Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: hnNAVQ9oxSjCroDVgcpQGRS2AJ0HIv7oJJvaFvcqRyI=
Subject key identifier: F5:80:DF:12:EE:FE:54:2D:C2:3E:43:FE:06:B5:D5:6A:A2:E5:23:41
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 499F8792E4508DF465DB30D0F8A6A7AD51D25235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 030D
Signing time: Tue 02 Jun 2026 09:38:26 +0000
Manifest this update: Tue 02 Jun 2026 09:33:26 +0000
Manifest next update: Wed 03 Jun 2026 09:44:26 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 4ATqrrbDJ57I1vsUlvHDFHsWcDb4WsCxn+Ny7ScOYH8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 09:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9f:87:92:e4:50:8d:f4:65:db:30:d0:f8:a6:a7:ad:51:d2:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jun 2 09:33:26 2026 GMT
Not After : Jun 3 09:44:26 2026 GMT
Subject: CN=F580DF12EEFE542DC23E43FE06B5D56AA2E52341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:6b:fd:53:a7:0f:1b:4a:1a:04:ef:5f:01:
76:52:c8:78:b9:5d:eb:d8:79:e0:da:c3:0d:5a:59:
09:75:76:04:64:e6:44:32:46:ef:64:8f:b0:53:c4:
fe:72:c9:ef:90:bd:f3:b9:25:a2:ea:56:bb:4a:7f:
77:41:b9:01:4d:48:0b:f2:da:f0:dc:3b:85:ab:26:
4f:f3:46:03:4f:73:ef:79:20:e2:ae:1a:62:11:62:
50:7b:c0:dd:97:45:47:4f:91:bf:17:c9:1a:74:cb:
ec:df:a7:bd:36:2b:7b:47:fb:df:74:d6:66:55:e0:
c4:4b:40:b6:3d:6e:17:a1:c0:43:cc:cf:76:e9:c2:
f4:74:1a:5d:c4:8a:af:e8:89:81:32:d5:92:1c:64:
b2:87:23:02:eb:9d:0a:1a:95:9b:07:c4:46:6a:1e:
2d:8e:90:c9:23:74:10:a0:76:aa:b7:00:08:0e:ff:
b6:1e:d1:65:30:ec:68:22:7b:b4:d5:86:9a:da:ae:
f6:8e:b3:a6:88:b4:90:4a:79:9e:d4:76:41:05:de:
ff:7f:75:7b:c2:c6:21:36:0b:57:89:88:e5:0a:85:
4f:6b:42:31:c2:00:45:51:c2:2a:8d:68:b2:61:52:
44:dd:fb:39:e3:01:a9:28:a7:1b:3b:7c:f2:8f:c9:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:DF:12:EE:FE:54:2D:C2:3E:43:FE:06:B5:D5:6A:A2:E5:23:41
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:6e:bb:1a:5c:78:75:17:be:c4:ad:e5:ae:93:d6:97:be:
db:1f:93:7c:6a:40:8b:fd:3b:e9:79:b4:ea:ac:ea:95:8e:95:
84:e7:8e:b1:04:b0:fb:db:c6:45:3c:06:f8:4c:8a:93:c8:ef:
2f:36:9c:72:17:80:78:e4:09:81:b2:73:94:97:38:3e:b9:14:
61:6a:44:84:15:70:01:6f:79:d4:53:90:57:1d:21:3d:5c:73:
97:a9:4f:16:bb:8e:39:dc:a4:5d:a2:38:d7:22:17:72:49:f8:
93:e1:a8:74:e0:64:46:3e:e0:64:63:e9:18:94:09:26:c2:ea:
2a:5d:8d:87:54:9a:65:83:a3:81:ec:9a:a3:a9:12:73:87:de:
c6:f5:12:cb:37:bc:72:b3:eb:04:b5:51:ce:89:3f:e9:b2:0e:
ef:6d:ad:46:b9:f7:43:c3:6c:3e:f0:b3:12:13:5c:e9:6b:08:
a3:19:ea:1e:73:3d:95:0c:54:83:f6:aa:bd:9e:b4:33:2c:04:
63:b3:c3:7a:38:b0:e9:2a:20:70:5e:a1:fa:87:d7:73:7c:26:
23:d6:6b:8a:e1:fd:1d:8c:d7:dd:04:7a:1e:d8:53:38:2d:ef:
1d:05:f8:fe:74:f8:19:b2:22:15:47:ea:ff:39:79:77:ea:0b:
d5:a2:72:8f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUSZ+HkuRQjfRl2zDQ+KanrVHSUjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA2MDIwOTMzMjZaFw0yNjA2MDMwOTQ0MjZaMDMxMTAvBgNV
BAMTKEY1ODBERjEyRUVGRTU0MkRDMjNFNDNGRTA2QjVENTZBQTJFNTIzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vWv9U6cPG0oaBO9fAXZSyHi5
XevYeeDaww1aWQl1dgRk5kQyRu9kj7BTxP5yye+QvfO5JaLqVrtKf3dBuQFNSAvy
2vDcO4WrJk/zRgNPc+95IOKuGmIRYlB7wN2XRUdPkb8XyRp0y+zfp702K3tH+990
1mZV4MRLQLY9bhehwEPMz3bpwvR0Gl3Eiq/oiYEy1ZIcZLKHIwLrnQoalZsHxEZq
Hi2OkMkjdBCgdqq3AAgO/7Ye0WUw7Ggie7TVhprarvaOs6aItJBKeZ7UdkEF3v9/
dXvCxiE2C1eJiOUKhU9rQjHCAEVRwiqNaLJhUkTd+znjAakopxs7fPKPyQxXAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU9YDfEu7+VC3CPkP+BrXVaqLlI0EwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAIzRuuxpceHUXvsSt5a6T1pe+2x+TfGpAi/076Xm06qzqlY6VhOeOsQSw
+9vGRTwG+EyKk8jvLzaccheAeOQJgbJzlJc4PrkUYWpEhBVwAW951FOQVx0hPVxz
l6lPFruOOdykXaI41yIXckn4k+GodOBkRj7gZGPpGJQJJsLqKl2Nh1SaZYOjgeya
o6kSc4fexvUSyze8crPrBLVRzok/6bIO722tRrn3Q8NsPvCzEhNc6WsIoxnqHnM9
lQxUg/aqvZ60MywEY7PDejiw6SogcF6h+ofXc3wmI9ZriuH9HYzX3QR6HthTOC3v
HQX4/nT4GbIiFUfq/zl5d+oL1aJyjw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:08 2026 by rpki-client