Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 9o+wHsRbNK8KeYtT2pwuH+Cj13U+1cScN6Dzj+o2Au8=
Subject key identifier: FD:1D:7D:5A:FF:4F:E1:94:CE:4B:6C:06:5A:5A:21:E9:7B:3E:B2:B9
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 79DB4D0DAC05218E630368806679D1A2BA416D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02CD
Signing time: Wed 15 Apr 2026 20:55:45 +0000
Manifest this update: Wed 15 Apr 2026 20:50:45 +0000
Manifest next update: Thu 16 Apr 2026 21:46:45 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: oKsRuZB2va/vW9rOb4eN4LRqu5MJIAEYM3KefiD7fHY=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:db:4d:0d:ac:05:21:8e:63:03:68:80:66:79:d1:a2:ba:41:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 15 20:50:45 2026 GMT
Not After : Apr 16 21:46:45 2026 GMT
Subject: CN=FD1D7D5AFF4FE194CE4B6C065A5A21E97B3EB2B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:f5:97:75:22:cd:0c:47:31:2c:87:de:e2:
6b:68:8b:46:9f:80:1d:7a:56:e3:60:2d:fc:64:e8:
38:04:50:20:d8:2d:89:1a:23:b3:95:9a:0a:0d:f8:
be:f2:d5:a2:bf:1c:65:fe:ca:42:8b:35:cb:19:2f:
1f:81:9e:80:33:a7:b0:d5:02:8b:af:2d:90:34:24:
5f:1f:fa:0a:82:be:f4:8e:bb:04:23:cc:46:7a:8f:
6c:c2:f8:b5:6b:7d:ed:6c:c2:0d:7e:d4:c4:62:81:
6d:50:0e:bd:52:b2:d4:36:4d:98:09:78:ed:3a:9c:
30:2b:2f:4b:1b:da:ab:25:db:87:cc:46:35:b7:a2:
f1:95:67:35:fc:45:3b:4f:e6:08:ca:bf:cb:26:39:
d5:04:75:3c:df:2a:74:76:01:06:c9:5e:69:37:41:
c2:c3:8f:83:cb:a8:68:e6:d9:9e:55:44:76:97:5b:
30:f1:a0:1b:77:e3:84:c8:10:5c:66:6f:b1:c6:bd:
ef:ab:6f:57:97:b8:4e:85:57:a5:ac:aa:15:4f:72:
f0:7e:a1:ef:12:18:b6:05:7e:cd:c1:e5:78:4a:f7:
9d:b0:d7:2c:be:f3:6a:e8:d5:fc:8a:60:c3:8c:1e:
87:94:4c:93:d7:1e:82:55:a1:33:14:17:28:df:ed:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:7D:5A:FF:4F:E1:94:CE:4B:6C:06:5A:5A:21:E9:7B:3E:B2:B9
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:8f:03:c1:f5:55:80:f7:10:77:08:f6:40:e1:b4:17:9c:
d1:42:64:08:97:38:a3:d9:fb:cf:3a:33:70:cb:f3:c3:c7:7c:
78:3c:92:a1:a3:ed:c6:27:1f:fe:bb:2b:c6:8e:ee:75:3b:27:
a8:cf:92:41:0b:c2:fe:e3:dc:26:91:48:73:47:f7:9e:30:30:
2f:cf:5b:92:30:cf:47:1b:54:92:8f:c6:0d:9e:c9:26:30:f2:
33:b4:70:7f:7a:d9:cf:db:ba:23:2f:00:3c:37:22:16:2c:ed:
4c:c5:fc:4f:ff:29:02:61:bf:11:64:4b:cf:97:80:ff:d0:58:
be:56:8b:34:13:ac:af:6b:47:5f:52:a2:7e:a2:f6:1c:ab:6e:
24:a5:44:2b:43:a1:9f:35:1f:24:1b:76:d5:d2:12:d7:26:79:
28:e1:06:a3:18:28:8f:8c:78:91:53:46:00:d5:4d:b9:88:03:
f0:d5:7f:81:81:67:9d:56:99:c6:d1:6b:5a:31:d2:ce:19:8f:
2b:3d:c6:9c:4d:20:8a:9f:15:4b:80:43:c2:d3:8b:c6:9e:0f:
e3:c4:9d:dd:86:6f:cb:eb:c9:83:5e:e6:37:90:99:97:15:5a:
f9:47:9d:6d:6b:d6:b6:18:94:00:80:0e:21:ef:62:5b:71:f6:
fb:3c:53:6a
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUedtNDawFIY5jA2iAZnnRorpBbVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA0MTUyMDUwNDVaFw0yNjA0MTYyMTQ2NDVaMDMxMTAvBgNV
BAMTKEZEMUQ3RDVBRkY0RkUxOTRDRTRCNkMwNjVBNUEyMUU5N0IzRUIyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDPWXdSLNDEcxLIfe4mtoi0af
gB16VuNgLfxk6DgEUCDYLYkaI7OVmgoN+L7y1aK/HGX+ykKLNcsZLx+BnoAzp7DV
AouvLZA0JF8f+gqCvvSOuwQjzEZ6j2zC+LVrfe1swg1+1MRigW1QDr1SstQ2TZgJ
eO06nDArL0sb2qsl24fMRjW3ovGVZzX8RTtP5gjKv8smOdUEdTzfKnR2AQbJXmk3
QcLDj4PLqGjm2Z5VRHaXWzDxoBt344TIEFxmb7HGve+rb1eXuE6FV6WsqhVPcvB+
oe8SGLYFfs3B5XhK952w1yy+82ro1fyKYMOMHoeUTJPXHoJVoTMUFyjf7ZClAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU/R19Wv9P4ZTOS2wGWloh6Xs+srkwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEABE2PA8H1VYD3EHcI9kDhtBec0UJkCJc4o9n7zzozcMvzw8d8eDySoaPt
xicf/rsrxo7udTsnqM+SQQvC/uPcJpFIc0f3njAwL89bkjDPRxtUko/GDZ7JJjDy
M7Rwf3rZz9u6Iy8APDciFiztTMX8T/8pAmG/EWRLz5eA/9BYvlaLNBOsr2tHX1Ki
fqL2HKtuJKVEK0OhnzUfJBt21dIS1yZ5KOEGoxgoj4x4kVNGANVNuYgD8NV/gYFn
nVaZxtFrWjHSzhmPKz3GnE0gip8VS4BDwtOLxp4P48Sd3YZvy+vJg17mN5CZlxVa
+UedbWvWthiUAIAOIe9iW3H2+zxTag==
-----END CERTIFICATE-----
Generated at Wed Apr 15 23:37:12 2026 by rpki-client