Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 82EpZBYskEoYKQGAmuQas5Nhfdgm/Hn8CUiSTQgLBDM=
Subject key identifier: BD:59:6E:B3:2D:38:13:C7:73:81:B7:EF:CE:4B:A3:44:0E:45:42:3B
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 5E4196ADA43091BF7D331AB121C4969E55A22510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 030A
Signing time: Sun 31 May 2026 05:43:17 +0000
Manifest this update: Sun 31 May 2026 05:38:17 +0000
Manifest next update: Mon 01 Jun 2026 07:18:17 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ergUqrznNn0Tj+BIv0IIVLIjEvzpr6pQBqDFMWZaj64=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 07:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:41:96:ad:a4:30:91:bf:7d:33:1a:b1:21:c4:96:9e:55:a2:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: May 31 05:38:17 2026 GMT
Not After : Jun 1 07:18:17 2026 GMT
Subject: CN=BD596EB32D3813C77381B7EFCE4BA3440E45423B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:5f:58:1e:f1:d9:d5:fa:1b:7b:3a:fc:ec:
a1:e2:11:64:f3:b8:ca:18:65:bd:ba:f2:33:76:66:
15:ec:14:af:7b:a6:12:e0:ac:8d:69:ef:2f:70:18:
ba:48:1d:90:41:ea:ca:5c:77:65:d9:07:e8:e1:0d:
90:3a:3c:5d:5b:c1:3d:50:06:4a:3c:53:98:33:68:
2c:c9:0e:85:e9:36:d8:91:af:c2:b2:12:cd:e0:f9:
03:3d:a0:7e:0b:75:e2:25:d5:79:a5:d5:1e:06:66:
27:94:35:49:f8:fe:a0:ec:9f:e4:2d:b9:bc:58:27:
2c:ad:7f:46:a5:6d:25:e1:bc:cf:e7:fa:56:c5:aa:
16:5e:6f:eb:60:50:a4:83:56:45:d0:29:0f:6c:f8:
ec:b4:32:ec:bd:e4:e5:89:e4:85:2b:6d:c6:00:4d:
76:ac:fb:3f:4d:a3:fe:38:c5:d3:3f:b4:9a:b7:06:
6e:3f:51:98:c1:5b:91:5c:7e:96:ca:cf:d1:19:65:
0a:10:07:7d:8b:f2:f8:c4:6e:54:8a:6d:37:5b:de:
91:49:ff:cb:ce:7f:eb:bf:b5:a4:dc:92:37:b5:b2:
e0:77:24:44:9c:b5:5e:31:4f:0e:0b:48:3f:eb:c1:
c2:47:3b:5c:42:ed:bc:40:77:52:ed:ed:38:a6:53:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:59:6E:B3:2D:38:13:C7:73:81:B7:EF:CE:4B:A3:44:0E:45:42:3B
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:0b:49:70:4c:86:01:9c:62:73:87:da:f0:a8:6a:41:52:
fe:26:b5:82:10:bf:13:0d:99:58:a6:41:ce:97:97:ca:ab:f1:
8a:57:fa:48:59:f8:0f:96:db:a3:ee:a9:18:ab:ae:49:7a:59:
53:72:3c:aa:a3:e6:13:a4:9f:0c:df:53:be:9f:46:cd:8f:a7:
6a:7d:6b:ef:1b:3c:7b:56:2a:1d:cb:ed:d2:04:73:82:d4:d8:
89:67:01:bd:1a:a3:e9:4e:5a:22:b2:7e:32:86:91:d7:85:3a:
53:da:ae:a3:f3:54:05:62:2b:b3:86:ca:e4:c7:af:b9:97:8c:
d9:ab:73:35:56:33:d3:00:e1:b2:45:0e:95:43:d7:52:d1:91:
a9:28:5f:fe:ae:de:d2:d2:a4:e6:6a:7d:9e:2b:52:b1:eb:cc:
1b:b0:1c:79:f6:d5:c3:ff:1a:c1:84:4e:74:86:00:c1:98:f5:
60:c5:f1:ff:a9:dd:1f:e6:41:0b:a2:c5:4a:78:8c:fc:2b:a8:
db:b9:1a:da:24:b9:d6:6f:64:ae:3f:1a:dd:b2:9f:4e:7d:c0:
83:20:31:30:5d:84:b4:69:e7:0d:15:50:ff:99:83:0a:0d:cd:
2f:60:0a:06:4b:30:0c:b4:f6:f5:69:cb:9a:81:eb:3b:0b:d3:
85:94:0e:30
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUXkGWraQwkb99MxqxIcSWnlWiJRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA1MzEwNTM4MTdaFw0yNjA2MDEwNzE4MTdaMDMxMTAvBgNV
BAMTKEJENTk2RUIzMkQzODEzQzc3MzgxQjdFRkNFNEJBMzQ0MEU0NTQyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2l9YHvHZ1fobezr87KHiEWTz
uMoYZb268jN2ZhXsFK97phLgrI1p7y9wGLpIHZBB6spcd2XZB+jhDZA6PF1bwT1Q
Bko8U5gzaCzJDoXpNtiRr8KyEs3g+QM9oH4LdeIl1Xml1R4GZieUNUn4/qDsn+Qt
ubxYJyytf0albSXhvM/n+lbFqhZeb+tgUKSDVkXQKQ9s+Oy0Muy95OWJ5IUrbcYA
TXas+z9No/44xdM/tJq3Bm4/UZjBW5FcfpbKz9EZZQoQB32L8vjEblSKbTdb3pFJ
/8vOf+u/taTckje1suB3JESctV4xTw4LSD/rwcJHO1xC7bxAd1Lt7TimUwlvAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUvVlusy04E8dzgbfvzkujRA5FQjswHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAO2ULSXBMhgGcYnOH2vCoakFS/ia1ghC/Ew2ZWKZBzpeXyqvxilf6SFn4
D5bbo+6pGKuuSXpZU3I8qqPmE6SfDN9Tvp9GzY+nan1r7xs8e1YqHcvt0gRzgtTY
iWcBvRqj6U5aIrJ+MoaR14U6U9quo/NUBWIrs4bK5MevuZeM2atzNVYz0wDhskUO
lUPXUtGRqShf/q7e0tKk5mp9nitSsevMG7AcefbVw/8awYROdIYAwZj1YMXx/6nd
H+ZBC6LFSniM/Cuo27ka2iS51m9krj8a3bKfTn3AgyAxMF2EtGnnDRVQ/5mDCg3N
L2AKBkswDLT29WnLmoHrOwvThZQOMA==
-----END CERTIFICATE-----
Generated at Sun May 31 19:41:30 2026 by rpki-client