Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: wlnaQQqF4rHrifCnSazi91wQ/dt58PKuT9pLBEWmeHc=
Subject key identifier: 14:D5:F7:3A:B9:F3:9E:63:F5:AF:29:26:9A:F3:9D:1F:10:71:A5:80
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3208EC509557687B89BCEBFA8533E6D981BD0A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 038E
Signing time: Sun 06 Sep 2026 18:38:00 +0000
Manifest this update: Sun 06 Sep 2026 18:33:00 +0000
Manifest next update: Mon 07 Sep 2026 21:34:00 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: GFR8RzAsU+CymhlaOZE5GKYgVE6wvw92AZZ/tX0kJvQ=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 21:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:08:ec:50:95:57:68:7b:89:bc:eb:fa:85:33:e6:d9:81:bd:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 6 18:33:00 2026 GMT
Not After : Sep 7 21:34:00 2026 GMT
Subject: CN=14D5F73AB9F39E63F5AF29269AF39D1F1071A580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:ff:1d:f6:a8:fc:da:d8:58:3b:f9:e9:0d:
3b:69:a9:3c:12:47:03:86:93:b1:85:4f:90:f2:be:
d5:81:f4:e8:57:08:71:71:56:a1:e8:48:43:c0:8a:
36:f3:9b:40:da:65:46:9d:93:70:8f:20:1c:da:e9:
70:40:ae:a0:31:5f:4c:08:1f:b7:a8:29:23:48:28:
e4:1d:b8:44:53:a8:6c:23:60:17:4d:01:6b:da:6f:
17:08:aa:ef:ce:ce:f4:9a:f4:a5:84:b4:fd:48:46:
74:4e:c7:6b:c0:67:4e:67:40:ca:ee:8d:99:83:13:
2c:b7:76:dc:98:d0:99:77:36:00:ae:ed:94:4e:09:
0c:98:14:13:38:59:b7:75:2e:56:c3:33:9d:55:37:
4d:6a:cd:01:b6:ba:37:33:ab:ee:78:e9:f8:82:3e:
0e:74:12:be:02:a3:72:1f:65:25:a3:28:2a:e2:11:
ac:62:01:23:18:72:4b:62:f0:e4:e7:7a:44:ef:e3:
6a:ba:67:e1:ad:4f:71:75:ac:5c:64:78:52:17:03:
2f:a5:74:83:ec:82:50:17:5d:25:f4:e9:40:f2:5a:
69:01:7d:e6:bf:eb:95:e2:af:eb:c4:ab:20:5c:78:
2f:b3:15:e9:1e:46:04:21:7c:bb:f4:36:73:91:a4:
d3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:F7:3A:B9:F3:9E:63:F5:AF:29:26:9A:F3:9D:1F:10:71:A5:80
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a3:3d:8b:5d:f5:33:3f:8d:7f:aa:c1:38:81:0d:07:b0:5f:
bc:b9:be:d9:e5:b6:c7:83:1f:59:a6:5e:4e:ec:4f:07:36:da:
54:ce:ec:59:6c:ef:b3:5f:7b:d8:ee:b2:76:ca:fc:e5:59:2b:
ed:82:73:9a:d5:ca:91:62:b6:9b:5e:c5:59:ba:28:dd:38:1a:
4f:db:b0:22:54:93:bd:e9:e3:fe:a3:23:65:0f:e5:51:83:74:
d5:83:78:0e:01:e5:36:cd:90:2d:48:56:f7:fb:de:5a:33:2b:
92:18:79:11:a0:e0:7f:52:ab:02:c6:e4:79:6e:1c:7d:b7:24:
38:bd:5e:50:c8:ce:bd:6c:18:c6:db:97:9a:ea:28:ce:b6:4a:
73:66:29:3c:ef:fd:fc:3c:8d:71:9c:e6:b8:65:ec:22:22:00:
ae:47:91:0e:b9:ca:17:16:62:a2:91:56:d6:16:a4:cf:ea:45:
b3:22:5f:a8:3b:91:33:48:c7:24:95:b1:66:43:b0:54:a4:57:
73:5e:11:56:d5:08:53:bb:06:f7:50:aa:17:f0:67:cc:0f:e4:
e9:d3:69:5e:5a:19:74:9b:b2:8f:26:ad:e0:83:1d:b2:08:60:
70:c6:37:ed:1b:2f:70:31:99:4d:22:74:1a:22:fa:10:41:58:
a2:67:c6:80
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUMgjsUJVXaHuJvOv6hTPm2YG9CiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA5MDYxODMzMDBaFw0yNjA5MDcyMTM0MDBaMDMxMTAvBgNV
BAMTKDE0RDVGNzNBQjlGMzlFNjNGNUFGMjkyNjlBRjM5RDFGMTA3MUE1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWgP8d9qj82thYO/npDTtpqTwS
RwOGk7GFT5DyvtWB9OhXCHFxVqHoSEPAijbzm0DaZUadk3CPIBza6XBArqAxX0wI
H7eoKSNIKOQduERTqGwjYBdNAWvabxcIqu/OzvSa9KWEtP1IRnROx2vAZ05nQMru
jZmDEyy3dtyY0Jl3NgCu7ZROCQyYFBM4Wbd1LlbDM51VN01qzQG2ujczq+546fiC
Pg50Er4Co3IfZSWjKCriEaxiASMYckti8OTnekTv42q6Z+GtT3F1rFxkeFIXAy+l
dIPsglAXXSX06UDyWmkBfea/65Xir+vEqyBceC+zFekeRgQhfLv0NnORpNM9AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUFNX3OrnznmP1rykmmvOdHxBxpYAwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAZqM9i131Mz+Nf6rBOIENB7BfvLm+2eW2x4MfWaZeTuxPBzbaVM7sWWzv
s1972O6ydsr85Vkr7YJzmtXKkWK2m17FWboo3TgaT9uwIlSTvenj/qMjZQ/lUYN0
1YN4DgHlNs2QLUhW9/veWjMrkhh5EaDgf1KrAsbkeW4cfbckOL1eUMjOvWwYxtuX
muoozrZKc2YpPO/9/DyNcZzmuGXsIiIArkeRDrnKFxZiopFW1hakz+pFsyJfqDuR
M0jHJJWxZkOwVKRXc14RVtUIU7sG91CqF/BnzA/k6dNpXloZdJuyjyat4IMdsghg
cMY37RsvcDGZTSJ0GiL6EEFYomfGgA==
-----END CERTIFICATE-----
Generated at Mon Sep 7 08:31:48 2026 by rpki-client