Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: tvovKuBQ4/u9I+lcoooHq2Nma983FFF13RxajKRtpBM=
Subject key identifier: 36:A5:F5:B8:E4:E3:D1:66:D9:89:AD:F6:87:B1:1B:83:17:1E:09:67
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 60419FFF872E50E99E33F6D814CC17526B364EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0288
Signing time: Sun 22 Feb 2026 12:58:20 +0000
Manifest this update: Sun 22 Feb 2026 12:53:20 +0000
Manifest next update: Mon 23 Feb 2026 16:25:20 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 2MUpWzLqUfY2xHPKkd+FwxbDLzDWUiyMCImkTHvwu8w=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 16:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:41:9f:ff:87:2e:50:e9:9e:33:f6:d8:14:cc:17:52:6b:36:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 22 12:53:20 2026 GMT
Not After : Feb 23 16:25:20 2026 GMT
Subject: CN=36A5F5B8E4E3D166D989ADF687B11B83171E0967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:fd:75:63:81:a8:f1:3b:9e:0d:64:ef:df:
30:b1:68:62:f6:e2:d6:ab:f1:90:e3:44:d5:d5:ec:
71:6a:60:06:73:ba:86:69:ae:d3:5e:c0:ae:f7:c3:
f2:23:fb:d0:de:57:76:a2:5e:0b:63:ae:4a:4a:77:
cf:f3:c5:85:50:5d:05:5b:c3:4b:72:f6:52:91:15:
48:93:45:aa:9b:56:a3:61:18:e2:45:d7:bf:e2:19:
0d:20:51:3d:98:04:f5:ec:0f:67:d3:f4:e6:9a:a6:
5a:37:2f:b7:c4:2a:0f:a3:a4:31:e8:fb:f1:e4:f2:
a0:60:c9:a7:26:6a:0b:0a:b0:eb:e2:0c:ee:e9:ff:
2d:5b:b7:f3:f0:75:54:c9:4f:92:b2:45:d7:ad:8a:
0e:00:5b:30:8e:ac:1e:73:8f:07:c8:8c:67:db:cc:
be:ff:2c:88:3e:15:14:bc:a7:28:ad:b1:f9:9d:f5:
e2:c0:f3:80:43:71:d7:11:e3:b3:46:cd:e2:88:1b:
b5:c8:54:47:b2:8c:28:b2:ec:c4:ee:10:0f:d0:00:
b9:95:7a:d0:9c:43:5b:b8:c2:5d:4a:c6:a8:55:67:
14:be:14:d1:b5:a0:51:8f:14:c6:7f:d3:d8:e2:22:
63:95:2c:2f:a6:8e:be:09:1a:ce:f7:47:ff:c2:4f:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:F5:B8:E4:E3:D1:66:D9:89:AD:F6:87:B1:1B:83:17:1E:09:67
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:0e:a0:81:4b:02:8f:8d:06:1e:d8:01:e8:c7:39:81:3e:
e1:e9:75:d8:be:6f:aa:23:1d:1d:a4:6d:40:20:68:b3:cb:b3:
74:ef:b1:f8:00:04:0f:c0:9f:25:c7:2f:7e:89:f6:a4:33:e6:
21:83:1a:bc:71:01:d1:3d:3f:0f:ba:35:bb:d9:87:0c:47:bf:
a8:5e:fa:e3:f1:f4:fc:05:89:6d:0b:b9:8b:ed:1c:f6:91:96:
e3:76:5d:26:7c:41:d5:8d:ef:23:70:88:2b:88:97:64:e0:40:
58:f9:08:b6:20:4f:81:52:cd:21:ea:5a:65:8c:ce:3a:13:35:
d6:ec:ef:91:22:49:aa:1c:bf:83:51:41:41:5a:c0:35:1f:19:
10:51:6e:90:8d:4e:2a:d5:c6:68:80:e9:e3:41:cb:6d:cc:0d:
a9:27:a2:bf:f8:f3:85:9e:2e:a3:3f:af:7b:7e:11:f4:7f:2a:
96:20:eb:e7:b1:c7:4b:65:da:fb:95:37:c4:f8:0d:1c:38:4a:
60:13:14:8c:b4:56:d2:c4:40:f3:92:a0:ad:a2:7f:a9:52:50:
c7:fe:d4:7c:be:0c:fb:9a:31:34:f7:38:4b:70:9c:94:5c:50:
0e:01:94:c6:3e:6b:be:5b:45:aa:c3:54:bd:94:4c:7d:c4:eb:
75:2f:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:40:11 2026 by rpki-client