
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 0GKNzYJGx/KVVmHr4gI8B/GKGep1lQS3fwqMiAcvdvI=
Subject key identifier: 3D:41:B8:03:75:65:82:5B:5B:6B:C4:B1:D0:15:FF:38:23:03:30:75
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 12173DCF15A839ED6714A908207426B3E7DDAB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02E1
Signing time: Thu 30 Apr 2026 23:21:37 +0000
Manifest this update: Thu 30 Apr 2026 23:16:37 +0000
Manifest next update: Fri 01 May 2026 23:23:37 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: NeY5iIqWPXW2kZjIikDj1daeax+PGtkqDiPe665gMhQ=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:17:3d:cf:15:a8:39:ed:67:14:a9:08:20:74:26:b3:e7:dd:ab:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 30 23:16:37 2026 GMT
Not After : May 1 23:23:37 2026 GMT
Subject: CN=3D41B8037565825B5B6BC4B1D015FF3823033075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:b7:17:59:35:17:3d:72:93:36:84:b7:62:
15:43:9a:4e:d2:89:e2:dc:fe:c7:f5:bf:a9:25:ad:
80:3e:15:87:62:18:d1:f9:7b:9d:22:df:29:4c:56:
0e:6c:75:e8:12:d4:2f:32:8c:c7:ad:51:35:dc:4c:
b9:9a:a6:84:83:91:d2:06:b8:72:4a:4d:87:55:f3:
15:5a:cd:54:f8:97:1f:30:6d:ac:e7:38:e2:73:a5:
be:1c:2a:f4:a8:2e:b0:69:4d:19:37:e5:d5:be:ac:
e0:0b:3b:55:d0:52:85:36:b1:f8:e1:ea:47:06:84:
9d:77:ae:c6:53:a8:f4:7a:b3:f9:c0:a4:2e:85:1c:
25:cf:fd:16:78:57:c2:4c:1d:4f:ab:66:b3:e6:9e:
4b:45:28:88:cc:1e:c0:6a:c2:e7:d7:5c:e3:17:b2:
96:2d:a4:09:a7:34:43:f8:9c:cb:08:b9:ce:95:3e:
47:29:b0:f9:3c:4c:2e:c9:f9:35:16:5b:5d:af:7c:
a5:c6:ae:e7:b9:1d:dc:cd:78:43:a4:56:16:8e:e3:
20:fc:e2:29:fe:7a:7d:4c:21:6f:cf:98:9d:b5:86:
3e:7d:12:8c:09:9f:4c:7c:5c:70:93:97:c4:f4:c1:
e1:e7:b2:39:53:3e:c4:20:af:d9:15:2d:14:d1:23:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:B8:03:75:65:82:5B:5B:6B:C4:B1:D0:15:FF:38:23:03:30:75
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d7:5d:5f:2b:a7:94:96:77:35:c3:cf:f1:c6:2b:a9:f7:f0:
88:00:53:ab:6b:22:0b:21:ee:7b:7d:23:44:1d:2f:a5:b8:f1:
0a:cc:cc:29:df:5f:14:7b:44:21:09:11:48:0a:1e:ae:44:35:
37:1a:49:8c:84:3a:8e:11:57:97:cd:bc:95:19:69:73:71:5b:
37:de:c0:8b:26:b6:8c:b8:d2:3f:52:19:9f:57:16:33:9a:12:
80:3c:84:2c:9a:4d:33:97:49:b8:9b:16:38:2e:1a:29:15:c0:
74:2d:bd:f9:9f:01:d5:c1:a3:13:cd:8b:39:cc:2f:27:79:e2:
8a:b8:24:eb:fc:45:a1:c7:51:b7:19:60:8d:6c:b0:10:7c:63:
3b:74:0e:ce:0c:a6:4c:43:80:01:c5:b0:d1:f6:a0:81:23:73:
61:9b:03:d6:0c:bc:8f:22:ea:9f:7a:73:19:4b:03:73:2c:df:
d8:ef:13:d5:b3:58:6d:d5:5c:7a:53:f3:32:f2:0c:71:e4:2d:
f1:6e:fc:06:16:4d:63:11:26:09:e3:0c:b1:e4:4f:31:25:1e:
81:f2:4e:d5:44:1e:f3:b4:b7:cb:30:54:e0:a3:7c:51:83:79:
6e:1f:03:c9:0d:90:c5:8f:b7:66:26:a9:6b:fc:8f:72:56:bb:
58:78:84:11
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUEhc9zxWoOe1nFKkIIHQms+fdqxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA0MzAyMzE2MzdaFw0yNjA1MDEyMzIzMzdaMDMxMTAvBgNV
BAMTKDNENDFCODAzNzU2NTgyNUI1QjZCQzRCMUQwMTVGRjM4MjMwMzMwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpn7cXWTUXPXKTNoS3YhVDmk7S
ieLc/sf1v6klrYA+FYdiGNH5e50i3ylMVg5sdegS1C8yjMetUTXcTLmapoSDkdIG
uHJKTYdV8xVazVT4lx8wbaznOOJzpb4cKvSoLrBpTRk35dW+rOALO1XQUoU2sfjh
6kcGhJ13rsZTqPR6s/nApC6FHCXP/RZ4V8JMHU+rZrPmnktFKIjMHsBqwufXXOMX
spYtpAmnNEP4nMsIuc6VPkcpsPk8TC7J+TUWW12vfKXGrue5HdzNeEOkVhaO4yD8
4in+en1MIW/PmJ21hj59EowJn0x8XHCTl8T0weHnsjlTPsQgr9kVLRTRI4YNAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUPUG4A3Vlgltba8Sx0BX/OCMDMHUwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAEdddXyunlJZ3NcPP8cYrqffwiABTq2siCyHue30jRB0vpbjxCszMKd9f
FHtEIQkRSAoerkQ1NxpJjIQ6jhFXl828lRlpc3FbN97Aiya2jLjSP1IZn1cWM5oS
gDyELJpNM5dJuJsWOC4aKRXAdC29+Z8B1cGjE82LOcwvJ3niirgk6/xFocdRtxlg
jWywEHxjO3QOzgymTEOAAcWw0faggSNzYZsD1gy8jyLqn3pzGUsDcyzf2O8T1bNY
bdVcelPzMvIMceQt8W78BhZNYxEmCeMMseRPMSUegfJO1UQe87S3yzBU4KN8UYN5
bh8DyQ2QxY+3Ziapa/yPcla7WHiEEQ==
-----END CERTIFICATE-----
Generated at Fri May 1 06:09:29 2026 by rpki-client