Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: kVShnmfwkGzLNrSPf/FOCBkhmrhQHLT2vx9GBaaP3m4=
Subject key identifier: 50:D6:87:7F:2B:BF:3E:E3:69:A2:40:5D:9E:90:E9:18:35:2B:2F:CD
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019D389C074E9941A205DB8A1893FF5420BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 1194
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: 7UFYk575TM4RP6rHdyBRl1xy70Y2w9nYOvfUH3nRRqU=)
2: DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa (hash: Kdz9GuJlZ7ZKJVHKRBo+yO7QuXh68uExIpIMEaag7CQ=)
3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:07:4e:99:41:a2:05:db:8a:18:93:ff:54:20:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=50d6877f2bbf3ee369a2405d9e90e918352b2fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:5a:04:33:2e:13:46:61:90:e8:d2:db:83:
64:c7:26:56:3b:dd:a1:26:a5:bc:55:c7:74:25:17:
37:3e:75:a3:d9:19:c0:40:9f:53:45:f9:a6:74:41:
00:78:93:19:e0:3c:eb:b1:c7:bb:cd:bf:ea:9b:15:
4a:f2:61:2d:40:25:5c:b3:fa:21:0a:dd:f8:14:fc:
e6:c8:ad:66:b3:be:67:28:55:39:04:9b:71:92:14:
33:ae:bc:d6:1b:1c:c6:84:80:f8:49:47:58:be:9f:
1a:7b:a9:43:41:a5:ff:63:f9:e2:11:e6:6b:b1:b7:
cc:e3:4f:fe:13:f7:ce:43:de:bf:7c:83:f5:6c:40:
84:bb:60:18:52:64:78:f5:c6:c0:6e:aa:85:24:7f:
40:0f:6e:d7:65:dd:3f:16:84:00:83:56:f4:46:51:
36:c3:c8:f2:4a:cd:57:7b:b1:87:1e:36:ff:4f:c9:
e4:71:76:fd:f1:d9:f8:39:b8:df:91:6c:c7:9d:30:
dc:4c:57:b3:50:c8:34:56:1b:18:75:b6:f7:b9:4a:
d8:4e:0e:64:d8:40:b2:12:a0:5d:4b:69:98:6d:67:
8d:db:b5:47:07:4a:fc:2f:50:6a:1b:89:33:24:ae:
dc:c6:cc:45:3c:3c:d1:17:96:31:f5:2f:e9:98:ed:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:87:7F:2B:BF:3E:E3:69:A2:40:5D:9E:90:E9:18:35:2B:2F:CD
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:de:17:e5:92:10:4b:40:a5:68:59:79:d7:da:9a:fd:87:18:
e0:56:21:5f:59:8a:6c:11:ad:14:e3:fe:13:1c:0c:1a:8b:52:
94:53:6c:39:c5:f3:ea:60:8e:71:35:d2:be:ea:6b:51:9b:e7:
92:8a:5f:a0:19:6c:7c:8f:bd:c3:36:25:75:07:fb:09:50:75:
0a:06:72:84:5e:35:1e:24:23:61:e0:f8:68:2e:c9:3a:5c:35:
ef:39:36:cc:ed:f7:b1:c1:28:c3:d9:d5:c2:a0:8f:1f:4d:aa:
17:98:c5:09:c8:ac:2c:c2:a5:38:e7:e1:b9:e2:89:6d:e9:aa:
7e:11:c8:e7:13:95:80:53:d3:b2:49:72:4e:0c:9a:40:67:78:
75:56:8e:38:e5:7d:0a:86:ef:f1:0f:1b:13:5c:ed:55:7c:59:
0a:f6:27:d2:4a:b6:f9:b4:e4:86:ce:b5:b8:81:af:f0:f5:0f:
3a:b5:6d:67:6d:79:96:cf:1e:4f:68:ea:6e:d3:60:88:2a:ca:
f0:59:10:dd:44:d2:2f:a2:8a:b6:36:a1:a7:79:1a:ee:83:1f:
cb:37:f0:2e:8d:da:50:54:d5:90:bd:7e:99:41:78:4e:94:4e:
7d:5e:ae:63:05:2e:93:a6:59:e5:21:ad:14:77:3b:3d:99:28:
31:95:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:17 2026 by rpki-client