Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: m0eR8AqMgS4jOXCBqF2fowgEv3WPSj+5U0IAkpFJRPA=
Subject key identifier: A9:5F:4D:56:A9:CE:2B:C3:0D:6C:6D:96:28:3A:B9:19:33:43:23:67
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 246E7B554219428DCA65D6D9C74CBC095B8929D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02AB
Signing time: Sat 21 Mar 2026 13:33:04 +0000
Manifest this update: Sat 21 Mar 2026 13:28:04 +0000
Manifest next update: Sun 22 Mar 2026 16:16:04 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: t7VSSC2nPboM89rLGdEvGMyvfTXtrJ//f/NiqO4qsgA=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 16:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6e:7b:55:42:19:42:8d:ca:65:d6:d9:c7:4c:bc:09:5b:89:29:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 21 13:28:04 2026 GMT
Not After : Mar 22 16:16:04 2026 GMT
Subject: CN=A95F4D56A9CE2BC30D6C6D96283AB91933432367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:0c:96:71:89:28:25:59:30:c1:5d:da:0e:
89:5a:46:32:6e:b6:3a:55:ac:db:55:d0:bd:4d:86:
88:48:60:ca:b8:bb:9c:52:f3:bd:ab:6b:6f:a4:c9:
96:ff:c1:39:5f:d4:21:a9:16:7a:ff:85:65:2f:da:
ee:89:62:88:2a:dd:be:c8:36:a4:e5:50:0c:6a:f7:
1d:98:11:c0:45:8a:82:a2:2f:7c:49:9e:91:ab:7c:
c1:cb:4f:97:fb:c6:24:bd:ba:b0:c3:86:03:f6:d6:
80:3e:c5:e1:4a:3a:d1:09:87:fa:f4:d7:df:95:f4:
9d:dd:b8:18:ff:5d:71:40:a3:26:18:3e:c4:b9:98:
45:f7:32:12:14:10:cf:fa:5f:8b:68:fa:21:5c:d6:
81:99:17:82:44:70:96:af:a8:17:8e:31:c9:da:32:
9d:38:bb:4b:cb:43:1c:15:0e:46:10:cc:3a:dd:1c:
f4:18:a8:18:28:8a:d8:2e:eb:b0:67:63:8d:a7:c3:
ff:fa:db:ca:d8:a9:92:d4:56:ac:56:26:88:f6:f3:
d7:e7:4c:15:ae:5d:4c:78:b3:46:96:46:e8:d8:d8:
91:83:62:07:81:39:00:0d:c4:08:0e:0f:92:4d:c0:
ea:26:80:8e:05:a9:f2:4e:d3:ba:04:fb:35:fe:b8:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:4D:56:A9:CE:2B:C3:0D:6C:6D:96:28:3A:B9:19:33:43:23:67
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:51:d3:e0:c1:08:96:1b:3b:f6:a5:97:86:ab:aa:00:b3:4d:
53:6a:06:da:f3:86:54:01:33:a0:c5:e9:0a:a6:b6:b7:3c:c4:
85:d1:65:75:87:9d:fb:ef:ab:ae:e4:c6:62:c1:5a:83:f0:d5:
1a:8b:a1:d7:dd:e5:51:2e:07:0c:4f:fb:96:01:2d:96:d2:4c:
3b:92:50:07:c7:6b:2a:1e:d5:26:01:51:f7:d1:49:89:1e:de:
46:55:77:e6:39:76:46:27:2f:c9:97:86:9b:cf:44:24:f6:6d:
97:ec:24:c2:df:7c:4d:1b:2c:35:ba:7a:e1:6c:4f:b9:fe:e3:
e5:9f:8b:6d:15:93:47:82:eb:49:c8:e3:95:8f:3f:19:a1:6f:
c8:d1:e3:eb:54:99:e4:a0:89:e1:ba:62:d5:de:38:81:c6:20:
e8:55:f7:62:25:c7:88:98:7d:9f:aa:ab:0d:e8:8c:90:dc:41:
fa:bc:f5:ce:cb:a9:0f:ae:36:8d:0b:7e:1f:6d:59:ab:31:27:
a5:4b:d7:6c:b2:7f:2a:b6:7c:60:0b:78:db:78:e4:c7:93:c4:
2f:e7:37:17:79:0f:37:a7:24:74:51:61:02:ef:c2:8e:9d:7b:
27:ea:bb:f8:2b:ee:fd:46:bc:68:93:d4:a0:05:09:31:12:a0:
7b:a3:2f:a0
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUJG57VUIZQo3KZdbZx0y8CVuJKdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjAzMjExMzI4MDRaFw0yNjAzMjIxNjE2MDRaMDMxMTAvBgNV
BAMTKEE5NUY0RDU2QTlDRTJCQzMwRDZDNkQ5NjI4M0FCOTE5MzM0MzIzNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/QyWcYkoJVkwwV3aDolaRjJu
tjpVrNtV0L1NhohIYMq4u5xS872ra2+kyZb/wTlf1CGpFnr/hWUv2u6JYogq3b7I
NqTlUAxq9x2YEcBFioKiL3xJnpGrfMHLT5f7xiS9urDDhgP21oA+xeFKOtEJh/r0
19+V9J3duBj/XXFAoyYYPsS5mEX3MhIUEM/6X4to+iFc1oGZF4JEcJavqBeOMcna
Mp04u0vLQxwVDkYQzDrdHPQYqBgoitgu67BnY42nw//628rYqZLUVqxWJoj289fn
TBWuXUx4s0aWRujY2JGDYgeBOQANxAgOD5JNwOomgI4FqfJO07oE+zX+uPbVAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUqV9NVqnOK8MNbG2WKDq5GTNDI2cwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAgVHT4MEIlhs79qWXhquqALNNU2oG2vOGVAEzoMXpCqa2tzzEhdFldYed
+++rruTGYsFag/DVGouh193lUS4HDE/7lgEtltJMO5JQB8drKh7VJgFR99FJiR7e
RlV35jl2RicvyZeGm89EJPZtl+wkwt98TRssNbp64WxPuf7j5Z+LbRWTR4LrScjj
lY8/GaFvyNHj61SZ5KCJ4bpi1d44gcYg6FX3YiXHiJh9n6qrDeiMkNxB+rz1zsup
D642jQt+H21ZqzEnpUvXbLJ/KrZ8YAt423jkx5PEL+c3F3kPN6ckdFFhAu/Cjp17
J+q7+Cvu/Ua8aJPUoAUJMRKge6MvoA==
-----END CERTIFICATE-----
Generated at Sun Mar 22 08:44:58 2026 by rpki-client