Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: JkixERs12GYhrlOb542RMNQAYWcmmd5v74HIIAIYIL8=
Subject key identifier: 00:B5:A4:0F:D4:F4:4F:AF:18:EF:DC:CB:88:90:96:C5:AE:2C:DA:F1
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 731677249FA62986ABB6C6CFCD42A1D3B1CDD83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02CA
Signing time: Mon 13 Apr 2026 17:00:36 +0000
Manifest this update: Mon 13 Apr 2026 16:55:36 +0000
Manifest next update: Tue 14 Apr 2026 17:40:36 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 8WLr6CqL5zu2xv2FJ3XvZ9gBS0Vs2tpKehe944amgpg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 14:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:16:77:24:9f:a6:29:86:ab:b6:c6:cf:cd:42:a1:d3:b1:cd:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Apr 13 16:55:36 2026 GMT
Not After : Apr 14 17:40:36 2026 GMT
Subject: CN=00B5A40FD4F44FAF18EFDCCB889096C5AE2CDAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:1e:bb:58:6a:18:16:a2:53:e7:c2:cf:41:
f5:fb:86:41:01:06:7b:0e:6c:a2:52:d2:5c:55:39:
b1:30:9e:3d:2a:ce:45:d3:94:67:05:e9:29:17:f8:
c0:82:43:e5:ff:ac:7b:00:76:ea:6a:57:fd:ad:a4:
29:f9:2c:09:2f:26:0a:cc:ff:3f:f1:66:ac:aa:21:
9b:c4:6f:a1:63:87:9a:c0:e3:9a:d7:67:8a:f9:28:
3e:f2:19:8a:08:33:bd:66:54:a7:70:2d:0f:ed:8b:
98:91:5c:3e:ff:e6:07:80:4f:f8:72:49:aa:e0:a4:
ac:66:c6:f6:89:30:85:b8:a1:c2:af:b3:e3:8c:20:
68:28:75:86:02:a8:2e:2c:45:6b:5c:dc:f6:6e:b7:
e1:09:9e:c4:78:e4:c1:84:75:5c:70:95:29:7d:f3:
35:d4:b6:a8:a3:af:4e:2b:94:d3:06:25:ca:a9:18:
0a:29:e3:1b:48:a0:60:d6:00:e3:35:15:9e:41:0c:
6d:fb:40:e9:69:71:52:69:cf:d2:6d:56:b9:ad:db:
ca:05:48:d9:e1:1f:88:c6:1b:e5:e0:bf:47:46:51:
c9:5c:07:d5:01:cf:7b:41:4a:d2:42:19:e4:10:84:
31:d2:ab:ca:a1:a6:4b:15:c3:84:19:c8:1b:12:10:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:A4:0F:D4:F4:4F:AF:18:EF:DC:CB:88:90:96:C5:AE:2C:DA:F1
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1b:4e:3c:62:8b:71:ea:c4:95:fe:91:a6:a1:99:b8:36:4f:
5c:13:1c:f4:e0:58:84:fe:f5:d5:df:25:06:e2:dd:7a:2f:6f:
cf:dc:02:d2:7e:c6:f0:69:18:4c:a3:a9:a4:bc:60:13:a6:e8:
10:55:7e:58:61:a7:e1:ce:a0:a0:42:bf:e7:52:f4:a2:13:53:
4c:17:06:99:7d:65:aa:ba:d6:14:4b:69:44:cd:ef:02:e0:fd:
cd:b8:34:ec:b6:3f:87:f3:6a:79:d0:38:8b:a0:6e:d9:de:93:
13:f0:eb:5b:71:60:28:8c:be:6a:e3:38:01:af:5a:4d:e5:bb:
9f:e4:3e:db:8b:a1:99:ab:da:e3:91:f5:52:26:b3:74:56:3b:
cc:3c:4e:c6:0c:b8:f0:a5:b2:90:3c:f0:67:bb:8d:f5:0f:33:
51:5f:2a:02:0c:9f:75:b6:81:75:24:01:3d:68:34:00:b3:f3:
95:78:04:2d:a1:d0:63:e3:3c:d7:6d:10:03:ac:b5:39:bf:04:
3c:b0:81:b3:dd:bb:e8:5f:9b:13:b0:28:a4:1e:1a:4f:1b:89:
64:fa:2e:c2:f9:38:8c:a4:67:62:04:6b:bb:fd:0a:a5:32:55:
ef:0f:d9:85:40:0a:13:7c:25:e2:19:df:15:f2:20:ec:4b:c2:
8a:15:29:61
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUcxZ3JJ+mKYartsbPzUKh07HN2DwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA0MTMxNjU1MzZaFw0yNjA0MTQxNzQwMzZaMDMxMTAvBgNV
BAMTKDAwQjVBNDBGRDRGNDRGQUYxOEVGRENDQjg4OTA5NkM1QUUyQ0RBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHx67WGoYFqJT58LPQfX7hkEB
BnsObKJS0lxVObEwnj0qzkXTlGcF6SkX+MCCQ+X/rHsAdupqV/2tpCn5LAkvJgrM
/z/xZqyqIZvEb6Fjh5rA45rXZ4r5KD7yGYoIM71mVKdwLQ/ti5iRXD7/5geAT/hy
SargpKxmxvaJMIW4ocKvs+OMIGgodYYCqC4sRWtc3PZut+EJnsR45MGEdVxwlSl9
8zXUtqijr04rlNMGJcqpGAop4xtIoGDWAOM1FZ5BDG37QOlpcVJpz9JtVrmt28oF
SNnhH4jGG+Xgv0dGUclcB9UBz3tBStJCGeQQhDHSq8qhpksVw4QZyBsSEMLJAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUALWkD9T0T68Y79zLiJCWxa4s2vEwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAXxtOPGKLcerElf6RpqGZuDZPXBMc9OBYhP711d8lBuLdei9vz9wC0n7G
8GkYTKOppLxgE6boEFV+WGGn4c6goEK/51L0ohNTTBcGmX1lqrrWFEtpRM3vAuD9
zbg07LY/h/NqedA4i6Bu2d6TE/DrW3FgKIy+auM4Aa9aTeW7n+Q+24uhmava45H1
UiazdFY7zDxOxgy48KWykDzwZ7uN9Q8zUV8qAgyfdbaBdSQBPWg0ALPzlXgELaHQ
Y+M8120QA6y1Ob8EPLCBs9276F+bE7AopB4aTxuJZPouwvk4jKRnYgRru/0KpTJV
7w/ZhUAKE3wl4hnfFfIg7EvCihUpYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 22:51:34 2026 by rpki-client