Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: /ECdbVaKcNckhYcKzzxLqIOhvZJyrz0R1niuc+zIcBs=
Subject key identifier: 35:B7:C6:57:E0:D2:EF:4A:7E:E5:5F:15:E7:6B:AB:B1:B3:A3:E6:CB
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 445C22B3DE1147D8D795A9D30DEFB556D58DBC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0290
Signing time: Sat 28 Feb 2026 13:54:33 +0000
Manifest this update: Sat 28 Feb 2026 13:49:33 +0000
Manifest next update: Sun 01 Mar 2026 15:34:33 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: wd8HcHWkbzmFjIwR4X5PoNL1VEOcuVYI8GCuOhDGmcc=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5c:22:b3:de:11:47:d8:d7:95:a9:d3:0d:ef:b5:56:d5:8d:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 28 13:49:33 2026 GMT
Not After : Mar 1 15:34:33 2026 GMT
Subject: CN=35B7C657E0D2EF4A7EE55F15E76BABB1B3A3E6CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:25:77:46:e6:17:eb:48:35:84:11:b6:f1:
dd:8c:21:0f:19:58:7e:79:e6:db:88:0e:76:2e:bc:
11:f6:a4:db:ed:db:33:b4:ac:27:e4:cf:7d:51:39:
a4:75:21:5d:01:29:8c:99:53:ce:41:22:28:94:63:
e5:60:89:a4:4d:95:0a:98:3b:66:0c:36:d6:9a:7d:
99:96:32:36:7c:77:db:1c:fe:49:f8:05:bc:55:2c:
e5:e1:4a:1b:e0:fe:96:53:2a:0e:f6:bf:a5:88:78:
27:c8:53:58:74:fe:83:43:a0:33:a3:70:4f:15:76:
a0:06:0f:6b:c6:5e:6e:d9:36:29:e7:36:7d:e6:c8:
70:17:ec:ca:20:a8:d4:87:2a:df:7c:82:46:2c:4f:
b5:e9:44:da:7a:ce:cf:1e:53:ef:f7:44:77:5e:d3:
e3:bf:46:33:b2:5c:f7:de:22:3f:dd:71:9e:71:09:
f5:29:a3:37:27:a7:31:2b:8b:1f:25:f8:7e:2f:98:
e2:06:6f:3e:c2:8f:ad:23:b9:66:f0:0f:dd:b2:32:
57:65:ea:64:35:c4:1a:51:91:37:c7:5a:84:4e:5d:
c2:3b:8b:eb:a6:ae:de:f7:76:1b:9d:52:b4:d8:bf:
43:bd:88:0f:ad:c4:d9:47:e8:83:24:54:87:ce:12:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:C6:57:E0:D2:EF:4A:7E:E5:5F:15:E7:6B:AB:B1:B3:A3:E6:CB
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bd:4d:49:d7:a4:8d:4c:5c:89:2b:fb:4a:9d:f1:4d:d8:ab:
1c:e8:85:39:c3:e0:31:87:37:64:bc:f3:8b:9b:32:d9:49:36:
cf:9e:dd:54:cd:4f:4d:d1:bc:d5:27:ab:77:07:42:a8:f6:e7:
cc:81:2e:70:1b:1b:47:03:12:d8:0e:7f:c1:48:7c:47:20:50:
c3:0f:ce:ea:40:f7:d4:d8:b6:27:39:4c:10:ee:db:d7:1e:ec:
45:b4:cb:63:13:17:90:f9:98:2e:4d:bc:0a:0b:f9:9c:3f:b6:
cf:3c:8d:0d:d3:3c:20:e9:71:51:25:51:b7:3d:71:97:bc:ad:
4a:8c:b0:0b:3c:54:01:a1:9c:8e:54:d9:49:e0:62:78:6a:5a:
00:ad:f5:33:5d:9f:fb:30:44:c1:12:f6:c3:6b:37:c7:af:be:
ac:17:35:97:c6:1e:3c:fa:85:77:25:5f:c5:93:af:df:31:b6:
5b:bf:98:24:60:06:32:02:ce:60:2e:76:b1:cb:50:6d:7e:44:
f5:ad:91:e6:a7:94:29:c0:b1:27:17:02:4d:41:b6:ad:0d:ed:
bf:62:f0:2e:33:7a:7e:43:91:08:7f:53:6d:54:4f:c4:10:15:
49:eb:46:61:3a:80:57:84:2b:41:86:cf:6e:9e:f6:6a:ca:eb:
9b:08:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 16:16:29 2026 by rpki-client