Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: mfOgz+eGok/XZcgbUo9pOVNaFotb4dMp4QYpncBz2j8=
Subject key identifier: D2:40:BB:F2:EE:92:4F:3C:28:9C:81:FB:91:50:9F:0C:DE:FE:E4:4E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5E55B857F03B7B349328EEE44DBBBF8617B69C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 031C
Signing time: Sat 13 Jun 2026 14:24:09 +0000
Manifest this update: Sat 13 Jun 2026 14:19:09 +0000
Manifest next update: Sun 14 Jun 2026 15:02:09 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: uJN7yk92XDyusfwPb1sDzO9w/bJIlVxxZjKVMvixL6M=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:55:b8:57:f0:3b:7b:34:93:28:ee:e4:4d:bb:bf:86:17:b6:9c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 13 14:19:09 2026 GMT
Not After : Jun 14 15:02:09 2026 GMT
Subject: CN=D240BBF2EE924F3C289C81FB91509F0CDEFEE44E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:dd:51:2f:2a:d1:1e:75:30:31:da:6a:8e:
f0:dd:1f:85:1a:c8:4c:0a:81:c0:f2:39:e9:09:56:
ec:fe:e3:62:ae:9a:c2:33:e0:3d:e1:3a:4d:fe:c7:
8a:ab:00:26:78:bf:60:b3:ec:c2:74:e8:52:17:cf:
87:a8:e8:e6:2e:7a:58:50:37:55:e2:ab:ac:67:c7:
9f:d9:56:b6:fb:d8:48:70:21:19:d2:c9:65:5a:64:
fd:73:1c:5e:77:0a:35:e7:bf:0b:87:e9:85:8a:66:
0b:63:2a:46:bc:a4:52:a3:3e:1b:c2:66:ca:18:ee:
09:91:64:fb:62:e0:07:bd:a4:da:03:c6:dd:dc:ed:
9e:7b:c1:ae:dc:0c:f6:71:2e:c6:cf:5c:87:8a:6b:
ad:37:a5:2b:65:89:c6:f9:cb:78:ac:27:2b:6d:56:
72:4a:07:46:af:93:9e:54:23:ff:96:65:29:15:4f:
da:64:21:1d:e6:d8:dd:4f:4a:d6:be:4f:62:42:33:
3a:99:4a:95:cc:9d:2d:ae:ac:10:dd:bc:48:be:fd:
e2:72:7c:a6:15:d7:e1:32:2c:5a:f9:4f:07:77:64:
e2:8d:03:18:bc:86:2c:89:59:ea:ce:dd:0d:26:7c:
82:a0:ba:a2:3d:bb:e8:d5:6e:6f:d5:7e:46:49:7f:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:BB:F2:EE:92:4F:3C:28:9C:81:FB:91:50:9F:0C:DE:FE:E4:4E
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c6:64:ac:8c:60:d9:62:50:1a:5a:61:fb:92:ea:44:c3:d2:
45:8c:c3:ff:92:5b:71:4c:57:6c:4a:48:96:9c:1e:cf:60:92:
04:29:50:48:d6:46:af:62:43:2f:45:c7:25:8a:a1:db:ef:5c:
ca:6f:1e:3b:1c:5b:7b:ab:3c:a6:3c:a0:02:7e:8e:06:9a:5a:
6f:fb:77:fc:8b:05:d9:b1:82:23:8f:67:20:65:3a:30:30:6f:
d3:48:a5:9a:93:1b:e3:03:2c:80:71:3c:f4:ac:bc:ac:32:29:
d8:9e:72:0f:8d:8f:7d:3e:28:06:0a:60:16:e2:8f:c2:8c:42:
de:33:8a:1a:bb:62:f7:ff:99:31:c6:3a:f9:e0:a3:f8:35:d9:
d7:46:cc:7a:fb:81:1b:e5:9d:88:69:ef:c2:bf:1d:6c:7e:ca:
43:de:73:e3:e3:82:59:53:7c:f7:48:74:23:a2:f4:ea:b4:61:
f1:86:a7:d8:7c:60:88:56:48:3b:65:b2:82:ae:c6:9e:12:69:
fe:4f:80:f6:a9:e8:86:26:dd:b8:3d:bd:ee:8f:43:1d:7d:94:
2f:9f:8b:8f:4c:af:40:2b:82:9d:e7:08:1a:0d:d4:0e:ac:a6:
32:08:5a:5b:d2:5e:5f:26:48:ea:73:61:95:a0:0b:7a:cb:41:
55:35:8d:2c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUXlW4V/A7ezSTKO7kTbu/hhe2nEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA2MTMxNDE5MDlaFw0yNjA2MTQxNTAyMDlaMDMxMTAvBgNV
BAMTKEQyNDBCQkYyRUU5MjRGM0MyODlDODFGQjkxNTA5RjBDREVGRUU0NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9it1RLyrRHnUwMdpqjvDdH4Ua
yEwKgcDyOekJVuz+42KumsIz4D3hOk3+x4qrACZ4v2Cz7MJ06FIXz4eo6OYuelhQ
N1Xiq6xnx5/ZVrb72EhwIRnSyWVaZP1zHF53CjXnvwuH6YWKZgtjKka8pFKjPhvC
ZsoY7gmRZPti4Ae9pNoDxt3c7Z57wa7cDPZxLsbPXIeKa603pStlicb5y3isJytt
VnJKB0avk55UI/+WZSkVT9pkIR3m2N1PSta+T2JCMzqZSpXMnS2urBDdvEi+/eJy
fKYV1+EyLFr5Twd3ZOKNAxi8hiyJWerO3Q0mfIKguqI9u+jVbm/VfkZJfzBXAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU0kC78u6STzwonIH7kVCfDN7+5E4wHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAvcZkrIxg2WJQGlph+5LqRMPSRYzD/5JbcUxXbEpIlpwez2CSBClQSNZG
r2JDL0XHJYqh2+9cym8eOxxbe6s8pjygAn6OBppab/t3/IsF2bGCI49nIGU6MDBv
00ilmpMb4wMsgHE89Ky8rDIp2J5yD42PfT4oBgpgFuKPwoxC3jOKGrti9/+ZMcY6
+eCj+DXZ10bMevuBG+WdiGnvwr8dbH7KQ95z4+OCWVN890h0I6L06rRh8Yan2Hxg
iFZIO2Wygq7GnhJp/k+A9qnohibduD297o9DHX2UL5+Lj0yvQCuCnecIGg3UDqym
MghaW9JeXyZI6nNhlaALestBVTWNLA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:42:58 2026 by rpki-client