Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: NL3LnNEzLogDHGcza3Myxn9b3EpiYjRIbVn6yaVmSns=
Subject key identifier: 85:A5:B9:00:3F:8A:16:9F:71:99:19:9F:FF:B3:48:4D:23:EC:D8:6A
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019F18D67DCF0C194847DAD3A93CA0899F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 1292
Signing time: Tue 30 Jun 2026 14:02:17 +0000
Manifest this update: Tue 30 Jun 2026 14:02:17 +0000
Manifest next update: Wed 01 Jul 2026 14:02:17 +0000
Files and hashes: 1: 1-RlwPgkm_UvcXOCMS-B-tCjFDd4.roa (hash: JIVt8LRE4P4teDbJAFqyE2U6gD9MsbOuAB3Fl+sGOjU=)
2: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: YofwXytpTzc12sXvO3EjIehI0FPU4dnv4bbrF4CtvSU=)
3: DCqCb_mFehnRF04MWwWhiZGFy2s.roa (hash: hBwRUVH63MvIYesZ1GBehKeF1wWcH7teYvi7RaedN7w=)
4: fPQVF7ZndJOXR689OYjsA4HroQE.asa (hash: hPNOyWW6q8UcI5eWp2HdGBUdR6sF1OiKH8X6IdTh8PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:7d:cf:0c:19:48:47:da:d3:a9:3c:a0:89:9f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Jun 30 14:02:17 2026 GMT
Not After : Jul 1 14:02:17 2026 GMT
Subject: CN=85a5b9003f8a169f7199199fffb3484d23ecd86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:42:83:18:d9:9b:29:13:ad:d5:14:5a:ba:
c9:ea:eb:86:c1:dc:31:1e:03:34:d5:97:29:8f:9d:
9b:d3:f3:c3:3f:df:f4:54:39:c0:33:6f:0e:fd:31:
9f:5e:f3:20:60:b3:5c:38:3c:f4:07:0b:de:91:7f:
2c:14:39:53:41:0a:44:62:7c:9b:c6:ea:7a:ff:8c:
4c:10:ec:13:a3:36:02:bd:f0:bf:b7:3a:fe:49:e4:
a7:10:60:96:38:7e:a3:bc:1b:03:39:fc:03:a1:2a:
1c:e4:9e:c9:3d:55:8f:cb:e0:ff:35:1b:82:ee:32:
0a:18:96:92:b8:81:5d:7f:d4:05:09:35:7b:77:ab:
b0:a3:77:92:e9:a4:e7:94:b3:62:2e:fb:15:77:04:
cf:64:19:43:06:91:fd:aa:ee:cb:81:df:d7:f3:0c:
2b:ee:e0:04:93:e9:19:a4:18:2a:04:cc:c4:d7:da:
24:4a:b4:78:ad:c0:12:05:d2:28:65:e0:67:ca:a7:
8d:01:25:aa:98:ee:90:7b:9e:d5:77:9a:95:56:8d:
df:6d:de:e1:3e:86:9b:c7:54:24:b6:7f:36:fa:0d:
36:b3:19:17:47:60:fb:bf:8e:9a:77:9c:3c:9b:02:
8a:c3:f3:3d:1a:fe:d1:12:be:4b:e1:f9:cb:33:22:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:B9:00:3F:8A:16:9F:71:99:19:9F:FF:B3:48:4D:23:EC:D8:6A
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e3:59:a1:52:15:33:9e:ff:2a:ee:9c:e6:30:34:82:67:98:
b1:8d:f9:9a:ec:1f:76:49:5a:d2:f9:cb:ba:d6:6a:b7:78:11:
84:4c:5f:40:44:7b:f2:34:ec:d9:7d:5a:77:16:6a:ed:31:cf:
9e:8d:fb:a1:23:f8:de:2a:2f:f4:e8:9d:f6:7d:01:25:cd:52:
62:81:94:62:bf:97:96:c9:4b:45:1e:f5:91:04:49:24:dd:98:
3e:83:a5:f6:2a:ef:35:aa:8b:b9:6b:60:6a:e8:87:83:58:62:
1e:7a:e1:e9:3e:6f:bc:e5:4a:e8:41:9c:62:98:9b:ea:15:05:
0b:bb:78:18:c4:48:db:25:29:3f:e3:b3:9e:db:d4:3b:bc:97:
22:30:ac:a1:35:ff:16:67:38:34:43:4e:a1:0f:67:8c:31:8a:
d6:b4:c7:27:50:94:64:95:0a:c2:e8:3e:7c:1a:49:4a:4a:a2:
83:1d:fe:12:be:b9:5c:ed:0d:b1:8a:93:2e:11:6a:3d:34:fb:
7d:6d:85:38:cf:8a:99:81:d9:40:c2:85:cb:a1:d7:e0:dd:b3:
0d:dc:6e:43:ed:5d:1e:df:f4:a2:02:4a:bb:58:1f:16:46:80:
aa:21:81:ec:07:c4:53:e8:2b:7f:80:4f:61:52:70:0d:77:19:
f3:8e:29:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:17 2026 by rpki-client