Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: nNQ1SJJ31UodEunPGi7MdC0WNw6XUkkY7+3rXq0lh3I=
Subject key identifier: 66:B1:66:8C:BE:D7:2C:B0:C7:9E:BD:CE:82:ED:F6:87:A4:6C:0C:DE
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 086943E658D994F7A642D66B98025D4A783ECC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02C8
Signing time: Sun 12 Apr 2026 07:55:26 +0000
Manifest this update: Sun 12 Apr 2026 07:50:26 +0000
Manifest next update: Mon 13 Apr 2026 08:17:26 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: hvafU9rkRpFgMglr68051LkeiJfJ/235gw25jIGIWAw=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:69:43:e6:58:d9:94:f7:a6:42:d6:6b:98:02:5d:4a:78:3e:cc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 12 07:50:26 2026 GMT
Not After : Apr 13 08:17:26 2026 GMT
Subject: CN=66B1668CBED72CB0C79EBDCE82EDF687A46C0CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:32:23:9f:1b:72:d6:f6:87:57:55:3e:1d:
4b:45:a5:9b:33:02:7f:6b:5b:83:65:4b:e8:45:9c:
02:ca:86:8d:98:7f:be:8d:23:66:cd:84:35:08:4c:
1e:9a:ee:cc:73:c0:83:4b:4c:53:e1:bd:79:b6:0a:
0c:10:ff:52:ac:71:02:3d:23:15:96:e5:01:6e:06:
39:2a:9a:b5:95:2e:8c:96:6f:b2:2f:15:f7:02:a0:
fc:b1:5a:f8:7a:02:f7:b9:db:bf:58:6f:ac:d5:89:
e7:01:fd:24:ef:52:47:ef:dd:9d:a7:da:cc:bd:5e:
2d:fa:26:ae:dc:9d:18:39:14:9c:95:7c:ef:13:62:
e2:10:4a:98:1f:6e:ee:55:9a:15:70:73:64:95:77:
1b:47:30:04:b8:f3:59:7e:be:76:d3:40:64:da:e0:
89:e7:4e:f9:c6:bd:3e:1a:b4:fc:65:bf:af:91:60:
f0:84:18:64:d3:94:4e:f4:03:19:66:8f:29:4d:6b:
4e:24:14:76:d0:8d:e2:0c:05:17:e2:a8:49:33:21:
8b:89:89:0e:93:83:a4:2a:19:1e:f5:1d:aa:46:5d:
ba:e9:5d:e8:b9:65:4d:e4:d4:f8:ce:f3:3b:af:b5:
75:60:91:f6:b1:17:35:6e:b9:37:d1:cf:00:f5:d7:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B1:66:8C:BE:D7:2C:B0:C7:9E:BD:CE:82:ED:F6:87:A4:6C:0C:DE
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:c0:ed:39:93:7e:a0:12:70:95:d9:cd:df:08:90:21:9b:
3d:43:12:e7:04:78:3e:f2:49:f5:cd:25:cc:23:b4:17:cb:c7:
1e:6a:f1:c8:06:0e:6a:7c:9d:e8:9a:38:e5:a0:45:1a:fd:18:
df:01:1d:30:19:44:74:1c:26:b6:4d:b1:47:3f:89:17:65:6b:
99:a5:1d:1e:7f:57:d8:e8:0a:6d:a4:ef:30:1b:6e:50:43:b4:
26:c6:af:dd:fe:1d:34:ad:d0:73:ad:3d:36:13:d5:22:bd:89:
3d:b5:cf:89:a0:06:68:79:d9:9d:c3:c9:c4:c3:8e:1d:ac:bc:
b4:dd:5d:a4:1f:6b:77:73:2f:fb:d0:d9:3f:12:02:dc:3f:d9:
db:88:d7:00:6d:ce:6e:f0:4e:6d:c4:31:d7:68:82:f7:62:54:
f6:bc:d3:cd:0f:e6:0b:16:c7:74:71:35:3f:72:75:85:76:b2:
08:47:0a:2f:de:f2:db:c7:9a:92:f3:a2:be:38:7b:e3:7d:e5:
c0:7f:ec:f9:32:88:07:1b:2a:59:2f:6a:0c:c9:f0:4a:26:93:
d1:20:2f:a7:1e:28:53:eb:ab:e9:fb:d3:0d:5e:23:7d:6f:07:
01:40:a4:f1:11:2f:12:69:f9:08:f1:e8:13:27:cd:23:c5:37:
81:bd:18:5c
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUCGlD5ljZlPemQtZrmAJdSng+zDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA0MTIwNzUwMjZaFw0yNjA0MTMwODE3MjZaMDMxMTAvBgNV
BAMTKDY2QjE2NjhDQkVENzJDQjBDNzlFQkRDRTgyRURGNjg3QTQ2QzBDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHDIjnxty1vaHV1U+HUtFpZsz
An9rW4NlS+hFnALKho2Yf76NI2bNhDUITB6a7sxzwINLTFPhvXm2CgwQ/1KscQI9
IxWW5QFuBjkqmrWVLoyWb7IvFfcCoPyxWvh6Ave5279Yb6zViecB/STvUkfv3Z2n
2sy9Xi36Jq7cnRg5FJyVfO8TYuIQSpgfbu5VmhVwc2SVdxtHMAS481l+vnbTQGTa
4InnTvnGvT4atPxlv6+RYPCEGGTTlE70AxlmjylNa04kFHbQjeIMBRfiqEkzIYuJ
iQ6Tg6QqGR71HapGXbrpXei5ZU3k1PjO8zuvtXVgkfaxFzVuuTfRzwD113bVAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUZrFmjL7XLLDHnr3Ogu32h6RsDN4wHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAA+vA7TmTfqAScJXZzd8IkCGbPUMS5wR4PvJJ9c0lzCO0F8vHHmrxyAYO
anyd6Jo45aBFGv0Y3wEdMBlEdBwmtk2xRz+JF2VrmaUdHn9X2OgKbaTvMBtuUEO0
Jsav3f4dNK3Qc609NhPVIr2JPbXPiaAGaHnZncPJxMOOHay8tN1dpB9rd3Mv+9DZ
PxIC3D/Z24jXAG3ObvBObcQx12iC92JU9rzTzQ/mCxbHdHE1P3J1hXayCEcKL97y
28eakvOivjh7433lwH/s+TKIBxsqWS9qDMnwSiaT0SAvpx4oU+ur6fvTDV4jfW8H
AUCk8REvEmn5CPHoEyfNI8U3gb0YXA==
-----END CERTIFICATE-----
Generated at Sun Apr 12 12:56:46 2026 by rpki-client