Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: TmNhwx7NQNIewsODeK1fyOpI1nAsDMAoy5GzUCE3JwE=
Subject key identifier: 23:E8:EC:85:F4:24:A4:5B:CB:7A:31:8E:F7:22:F4:1C:67:05:12:2A
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4F754F6E575E8904B3F2929A89AE7B4A355BAFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03B8
Signing time: Thu 08 Oct 2026 09:25:47 +0000
Manifest this update: Thu 08 Oct 2026 09:20:47 +0000
Manifest next update: Fri 09 Oct 2026 11:55:47 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ON7YL2lQmeOdF+0kvT7K7w1ykC23bJsf3oReYV+7ZD0=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:75:4f:6e:57:5e:89:04:b3:f2:92:9a:89:ae:7b:4a:35:5b:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Oct 8 09:20:47 2026 GMT
Not After : Oct 9 11:55:47 2026 GMT
Subject: CN=23E8EC85F424A45BCB7A318EF722F41C6705122A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:90:e6:aa:b4:65:d8:36:a9:48:be:a6:bd:
67:7b:ff:62:31:1f:0e:1e:ec:01:5b:e1:a1:9a:50:
01:ae:70:19:d8:6f:e0:63:40:2d:12:97:9b:1a:78:
95:7e:1b:f6:a0:53:dc:2d:84:81:22:63:3c:f0:e3:
15:58:ac:0b:00:d1:66:0c:21:65:c4:0e:29:1e:31:
1d:34:8c:19:75:b9:fb:5c:28:f5:3f:7d:a9:18:02:
2c:49:66:1d:93:66:81:70:a4:ac:7c:30:da:0a:f6:
0b:27:e7:86:85:55:cf:9c:8d:84:e9:83:ab:29:00:
55:35:c7:6f:cf:9c:4c:c0:96:7f:ec:05:dc:62:e2:
b0:89:79:11:67:37:28:94:cb:9f:33:af:f3:74:87:
b3:f4:9c:90:73:d9:e1:40:8b:53:94:9b:d9:51:f9:
76:df:20:ee:22:ff:8e:3a:8f:de:6a:04:1c:a0:e5:
2f:e1:ab:12:b2:a9:60:ba:a5:4d:58:bf:de:00:d7:
e5:87:e5:12:a4:61:8c:cb:bf:b8:88:63:ea:bf:d6:
ed:e6:d3:5e:e9:95:42:cb:e3:a7:34:a3:37:73:0b:
1c:c0:5e:74:d3:2c:c9:18:98:2b:96:00:e5:39:d0:
2d:eb:7d:13:a8:17:0c:54:06:67:4f:09:6c:11:31:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:EC:85:F4:24:A4:5B:CB:7A:31:8E:F7:22:F4:1C:67:05:12:2A
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:82:ec:ec:5f:01:10:bc:f8:66:e9:7e:f4:c0:4e:c8:03:
ab:4c:39:33:4a:8c:2e:f3:98:92:15:42:b2:b9:7d:fd:30:ac:
75:d9:61:3b:07:9d:65:f8:1f:10:c3:22:ea:d6:ee:18:37:03:
dd:62:0a:d2:e7:f7:c8:66:cb:d2:43:c0:3c:a0:d8:3a:28:72:
d3:0e:91:ac:ba:56:34:56:6c:82:b4:0f:39:72:33:2a:f4:10:
0d:21:61:f6:66:ed:41:b5:85:71:af:44:4a:d4:d1:29:93:fb:
d4:14:b4:1e:97:72:e2:9a:52:57:65:fe:94:87:f4:34:a2:9d:
65:c1:67:7a:15:4f:78:26:cd:d8:32:b3:4a:6c:d4:e0:8b:73:
62:64:ea:24:79:13:ab:41:a3:48:8b:e1:49:e9:f5:3e:44:d6:
bd:c0:c4:98:0c:f3:8a:9d:22:a7:89:a5:d8:86:92:a2:43:86:
84:9c:1d:f2:48:44:1f:c7:9d:38:33:6b:67:04:39:80:66:37:
e9:15:3d:b7:55:fc:05:f3:38:b8:f3:b5:36:e4:af:0a:3e:a7:
2e:8b:5a:15:d8:fe:52:4a:0d:19:fe:85:99:01:10:d9:c5:31:
c1:ed:a4:e8:18:ce:41:b9:b3:65:d6:2a:c2:13:7a:d2:21:d1:
72:8d:88:7e
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUT3VPbldeiQSz8pKaia57SjVbr7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjEwMDgwOTIwNDdaFw0yNjEwMDkxMTU1NDdaMDMxMTAvBgNV
BAMTKDIzRThFQzg1RjQyNEE0NUJDQjdBMzE4RUY3MjJGNDFDNjcwNTEyMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzU5DmqrRl2DapSL6mvWd7/2Ix
Hw4e7AFb4aGaUAGucBnYb+BjQC0Sl5saeJV+G/agU9wthIEiYzzw4xVYrAsA0WYM
IWXEDikeMR00jBl1uftcKPU/fakYAixJZh2TZoFwpKx8MNoK9gsn54aFVc+cjYTp
g6spAFU1x2/PnEzAln/sBdxi4rCJeRFnNyiUy58zr/N0h7P0nJBz2eFAi1OUm9lR
+XbfIO4i/446j95qBByg5S/hqxKyqWC6pU1Yv94A1+WH5RKkYYzLv7iIY+q/1u3m
017plULL46c0ozdzCxzAXnTTLMkYmCuWAOU50C3rfROoFwxUBmdPCWwRMVtbAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUI+jshfQkpFvLejGO9yL0HGcFEiowHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAFgGC7OxfARC8+GbpfvTATsgDq0w5M0qMLvOYkhVCsrl9/TCsddlhOwed
ZfgfEMMi6tbuGDcD3WIK0uf3yGbL0kPAPKDYOihy0w6RrLpWNFZsgrQPOXIzKvQQ
DSFh9mbtQbWFca9EStTRKZP71BS0Hpdy4ppSV2X+lIf0NKKdZcFnehVPeCbN2DKz
SmzU4ItzYmTqJHkTq0GjSIvhSen1PkTWvcDEmAzzip0ip4ml2IaSokOGhJwd8khE
H8edODNrZwQ5gGY36RU9t1X8BfM4uPO1NuSvCj6nLotaFdj+UkoNGf6FmQEQ2cUx
we2k6BjOQbmzZdYqwhN60iHRco2Ifg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:00:35 2026 by rpki-client