Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: FKVNp7pNLm29p40Rkk8wnjjAa4p+0P9PSnBL+Wv9X3c=
Subject key identifier: 02:89:BF:A9:2D:27:CF:C4:BD:BF:19:5E:8A:E2:B3:E7:DF:BE:16:A7
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 0438BB6D7B746297E14352C73C61152631A82386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02F6
Signing time: Sat 16 May 2026 19:08:04 +0000
Manifest this update: Sat 16 May 2026 19:03:04 +0000
Manifest next update: Sun 17 May 2026 22:49:04 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: k9/SL8i9weSl4PYvHLA7fFpmy4JQbNHlXvC6ovU4RVM=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:38:bb:6d:7b:74:62:97:e1:43:52:c7:3c:61:15:26:31:a8:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 16 19:03:04 2026 GMT
Not After : May 17 22:49:04 2026 GMT
Subject: CN=0289BFA92D27CFC4BDBF195E8AE2B3E7DFBE16A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:98:6f:ef:2b:5b:5a:c6:e2:6d:ab:ed:63:
74:2a:ca:db:68:ac:e5:5f:df:12:93:4e:46:1e:9a:
41:e1:5b:4d:7d:55:9c:f2:1f:7a:cf:78:d0:76:12:
d0:7f:04:d3:d9:72:08:c6:0b:fb:3d:3e:69:11:10:
fc:9f:ff:d0:34:2b:1d:f7:70:06:11:47:66:ad:dd:
d1:6c:04:da:e5:fc:24:dc:28:f3:91:6c:28:30:eb:
65:bb:dd:19:68:a3:83:d4:08:68:27:0f:61:dd:dd:
7d:88:b9:99:cb:ce:0d:08:1c:61:72:82:5f:55:09:
26:4a:9d:f6:d5:ba:95:1e:70:15:98:e7:0b:87:89:
83:f1:a1:c2:84:de:2e:52:7e:d5:15:bd:cf:55:35:
19:40:bc:a2:1e:21:09:15:d5:3c:e8:f5:af:c0:41:
4a:e1:67:be:5c:08:b9:63:8c:85:1b:ad:4d:47:25:
31:b6:01:ee:f7:99:40:40:6f:2f:a1:72:c8:61:d0:
e3:38:28:35:11:f4:50:68:5f:45:4f:89:e4:96:f7:
3f:84:21:81:44:79:e3:3a:1e:e4:03:6d:2c:90:7c:
67:db:08:43:bc:a9:7a:85:fc:c3:0f:08:c4:86:19:
cd:56:51:50:24:bd:f5:38:e1:76:a6:c3:35:1b:8a:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:89:BF:A9:2D:27:CF:C4:BD:BF:19:5E:8A:E2:B3:E7:DF:BE:16:A7
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ae:b7:83:91:1e:ed:f2:85:5d:70:b1:36:9b:ff:82:44:61:
a7:f3:e9:af:86:87:3a:63:e6:5a:90:5e:8d:05:47:7b:c6:fd:
d8:fe:09:e0:0a:63:7b:51:95:3e:dd:72:08:fc:50:f5:ff:6e:
39:bb:cf:27:12:5d:91:32:0d:db:7f:bc:07:16:10:44:0b:de:
7e:5f:cd:b5:f8:80:19:30:f9:6c:a7:b2:0c:85:35:d9:b1:39:
02:39:e5:72:46:82:98:0a:34:eb:8c:25:b3:8a:33:1a:8b:7b:
5d:3e:4a:1b:ee:02:e5:e2:1b:18:e9:88:37:9c:97:2d:35:cc:
b9:1d:e2:eb:ec:c1:83:fe:54:95:5a:b0:96:2b:a0:ef:68:53:
76:4e:36:77:6d:52:d4:3a:3c:23:37:8a:f1:06:c9:18:6b:af:
67:4f:4d:80:c7:6d:41:7b:c3:e6:9b:f6:d2:d6:e3:6b:a2:82:
4e:01:ad:04:6d:fa:02:41:33:cc:83:c4:d3:ea:e4:62:13:eb:
6a:78:61:fe:49:83:87:1d:db:1d:90:94:94:1b:88:6e:ee:4d:
25:92:3a:53:7f:b0:24:15:f2:8e:e3:9a:20:bb:71:de:3f:79:
e0:3f:60:f2:24:1f:6a:31:54:d6:f1:a8:a0:83:a0:12:30:8a:
b1:4f:5e:5b
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUBDi7bXt0YpfhQ1LHPGEVJjGoI4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MTYxOTAzMDRaFw0yNjA1MTcyMjQ5MDRaMDMxMTAvBgNV
BAMTKDAyODlCRkE5MkQyN0NGQzRCREJGMTk1RThBRTJCM0U3REZCRTE2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jphv7ytbWsbibavtY3Qqytto
rOVf3xKTTkYemkHhW019VZzyH3rPeNB2EtB/BNPZcgjGC/s9PmkREPyf/9A0Kx33
cAYRR2at3dFsBNrl/CTcKPORbCgw62W73Rloo4PUCGgnD2Hd3X2IuZnLzg0IHGFy
gl9VCSZKnfbVupUecBWY5wuHiYPxocKE3i5SftUVvc9VNRlAvKIeIQkV1Tzo9a/A
QUrhZ75cCLljjIUbrU1HJTG2Ae73mUBAby+hcshh0OM4KDUR9FBoX0VPieSW9z+E
IYFEeeM6HuQDbSyQfGfbCEO8qXqF/MMPCMSGGc1WUVAkvfU44XamwzUbitWdAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUAom/qS0nz8S9vxleiuKz59++FqcwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAp663g5Ee7fKFXXCxNpv/gkRhp/Ppr4aHOmPmWpBejQVHe8b92P4J4Apj
e1GVPt1yCPxQ9f9uObvPJxJdkTIN23+8BxYQRAvefl/NtfiAGTD5bKeyDIU12bE5
AjnlckaCmAo064wls4ozGot7XT5KG+4C5eIbGOmIN5yXLTXMuR3i6+zBg/5UlVqw
liug72hTdk42d21S1Do8IzeK8QbJGGuvZ09NgMdtQXvD5pv20tbja6KCTgGtBG36
AkEzzIPE0+rkYhPranhh/kmDhx3bHZCUlBuIbu5NJZI6U3+wJBXyjuOaILtx3j95
4D9g8iQfajFU1vGooIOgEjCKsU9eWw==
-----END CERTIFICATE-----
Generated at Sat May 16 21:33:05 2026 by rpki-client