Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: C65UuSa0buBMNgX9zLbwB0p7Tu80g61CE/mhgUEzVnY=
Subject key identifier: 54:61:2E:4D:38:78:C3:6D:D6:78:9A:A2:FC:9F:91:67:9F:6D:DB:39
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 681A0AF6A611FEE22A07EBE9032F1FAD8BEA76DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 02B0
Signing time: Wed 25 Mar 2026 08:23:49 +0000
Manifest this update: Wed 25 Mar 2026 08:18:49 +0000
Manifest next update: Thu 26 Mar 2026 11:40:49 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 40RtZPnRWHNylJOu+Zpdu1PIe6Ub6x4CT0gbvz/bW9k=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:0a:f6:a6:11:fe:e2:2a:07:eb:e9:03:2f:1f:ad:8b:ea:76:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Mar 25 08:18:49 2026 GMT
Not After : Mar 26 11:40:49 2026 GMT
Subject: CN=54612E4D3878C36DD6789AA2FC9F91679F6DDB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:48:d0:ae:d8:8b:23:00:8a:fd:1b:90:74:
6f:57:d6:24:5c:6f:2d:cc:09:d6:66:27:65:7e:27:
47:d8:40:10:47:bc:18:28:90:8c:c7:6c:1d:9b:93:
51:d4:bd:88:ab:34:19:bd:a2:a0:71:fd:90:15:6a:
af:d2:50:28:6e:c6:48:29:49:aa:00:6b:d7:63:60:
68:f5:70:ca:a3:26:df:02:0c:a7:22:5e:90:79:4b:
78:07:bd:15:d0:61:72:6c:83:76:44:1b:c8:90:e2:
39:23:27:b4:ef:45:bb:33:11:4f:a3:5c:ee:fe:25:
df:c4:b6:73:fa:df:fd:64:48:35:f6:5e:84:72:c0:
c1:8d:6b:1e:90:4c:67:b3:53:72:cd:4e:3c:0b:6b:
05:70:0f:5d:47:eb:8e:10:24:7d:89:2e:ce:5d:14:
d5:c5:6c:83:a0:cc:db:dd:28:9b:d0:46:8e:b8:45:
bb:f1:e9:a9:e7:f4:86:e3:56:78:f7:2c:63:09:ea:
9a:16:90:07:bd:68:6e:7e:d8:9c:1b:45:94:b7:48:
14:12:e4:50:99:07:d3:a4:5f:66:9b:b8:75:b8:43:
26:ee:25:23:c8:16:7a:13:8f:ff:e5:9d:83:dc:d1:
fd:07:6f:a0:36:cf:80:03:8e:e5:45:0a:8c:91:56:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:2E:4D:38:78:C3:6D:D6:78:9A:A2:FC:9F:91:67:9F:6D:DB:39
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:56:aa:85:dc:8c:d7:3b:2a:e1:52:fc:23:ca:26:ea:ed:d5:
0f:34:45:51:5c:38:37:1a:59:85:28:8c:b2:ab:e2:5c:33:d4:
3a:46:f5:29:1e:23:e3:fa:8b:70:17:3e:7a:5e:5e:d5:2c:d6:
96:48:b1:f6:ad:74:39:44:03:44:54:39:33:fb:5c:0f:b4:8c:
58:f7:65:0e:80:4e:4b:1d:cc:9f:57:a6:75:71:f3:2e:92:b0:
d8:d0:17:d0:75:d3:fd:50:ba:ab:39:f3:68:4b:7c:68:02:67:
d8:b8:03:3f:29:63:2e:9b:5d:0e:19:ae:7e:fa:da:d9:78:0f:
7d:b1:24:cc:7b:4e:1e:30:14:6c:b7:db:90:30:c9:c4:ae:27:
c0:ff:fd:d3:72:80:86:6f:f0:69:a4:1e:25:fa:3f:b0:db:5b:
eb:3f:2f:c2:73:3c:43:1b:1a:3f:75:ff:4a:72:ce:df:8c:33:
73:4a:cf:ee:ab:38:00:86:8b:f4:8d:48:c8:c7:51:58:2f:6d:
69:c6:2f:7f:d2:20:9b:34:30:7d:26:6e:46:2a:f7:5d:ef:b3:
01:d2:04:f4:4d:55:c2:12:f5:4c:56:8f:80:20:80:f3:5e:43:
de:3c:a0:73:ea:fc:6c:52:cb:f8:bf:5c:99:b4:df:b0:47:95:
77:8f:12:a5
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUaBoK9qYR/uIqB+vpAy8frYvqdt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjAzMjUwODE4NDlaFw0yNjAzMjYxMTQwNDlaMDMxMTAvBgNV
BAMTKDU0NjEyRTREMzg3OEMzNkRENjc4OUFBMkZDOUY5MTY3OUY2RERCMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBUjQrtiLIwCK/RuQdG9X1iRc
by3MCdZmJ2V+J0fYQBBHvBgokIzHbB2bk1HUvYirNBm9oqBx/ZAVaq/SUChuxkgp
SaoAa9djYGj1cMqjJt8CDKciXpB5S3gHvRXQYXJsg3ZEG8iQ4jkjJ7TvRbszEU+j
XO7+Jd/EtnP63/1kSDX2XoRywMGNax6QTGezU3LNTjwLawVwD11H644QJH2JLs5d
FNXFbIOgzNvdKJvQRo64Rbvx6ann9IbjVnj3LGMJ6poWkAe9aG5+2JwbRZS3SBQS
5FCZB9OkX2abuHW4QybuJSPIFnoTj//lnYPc0f0Hb6A2z4ADjuVFCoyRVoPxAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUVGEuTTh4w23WeJqi/J+RZ59t2zkwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAslaqhdyM1zsq4VL8I8om6u3VDzRFUVw4NxpZhSiMsqviXDPUOkb1KR4j
4/qLcBc+el5e1SzWlkix9q10OUQDRFQ5M/tcD7SMWPdlDoBOSx3Mn1emdXHzLpKw
2NAX0HXT/VC6qznzaEt8aAJn2LgDPyljLptdDhmufvra2XgPfbEkzHtOHjAUbLfb
kDDJxK4nwP/903KAhm/waaQeJfo/sNtb6z8vwnM8QxsaP3X/SnLO34wzc0rP7qs4
AIaL9I1IyMdRWC9tacYvf9IgmzQwfSZuRir3Xe+zAdIE9E1VwhL1TFaPgCCA815D
3jygc+r8bFLL+L9cmbTfsEeVd48SpQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:49 2026 by rpki-client