
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: o99AUfuNeykrM8wwHWWcAc6V6NTYgSvi9E9NaCQOaKo=
Subject key identifier: 26:F7:FB:33:C2:D4:C3:27:1F:E9:66:AE:BC:71:F0:38:89:2F:70:F0
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 774455614D2603EE249A7C5DCA178A7D5894EC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02E9
Signing time: Wed 06 May 2026 19:12:26 +0000
Manifest this update: Wed 06 May 2026 19:07:26 +0000
Manifest next update: Thu 07 May 2026 21:12:26 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: plFe0hicIpROcMSq2e/dR1HQxT+bsJPEkU6RukG6PLU=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:44:55:61:4d:26:03:ee:24:9a:7c:5d:ca:17:8a:7d:58:94:ec:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 6 19:07:26 2026 GMT
Not After : May 7 21:12:26 2026 GMT
Subject: CN=26F7FB33C2D4C3271FE966AEBC71F038892F70F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:5a:0a:0b:a5:bb:17:1f:a4:1b:1e:32:37:
a1:7a:40:9b:8f:68:12:17:b1:31:6a:0e:81:a0:9b:
1d:a9:30:7d:7b:8a:a1:60:60:b3:a8:1a:7b:5d:68:
20:a8:5d:d6:29:41:e5:ef:79:f8:ba:0f:d9:91:db:
b5:c0:45:57:c1:9f:0c:7b:92:97:6a:db:b6:f7:03:
8e:cf:05:53:87:b5:5c:bc:4b:8a:c8:eb:56:e3:c6:
cf:a0:7e:67:dc:29:3a:35:1e:99:b7:78:ce:91:36:
41:64:f8:ef:2c:49:4e:fe:cf:8d:4c:ed:af:0d:54:
d5:bd:e5:63:65:66:70:4d:b2:e7:d4:f8:a3:20:a3:
30:d9:7c:84:67:e8:05:d3:c9:99:1f:a2:bf:d1:dd:
28:f3:b4:94:16:22:5a:ed:bc:8f:f3:50:e4:2a:ac:
68:ba:ef:19:d3:47:23:1a:45:0e:8f:77:87:09:f8:
52:7a:a8:0c:99:fb:9c:90:cd:23:b9:76:17:9e:0d:
41:55:8e:17:7f:99:2c:26:09:78:a0:63:c3:03:d1:
59:dd:ef:bd:cc:19:a9:06:53:68:50:2f:51:72:0a:
59:2b:64:fd:ce:0e:73:c7:0a:38:2c:1c:5b:bf:c4:
a2:78:58:a8:7d:a5:6b:97:00:34:03:d7:7b:6f:60:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F7:FB:33:C2:D4:C3:27:1F:E9:66:AE:BC:71:F0:38:89:2F:70:F0
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ce:11:68:1c:28:5b:ab:17:e9:1a:84:05:84:1b:14:02:9e:
21:a8:4d:cb:35:1d:98:00:24:49:7c:69:30:18:64:14:c1:77:
44:6e:28:34:81:ea:11:1e:62:6b:a4:cb:15:e2:8a:b9:3f:69:
23:79:67:8f:db:4d:b4:e1:a4:aa:ae:68:d7:b4:c2:7e:19:9f:
ba:78:d7:d5:45:45:c5:ed:48:0b:68:31:fa:30:af:7f:12:13:
98:02:e0:ed:6e:49:f8:76:ec:f6:c4:4e:cd:ec:40:82:01:63:
90:24:e0:6a:8d:92:09:bd:79:e7:5c:93:1c:fa:b0:ee:29:81:
c0:09:e4:8f:04:9f:62:ba:37:46:87:df:7c:4d:63:6f:26:b2:
11:70:93:2a:9a:f2:ad:ef:ad:03:88:ca:32:b8:77:c9:de:22:
33:9d:7a:35:ff:3c:6d:9d:80:ba:fb:97:75:b4:f1:47:2f:13:
19:32:f6:8d:d0:75:d1:f9:4a:40:6e:8f:b6:76:52:37:73:9f:
9a:0d:b3:c2:c6:1f:58:6b:84:5e:7d:4b:60:c3:22:1e:3a:21:
d6:07:f7:2b:44:a3:09:bc:8d:fb:73:1b:6c:f5:76:05:09:a0:
c8:1c:3a:bf:dc:10:96:d6:32:27:1d:1b:59:45:41:54:49:30:
a2:97:9d:da
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUd0RVYU0mA+4kmnxdyheKfViU7BswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MDYxOTA3MjZaFw0yNjA1MDcyMTEyMjZaMDMxMTAvBgNV
BAMTKDI2RjdGQjMzQzJENEMzMjcxRkU5NjZBRUJDNzFGMDM4ODkyRjcwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaY1oKC6W7Fx+kGx4yN6F6QJuP
aBIXsTFqDoGgmx2pMH17iqFgYLOoGntdaCCoXdYpQeXvefi6D9mR27XARVfBnwx7
kpdq27b3A47PBVOHtVy8S4rI61bjxs+gfmfcKTo1Hpm3eM6RNkFk+O8sSU7+z41M
7a8NVNW95WNlZnBNsufU+KMgozDZfIRn6AXTyZkfor/R3SjztJQWIlrtvI/zUOQq
rGi67xnTRyMaRQ6Pd4cJ+FJ6qAyZ+5yQzSO5dheeDUFVjhd/mSwmCXigY8MD0Vnd
773MGakGU2hQL1FyClkrZP3ODnPHCjgsHFu/xKJ4WKh9pWuXADQD13tvYHIxAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUJvf7M8LUwycf6WauvHHwOIkvcPAwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAkM4RaBwoW6sX6RqEBYQbFAKeIahNyzUdmAAkSXxpMBhkFMF3RG4oNIHq
ER5ia6TLFeKKuT9pI3lnj9tNtOGkqq5o17TCfhmfunjX1UVFxe1IC2gx+jCvfxIT
mALg7W5J+Hbs9sROzexAggFjkCTgao2SCb1551yTHPqw7imBwAnkjwSfYro3Roff
fE1jbyayEXCTKpryre+tA4jKMrh3yd4iM516Nf88bZ2AuvuXdbTxRy8TGTL2jdB1
0flKQG6PtnZSN3Ofmg2zwsYfWGuEXn1LYMMiHjoh1gf3K0SjCbyN+3MbbPV2BQmg
yBw6v9wQltYyJx0bWUVBVEkwoped2g==
-----END CERTIFICATE-----
Generated at Thu May 7 10:32:55 2026 by rpki-client