Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: GZC3WPYMnwf3GqO3TbGOohxX6l6ks3vIqqOcO1uJp7Y=
Subject key identifier: ED:26:31:DB:5C:E0:65:94:D1:2C:D9:30:DA:E3:62:6E:36:A8:72:55
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 43C6474CC0AAE20A8B884C8B884170DF763970F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0287
Signing time: Sat 21 Feb 2026 19:33:20 +0000
Manifest this update: Sat 21 Feb 2026 19:28:20 +0000
Manifest next update: Sun 22 Feb 2026 20:54:20 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ILfk+MFH3c82qjrL6Ho+q4o7Qjg6uJA7yAI+dckZdVc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 20:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c6:47:4c:c0:aa:e2:0a:8b:88:4c:8b:88:41:70:df:76:39:70:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 21 19:28:20 2026 GMT
Not After : Feb 22 20:54:20 2026 GMT
Subject: CN=ED2631DB5CE06594D12CD930DAE3626E36A87255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:87:68:06:7a:90:48:83:50:7d:5c:36:df:
04:47:24:da:36:20:b9:22:65:19:39:1e:3e:fb:a1:
af:f6:e9:a8:c3:d5:9a:0f:00:3c:e6:e5:ea:fa:1f:
6e:99:81:d8:e1:c1:98:6e:70:2d:e2:31:55:f0:81:
be:c2:6a:04:45:08:82:29:fc:df:63:3e:fe:8d:98:
1e:e6:85:77:eb:80:88:43:59:11:fe:f0:4b:c0:09:
46:6d:3e:86:67:09:2b:04:e7:fb:33:cb:5f:b9:0d:
26:97:60:e0:38:76:ec:bf:9b:30:9c:49:31:95:9d:
a6:2b:b6:a1:cf:e1:42:8e:e4:5e:1b:72:9e:41:d9:
31:c6:3c:bc:e0:0b:e7:9d:4c:08:4a:c8:39:03:bf:
37:dc:2e:ed:14:f5:df:6a:49:92:58:c1:17:e5:86:
59:fc:ef:b9:f7:1d:45:b2:a5:ab:ac:12:a3:5c:2e:
88:ca:10:d3:4e:47:7a:9a:32:15:6c:20:5d:20:52:
be:ae:19:28:6c:e2:69:70:f4:9a:72:aa:d1:b6:9e:
77:a2:ed:4b:3f:6d:f1:ff:c8:f8:42:18:91:7e:8d:
99:c0:9e:7c:13:4c:32:3a:e1:56:e4:f4:ed:af:47:
5e:80:7e:69:ba:2f:ca:dc:3d:e9:24:d2:92:29:9d:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:31:DB:5C:E0:65:94:D1:2C:D9:30:DA:E3:62:6E:36:A8:72:55
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fa:6c:30:b4:e1:70:57:52:19:41:e6:94:26:aa:a8:94:29:
45:48:b8:c5:ba:e7:87:84:61:86:4d:f0:25:17:ee:62:2f:84:
99:c2:91:0f:33:7b:20:55:dc:7d:96:1b:d2:9b:e4:3c:6c:a6:
20:3a:19:54:20:21:f2:7b:56:5d:9d:f9:3a:3b:bb:8b:db:38:
b1:38:6d:20:2a:36:4a:9d:c3:d1:11:a0:03:98:55:6b:d0:ff:
8e:80:27:f1:2e:3d:f7:da:68:dc:a8:84:44:e4:40:89:c9:90:
94:58:fe:cc:09:db:3a:c0:6f:2e:70:86:b0:f4:80:5a:cf:3d:
7e:1d:8e:a8:63:ba:16:49:eb:6f:b1:c4:df:d5:bd:da:b8:a7:
af:81:21:71:75:8a:c9:83:9b:af:86:9a:58:bc:4b:31:69:b7:
5a:bc:db:00:5a:58:7d:f0:a0:03:45:0a:95:44:78:a7:98:64:
dc:5a:6a:30:db:e6:40:79:a5:1b:01:9e:8f:82:b6:8a:be:92:
97:41:78:69:fb:2e:af:0f:91:28:48:5d:65:69:fa:21:6b:95:
4f:08:3d:6d:73:79:1b:e0:ec:f6:8f:66:14:cf:c6:2c:f3:40:
f1:26:62:64:2f:7d:95:af:d9:d9:f5:4f:ab:d2:b4:8e:18:f5:
3b:41:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 04:27:02 2026 by rpki-client