Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: 8NWAVxT1jHiN7BOf7aJYRjXYAqkrw5j6frMcXAhOOjo=
Subject key identifier: EC:0C:45:73:D4:81:18:41:B5:AF:76:58:39:52:4B:81:F8:2E:41:EE
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3693C47C452E77EC5341F207C6D44D078F11F693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02C9
Signing time: Mon 13 Apr 2026 00:20:26 +0000
Manifest this update: Mon 13 Apr 2026 00:15:26 +0000
Manifest next update: Tue 14 Apr 2026 00:56:26 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: zslA4Ns4U0nKtm44Kxj6ieXLbGxXQI0Ie5S+D9l3kBc=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:93:c4:7c:45:2e:77:ec:53:41:f2:07:c6:d4:4d:07:8f:11:f6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 13 00:15:26 2026 GMT
Not After : Apr 14 00:56:26 2026 GMT
Subject: CN=EC0C4573D4811841B5AF765839524B81F82E41EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:50:9b:bf:e4:16:6c:ec:06:fe:87:c1:ae:
10:11:08:a8:f3:10:c6:3f:d6:fc:11:a3:2a:7a:7c:
60:03:d3:a0:d1:c6:ed:f1:23:42:c1:b2:8d:35:0e:
da:4d:eb:01:09:64:f7:c7:cf:bb:f3:32:22:57:88:
47:09:a7:a5:46:5e:b8:7d:96:74:9a:1e:66:cc:4c:
c7:84:c0:86:35:2c:51:f5:3f:5e:62:cc:b0:40:77:
5d:3f:ac:71:38:42:92:2e:1c:18:9f:c5:2b:91:ca:
8c:0d:f0:f1:1e:62:fc:ee:cd:bc:e8:d6:35:10:fb:
0f:e2:dd:30:f1:50:d9:28:0d:52:0b:1a:08:d6:0a:
b0:15:72:54:95:ba:35:82:4f:7c:4a:b4:e7:ad:10:
10:82:4e:11:b2:c6:a6:bb:4c:b7:ac:83:c9:71:c8:
63:fa:47:31:b9:c0:a8:65:eb:19:ec:bc:ac:de:fb:
c3:19:25:eb:c3:bd:4d:ec:5c:c7:05:2d:08:fa:82:
b7:0a:9e:3b:25:4d:ad:e7:8d:37:0b:b0:32:57:11:
9a:3e:91:f9:eb:8a:94:19:4e:c9:99:2c:30:11:85:
10:11:26:66:bf:de:8f:aa:dc:61:55:a6:58:71:0c:
4a:74:31:98:db:1e:63:1d:55:b9:db:99:ea:cc:b8:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:45:73:D4:81:18:41:B5:AF:76:58:39:52:4B:81:F8:2E:41:EE
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:35:7e:dd:bc:47:3a:f2:72:29:b7:52:8c:5d:71:cc:43:75:
2a:17:26:9e:bc:25:01:dc:4d:1b:ae:c4:57:59:cc:c2:b2:73:
13:7c:93:f9:60:30:23:21:d8:cd:d4:bc:0b:80:62:90:82:f5:
22:b8:ef:6d:d6:ef:32:3d:ff:1a:4c:99:fe:c1:f5:5b:6b:ca:
6f:0a:0b:4c:a5:dc:9c:f2:59:88:b9:05:83:94:e9:4c:5e:d8:
3f:b3:bf:fa:5f:76:94:3d:62:76:dd:3d:54:4b:6b:68:75:99:
2e:c0:a8:1e:78:09:ad:19:af:a8:bf:30:a8:5f:7f:48:48:9d:
34:95:d6:96:dc:ea:aa:57:d0:b0:d2:64:83:bb:71:71:04:56:
15:38:0e:35:b2:02:5a:74:ed:3d:82:67:9b:82:57:b4:21:cc:
ce:04:11:60:c7:ce:7c:91:d7:f3:31:25:b7:72:43:7c:5f:e4:
ca:0a:a2:bb:c2:8d:49:de:11:8d:4f:09:39:9e:86:b8:db:81:
64:6a:d6:0b:bf:5a:b3:29:c4:e1:ba:11:ad:13:8e:9b:06:f9:
2e:82:d0:e3:74:2b:ca:15:8d:00:8d:e8:5d:53:d5:2d:97:e7:
31:4b:6d:71:32:b8:20:4f:24:f1:a0:ac:3f:ff:8e:51:10:fa:
ae:69:fb:26
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUNpPEfEUud+xTQfIHxtRNB48R9pMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA0MTMwMDE1MjZaFw0yNjA0MTQwMDU2MjZaMDMxMTAvBgNV
BAMTKEVDMEM0NTczRDQ4MTE4NDFCNUFGNzY1ODM5NTI0QjgxRjgyRTQxRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsFCbv+QWbOwG/ofBrhARCKjz
EMY/1vwRoyp6fGAD06DRxu3xI0LBso01DtpN6wEJZPfHz7vzMiJXiEcJp6VGXrh9
lnSaHmbMTMeEwIY1LFH1P15izLBAd10/rHE4QpIuHBifxSuRyowN8PEeYvzuzbzo
1jUQ+w/i3TDxUNkoDVILGgjWCrAVclSVujWCT3xKtOetEBCCThGyxqa7TLesg8lx
yGP6RzG5wKhl6xnsvKze+8MZJevDvU3sXMcFLQj6grcKnjslTa3njTcLsDJXEZo+
kfnripQZTsmZLDARhRARJma/3o+q3GFVplhxDEp0MZjbHmMdVbnbmerMuBMzAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQU7AxFc9SBGEG1r3ZYOVJLgfguQe4wHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAKDV+3bxHOvJyKbdSjF1xzEN1KhcmnrwlAdxNG67EV1nMwrJzE3yT+WAw
IyHYzdS8C4BikIL1IrjvbdbvMj3/GkyZ/sH1W2vKbwoLTKXcnPJZiLkFg5TpTF7Y
P7O/+l92lD1idt09VEtraHWZLsCoHngJrRmvqL8wqF9/SEidNJXWltzqqlfQsNJk
g7txcQRWFTgONbICWnTtPYJnm4JXtCHMzgQRYMfOfJHX8zElt3JDfF/kygqiu8KN
Sd4RjU8JOZ6GuNuBZGrWC79asynE4boRrROOmwb5LoLQ43QryhWNAI3oXVPVLZfn
MUttcTK4IE8k8aCsP/+OURD6rmn7Jg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 14:35:09 2026 by rpki-client