29:4f:5b:5e:61:b2:
b7:ae:f0:13:b5:36:6b:bb:76:b0:86:a7:98:b8:fd:
73:a0:6f:81:1f:56:6e:44:51:1a:d8:f0:fc:f3:c0:
2c:51:ee:0a:71:9a:3b:15:46:53:3a:0e:16:a4:15:
36:ff:2c:06:71:d2:bc:45:45:bd:c4:6c:49:d1:06:
5f:73:44:7e:3a:d2:65:b9:9a:fb:c9:fa:35:db:45:
f3:44:a6:38:8e:47:6e:46:99:15:12:be:44:75:a0:
b8:ed:7d:d4:91:27:3b:49:ce:cb:2b:87:05:ad:fa:
66:46:8a:fc:0e:a7:f0:bb:e3:ec:d9:d3:6b:d9:7b:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:07:E0:12:63:47:42:9F:50:F2:DB:EC:EF:91:C3:44:ED:08:D5
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:15:c1:92:e9:eb:c4:3d:d1:39:6f:30:a0:42:ed:4f:cd:f2:
a0:ed:a4:9f:05:3a:18:25:64:ef:f1:1b:ed:4d:bf:26:17:2a:
48:48:56:e8:31:f7:22:ca:e7:77:72:2b:5c:26:00:c5:dc:b0:
d1:92:3b:b4:d2:ea:59:cf:fe:51:ce:b6:59:21:9f:80:21:3c:
8f:19:60:5b:fc:6b:b2:30:49:d1:08:10:78:49:ea:e1:cb:04:
01:9e:0d:4c:4f:99:33:d3:5f:94:54:66:f0:4e:e7:3a:d3:95:
8d:95:da:82:eb:27:c7:18:ba:cf:00:07:04:69:a0:5e:99:86:
0c:d2:0b:b7:73:e0:00:66:56:2f:5d:42:70:e8:cf:3a:0e:98:
9e:a2:09:4d:e1:6c:0b:0b:a2:45:a9:12:51:d0:f0:4a:1c:e5:
00:13:29:e7:f2:55:4d:15:e2:7a:37:60:ea:4c:eb:e3:e7:7f:
0e:c1:b3:24:dd:52:81:e0:ff:64:82:6d:ec:86:25:17:a1:3e:
2a:31:cf:52:26:dc:05:58:ca:a5:c7:b4:cf:44:85:10:a8:62:
61:a0:f7:05:f0:93:a3:2d:12:61:e0:9f:e1:68:e3:98:6e:9a:
d7:0f:80:7a:fa:56:28:59:88:c0:dd:69:71:d7:ae:21:2d:0b:
b0:c7:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 25 15:34:53 2026 by rpki-client