Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: DUrYY7dCiKln5SWLSbFC1svm25ZXfQdUcyrMpgGDSyg=
Subject key identifier: 98:6F:93:BB:80:DE:65:4C:CD:2C:39:58:A3:54:2E:A3:30:C5:8B:98
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019E3072E3FA351E3A36B4AE32EE6CE7367D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 1216
Signing time: Sat 16 May 2026 11:01:36 +0000
Manifest this update: Sat 16 May 2026 11:01:36 +0000
Manifest next update: Sun 17 May 2026 11:01:36 +0000
Files and hashes: 1: 1-RlwPgkm_UvcXOCMS-B-tCjFDd4.roa (hash: JIVt8LRE4P4teDbJAFqyE2U6gD9MsbOuAB3Fl+sGOjU=)
2: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: NPO+m+ZdWUyevraXQ3k5L7sHhX8CwfkPpN8OUbH/ihY=)
3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:e3:fa:35:1e:3a:36:b4:ae:32:ee:6c:e7:36:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: May 16 11:01:36 2026 GMT
Not After : May 17 11:01:36 2026 GMT
Subject: CN=986f93bb80de654ccd2c3958a3542ea330c58b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:9e:0d:2a:c7:74:01:74:a2:d5:bd:6b:e7:
aa:95:c3:79:7b:9c:30:58:f4:79:a2:9e:74:cf:63:
84:cb:85:35:71:00:47:b5:75:a3:21:0b:2b:76:11:
cb:33:97:41:49:28:44:2e:a9:5f:b3:80:5c:23:af:
43:dd:d0:0c:15:02:b7:f2:d1:84:c0:a4:4b:47:8e:
6f:59:3f:fe:ae:86:c7:b5:65:82:87:8d:ba:22:52:
5b:d6:56:c0:36:f7:7f:76:4a:19:39:66:85:51:b0:
8b:af:a0:c2:1c:cf:c8:12:49:c9:2e:12:4e:0d:a3:
67:07:9c:53:c6:08:f0:95:55:b6:dd:1e:2d:67:9a:
11:93:d4:1e:55:70:a9:d7:4f:3f:e1:3b:ba:76:d3:
95:c9:8d:c0:5a:0f:79:b4:13:3e:f9:ff:ed:90:fb:
37:5c:ce:06:a7:41:69:f7:38:57:b5:89:b0:10:d0:
3d:d8:a4:50:e4:cd:ca:43:4f:bd:a3:1e:ac:9d:83:
44:65:69:c6:ef:a8:e4:cf:6f:34:ca:2a:14:e0:97:
6a:6a:9b:b3:f3:f0:81:09:67:07:34:70:0a:2a:0f:
05:76:f3:88:b8:4a:0c:2d:1b:2e:f5:1c:30:a3:28:
78:54:28:c8:ed:0b:39:12:a0:a7:27:7c:77:90:e7:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:93:BB:80:DE:65:4C:CD:2C:39:58:A3:54:2E:A3:30:C5:8B:98
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:47:a5:fd:da:28:1c:c0:df:72:56:ee:ef:74:8e:68:e5:89:
68:ff:a4:75:1d:d0:ba:5b:b9:be:e2:fd:91:de:36:a7:1d:04:
eb:2a:02:fd:88:65:3f:24:ba:45:92:45:36:f9:66:c7:aa:a5:
02:8c:04:fe:05:b5:19:a3:8d:82:08:55:47:90:be:64:46:b1:
6a:06:fa:78:19:16:78:f1:26:07:9b:b2:4b:93:8d:51:eb:18:
67:86:c6:a2:cb:e5:6a:b8:79:34:b9:a0:37:14:53:45:c5:69:
b6:e9:db:ea:86:d5:78:07:5d:18:34:a6:d4:9a:44:3e:b9:49:
0c:17:9c:30:70:ac:b9:45:b9:6a:10:41:24:af:a8:9f:20:01:
7c:92:fe:a2:8a:aa:ef:07:a9:c0:dc:7f:12:d1:1b:f0:0a:f8:
63:40:b5:87:16:e8:fe:0e:da:e3:f8:22:f0:80:ff:3c:d0:5c:
0f:02:0e:8c:3d:91:19:2f:be:3e:1b:a3:bc:37:c8:9c:b8:dd:
1a:2c:11:8e:98:24:10:9e:17:13:fc:0c:68:1c:fd:d3:23:94:
be:45:12:a1:5a:e5:6a:e3:31:55:2d:3e:d7:4c:d3:4a:7a:d8:
23:e4:06:73:9a:35:57:54:ed:27:b0:2c:1a:a6:20:ba:ff:a3:
54:58:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:22 2026 by rpki-client