Manifest
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: /pUx3470fEyKSzt7V4KnMrtqHcIJuiblBlCtNUP+8yg=
Subject key identifier: B5:49:17:44:83:37:BB:AF:25:18:32:87:FF:90:4A:8B:19:5D:1D:BB
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 3058E8807B0E21377964BA4E3425BAE142B4E625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 03A4
Signing time: Wed 23 Sep 2026 10:04:31 +0000
Manifest this update: Wed 23 Sep 2026 09:59:31 +0000
Manifest next update: Thu 24 Sep 2026 12:28:31 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: MsMytU1fsVa695cUM+jxdJnhq7o1TnzuEm3rIETprpg=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: 8MXHqE9/VoHMxJF+8TjS1kPlAjmtzNDu0ewmune/cxE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:58:e8:80:7b:0e:21:37:79:64:ba:4e:34:25:ba:e1:42:b4:e6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Sep 23 09:59:31 2026 GMT
Not After : Sep 24 12:28:31 2026 GMT
Subject: CN=B54917448337BBAF25183287FF904A8B195D1DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:ff:9d:58:5b:a5:3c:c6:e9:6b:0f:7f:51:
77:e2:5c:fe:49:e9:dc:72:3b:e8:e5:88:d1:bd:76:
77:42:95:46:a9:69:6e:b3:e0:20:4c:bc:63:c8:dc:
78:c1:3c:b4:a9:45:c3:b9:88:52:50:58:3d:68:e1:
1d:8b:4d:90:bf:ef:a5:e8:bc:4f:dd:3c:5e:05:2b:
58:9c:5a:8c:2d:55:bf:c7:0e:ae:85:37:ad:bf:fe:
82:f5:0e:ff:02:a1:67:4c:92:5c:ea:62:f6:10:6b:
f4:04:88:e5:b1:0a:15:89:61:49:cf:84:72:1e:e4:
37:7e:64:20:f0:1c:07:5f:4e:5f:fd:51:38:5a:24:
51:ec:b1:a4:c5:ea:42:6e:ad:90:76:a3:25:ac:6d:
3b:d3:28:be:15:00:6b:d0:46:cf:a7:55:f4:43:d2:
22:89:f3:d5:a2:29:10:a0:18:39:4e:99:63:ef:fb:
da:32:bc:e5:f8:a0:3b:65:65:c9:d4:8e:c2:07:c4:
8c:d9:31:3a:3f:3d:48:b3:02:13:a2:88:1b:67:63:
21:55:f8:b3:71:2b:39:88:5e:58:6d:14:bb:5a:e6:
3e:08:86:c9:13:41:fa:8d:87:a0:e2:10:f8:87:c4:
a4:bb:9e:74:60:3f:a3:f9:a6:c6:a5:ca:b5:6b:2d:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:17:44:83:37:BB:AF:25:18:32:87:FF:90:4A:8B:19:5D:1D:BB
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:8f:71:0e:a8:6c:d4:7d:16:79:7f:92:ff:87:f5:e1:63:
41:9e:0d:9e:d2:55:81:e3:8e:1a:73:33:df:2c:66:a6:7e:73:
d8:bf:b6:af:2f:f0:52:30:94:9b:5e:52:fd:08:8d:c6:66:fe:
29:d3:aa:d6:f7:68:03:72:26:df:8b:aa:50:ce:f0:38:20:9a:
19:1e:51:ed:07:4f:e4:70:bd:10:80:aa:70:a1:41:1a:d8:26:
98:4b:51:13:15:c3:05:93:d5:33:56:5b:3c:97:42:60:fb:4b:
0e:d0:0b:a0:f2:fd:ed:96:13:98:0c:27:db:52:7d:93:14:06:
37:02:85:84:36:93:a6:fa:8f:cb:ea:34:b6:b5:4c:63:9e:e3:
11:db:b0:7d:2b:70:44:21:db:7b:28:52:f4:f3:34:d2:cc:c9:
07:7a:4c:2a:08:8f:c3:18:02:e7:94:ec:52:a2:85:09:ae:63:
04:c8:d8:67:f0:98:99:68:3b:06:49:ab:a4:7d:c8:f9:5e:ea:
e9:2d:f8:44:ed:c5:a1:a1:d1:49:dd:14:05:dc:80:dd:70:d2:
7d:a9:d9:47:ff:17:1a:fa:5b:f9:cc:dd:09:88:7a:7a:6f:4c:
7c:b7:c3:23:bd:71:ef:62:56:50:30:ca:ad:5d:42:54:ef:ca:
97:52:c1:db
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUMFjogHsOITd5ZLpONCW64UK05iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjA5MjMwOTU5MzFaFw0yNjA5MjQxMjI4MzFaMDMxMTAvBgNV
BAMTKEI1NDkxNzQ0ODMzN0JCQUYyNTE4MzI4N0ZGOTA0QThCMTk1RDFEQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90P+dWFulPMbpaw9/UXfiXP5J
6dxyO+jliNG9dndClUapaW6z4CBMvGPI3HjBPLSpRcO5iFJQWD1o4R2LTZC/76Xo
vE/dPF4FK1icWowtVb/HDq6FN62//oL1Dv8CoWdMklzqYvYQa/QEiOWxChWJYUnP
hHIe5Dd+ZCDwHAdfTl/9UThaJFHssaTF6kJurZB2oyWsbTvTKL4VAGvQRs+nVfRD
0iKJ89WiKRCgGDlOmWPv+9oyvOX4oDtlZcnUjsIHxIzZMTo/PUizAhOiiBtnYyFV
+LNxKzmIXlhtFLta5j4IhskTQfqNh6DiEPiHxKS7nnRgP6P5psalyrVrLb1rAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUtUkXRIM3u68lGDKH/5BKixldHbswHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAiCiPcQ6obNR9Fnl/kv+H9eFjQZ4NntJVgeOOGnMz3yxmpn5z2L+2ry/w
UjCUm15S/QiNxmb+KdOq1vdoA3Im34uqUM7wOCCaGR5R7QdP5HC9EICqcKFBGtgm
mEtRExXDBZPVM1ZbPJdCYPtLDtALoPL97ZYTmAwn21J9kxQGNwKFhDaTpvqPy+o0
trVMY57jEduwfStwRCHbeyhS9PM00szJB3pMKgiPwxgC55TsUqKFCa5jBMjYZ/CY
mWg7BkmrpH3I+V7q6S34RO3FoaHRSd0UBdyA3XDSfanZR/8XGvpb+czdCYh6em9M
fLfDI71x72JWUDDKrV1CVO/Kl1LB2w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:26:53 2026 by rpki-client