Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: f3vbvPNISumdm+m617lFlnjhw8lvGRQChgBoSJFW/8o=
Subject key identifier: 93:C2:00:D3:7C:D4:B6:B3:89:12:0D:4F:8E:5C:4F:73:A4:64:B8:41
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 09C2673B0542DB8E30AAFBDCE9E9E57F13BFFB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0299
Signing time: Sat 07 Mar 2026 09:22:08 +0000
Manifest this update: Sat 07 Mar 2026 09:17:08 +0000
Manifest next update: Sun 08 Mar 2026 09:24:08 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Tf4Mx0OW0gPC1Uv1Pg2nRS6vdwYXY3fJfNlyi6vj8iY=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 09:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c2:67:3b:05:42:db:8e:30:aa:fb:dc:e9:e9:e5:7f:13:bf:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 7 09:17:08 2026 GMT
Not After : Mar 8 09:24:08 2026 GMT
Subject: CN=93C200D37CD4B6B389120D4F8E5C4F73A464B841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:ab:9f:c6:9d:d5:2f:98:de:b7:c4:d9:b1:
09:d2:d8:3e:f5:6a:4d:a4:44:7c:3f:32:13:bb:6a:
ad:c9:ef:17:db:7c:de:4b:a5:68:29:5c:da:b7:1a:
73:11:5e:9d:64:44:72:2c:1f:0e:51:8d:15:c0:25:
e2:22:ee:c1:eb:c0:a6:7a:aa:2a:df:f4:b2:01:92:
fd:64:eb:05:94:5b:f3:57:9a:c7:21:61:8e:ae:9a:
6e:97:75:cf:75:e4:94:75:2a:a9:f3:49:bb:6f:15:
55:6c:da:49:f2:b0:29:72:30:32:62:b5:29:49:cf:
da:61:36:dc:70:82:96:00:f0:67:ed:19:d0:1c:08:
ef:f6:7e:53:43:ba:c2:84:6e:0c:bf:5f:58:db:5f:
9d:7b:77:58:c7:10:6e:28:65:39:35:93:10:2d:7b:
96:60:fb:7a:e9:6d:57:5b:07:16:45:1b:1a:83:ab:
14:b5:cc:05:80:4f:87:3c:35:38:d6:a5:f3:4c:34:
c9:d0:14:8a:22:ea:aa:94:bf:d0:eb:55:a0:33:94:
eb:2d:44:e0:41:d9:96:e3:8a:7f:17:1c:de:9a:5d:
73:c7:07:f4:48:1d:a8:60:6b:16:d6:53:fd:2c:c1:
58:3f:38:bf:ec:80:73:34:b9:5f:11:82:28:8a:29:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:00:D3:7C:D4:B6:B3:89:12:0D:4F:8E:5C:4F:73:A4:64:B8:41
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:db:e7:8c:8d:7b:64:9c:46:f1:c9:22:fe:73:52:cd:87:26:
e6:b8:f9:4b:ab:2a:60:df:2e:fd:8b:df:c0:c2:e8:75:bc:bd:
35:f8:60:0f:c3:dd:62:85:35:00:8b:96:8c:88:cb:c6:80:a9:
4f:e7:27:96:8a:0e:65:3a:65:22:52:de:8f:d4:16:c8:4f:fa:
02:12:98:8a:36:2a:ad:61:76:e5:e3:86:9b:90:0b:04:a0:f7:
00:97:75:42:24:a3:ce:23:96:5e:a7:3d:7f:d3:1b:66:28:23:
a7:f1:77:24:3a:51:12:14:49:7f:e0:80:1e:8e:b0:d9:b2:d1:
56:6d:b3:73:2b:44:66:51:e6:e5:05:cd:c3:c2:cd:63:ca:b2:
f6:a1:0d:3c:38:3d:2a:05:76:39:6f:32:d7:dd:0c:a8:3c:39:
66:5f:18:2e:b5:a3:3b:0f:da:8b:12:47:8a:57:3e:16:ec:e4:
0c:69:93:d9:3f:73:44:af:93:08:a5:a3:23:2d:2b:a5:0f:0b:
33:0f:24:63:73:35:c2:86:84:5e:01:f2:cb:ec:ad:23:c5:83:
18:57:5d:fd:73:f2:c4:f6:fb:ff:d5:d3:7f:65:dc:42:d6:2b:
2e:86:04:ad:50:b6:5b:50:ef:99:6e:12:ca:fa:b3:8e:d1:3d:
69:c5:7e:c4
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUCcJnOwVC244wqvvc6enlfxO/+ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjAzMDcwOTE3MDhaFw0yNjAzMDgwOTI0MDhaMDMxMTAvBgNV
BAMTKDkzQzIwMEQzN0NENEI2QjM4OTEyMEQ0RjhFNUM0RjczQTQ2NEI4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMg6ufxp3VL5jet8TZsQnS2D71
ak2kRHw/MhO7aq3J7xfbfN5LpWgpXNq3GnMRXp1kRHIsHw5RjRXAJeIi7sHrwKZ6
qirf9LIBkv1k6wWUW/NXmschYY6umm6Xdc915JR1KqnzSbtvFVVs2knysClyMDJi
tSlJz9phNtxwgpYA8GftGdAcCO/2flNDusKEbgy/X1jbX517d1jHEG4oZTk1kxAt
e5Zg+3rpbVdbBxZFGxqDqxS1zAWAT4c8NTjWpfNMNMnQFIoi6qqUv9DrVaAzlOst
ROBB2Zbjin8XHN6aXXPHB/RIHahgaxbWU/0swVg/OL/sgHM0uV8RgiiKKXNfAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUk8IA03zUtrOJEg1PjlxPc6RkuEEwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAC9vnjI17ZJxG8cki/nNSzYcm5rj5S6sqYN8u/YvfwMLodby9NfhgD8Pd
YoU1AIuWjIjLxoCpT+cnlooOZTplIlLej9QWyE/6AhKYijYqrWF25eOGm5ALBKD3
AJd1QiSjziOWXqc9f9MbZigjp/F3JDpREhRJf+CAHo6w2bLRVm2zcytEZlHm5QXN
w8LNY8qy9qENPDg9KgV2OW8y190MqDw5Zl8YLrWjOw/aixJHilc+FuzkDGmT2T9z
RK+TCKWjIy0rpQ8LMw8kY3M1woaEXgHyy+ytI8WDGFdd/XPyxPb7/9XTf2XcQtYr
LoYErVC2W1DvmW4SyvqzjtE9acV+xA==
-----END CERTIFICATE-----
Generated at Sun Mar 8 02:38:04 2026 by rpki-client