Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: 4+/Pb11ueObNjfhv5cDP93KQP+vxRZkSLii0ip9HbuY=
Subject key identifier: 66:D0:24:44:A2:06:47:F5:B3:6A:66:DA:8E:B7:A6:80:0D:7B:73:1B
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 29C9247D0B0A5783E88A9A85BC0D1A65B6C62B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 026F
Signing time: Mon 26 Oct 2026 08:00:33 +0000
Manifest this update: Mon 26 Oct 2026 07:49:22 +0000
Manifest next update: Tue 27 Oct 2026 11:48:22 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: /7FgGEBDdpVJDxVxA+CarN57uI+mbyPaji/orcbYxHs=)
2: AS211575.asa (hash: PEZMTsY76v1BI64BGAr+a6nHvjlH7aGwrvtJ4PkVK2s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:c9:24:7d:0b:0a:57:83:e8:8a:9a:85:bc:0d:1a:65:b6:c6:2b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Oct 26 07:49:22 2026 GMT
Not After : Oct 27 11:48:22 2026 GMT
Subject: CN=66D02444A20647F5B36A66DA8EB7A6800D7B731B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:14:a1:f9:92:1d:3f:b2:1a:1a:20:6b:31:
18:ed:e3:13:13:bd:86:06:ad:aa:2f:fe:2d:ff:73:
34:0a:3c:a0:c7:dd:5d:86:99:ae:3d:36:d6:f0:93:
75:48:b9:6c:6d:23:dd:08:b8:6a:2b:b2:4b:72:22:
57:13:83:8b:6e:e2:15:37:aa:48:aa:1b:da:16:59:
be:98:c5:bc:a4:b5:76:c9:bf:83:57:13:c9:9a:2e:
fa:f1:51:fa:d1:94:6a:db:0c:65:fe:3c:0e:78:c1:
20:17:f8:ab:e4:6f:d6:16:e3:64:e5:b5:8f:0f:c6:
e4:58:4d:10:01:d8:f9:1e:f4:9a:ad:a6:3f:67:bc:
2d:23:95:f2:9b:1e:65:4c:e9:24:43:e0:2c:4b:53:
81:00:a9:cc:a9:0f:34:8f:2a:75:24:1e:6c:31:35:
f4:09:37:62:c9:37:cb:eb:c2:f5:74:0f:43:8b:39:
46:49:43:b8:5a:3d:6b:f3:e3:42:0d:78:50:73:00:
2f:92:db:76:f0:6b:13:52:88:a6:ae:6b:61:dd:e1:
fb:a2:66:3e:c8:80:a2:f4:e9:95:18:53:f2:e5:46:
de:3d:77:12:dd:71:62:71:29:32:f8:ed:08:c9:8f:
72:f4:e3:2d:46:ae:ea:d6:25:32:32:8a:40:25:05:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:24:44:A2:06:47:F5:B3:6A:66:DA:8E:B7:A6:80:0D:7B:73:1B
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:77:fe:b6:1a:99:04:4f:f3:21:cf:27:a1:e3:e0:4a:b6:3d:
d6:0b:81:ed:c2:18:6d:4d:e1:15:7d:79:8c:22:0b:d9:46:62:
43:80:be:f3:74:cc:36:23:08:44:2f:34:2f:a4:62:2b:45:9c:
75:fd:9a:b3:b7:9a:56:df:5b:0f:4f:33:ff:b0:7d:75:85:fe:
e7:2c:bb:55:86:38:cc:86:e4:0a:ae:96:83:69:4f:56:51:6d:
3c:7e:04:9e:cd:b0:2c:de:2b:c7:11:ff:c7:b1:40:c8:de:9c:
72:cc:74:14:8c:91:00:bc:ab:25:1a:06:1d:80:81:87:7e:44:
ed:db:59:86:fc:e5:93:38:96:c6:b1:85:29:f5:1f:6b:fb:ec:
9a:7d:c2:29:7e:c4:92:00:4c:07:af:c8:91:9e:b1:e0:a4:bd:
4d:88:e7:f7:a1:d1:d8:0f:7e:63:77:83:9e:26:3c:4c:05:78:
f7:f7:1a:e7:fb:a9:63:14:ed:03:22:b8:68:b8:74:8d:76:d5:
17:63:d3:a3:bd:20:f9:da:41:f4:41:a6:e8:2d:57:f1:3a:91:
60:f6:4f:a9:58:2c:14:c5:4e:d9:7b:cb:f2:71:93:98:c2:68:
c7:d3:f6:57:cb:07:c7:9a:6f:49:71:78:a9:d0:60:1f:6d:19:
ae:60:ea:4d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKckkfQsKV4PoipqFvA0aZbbGKxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhlODk1OTM4ZjNiY2VjZDQ4ZDlhYjc4OTZjYTQ0MDlm
NmY2YzU5ZTAeFw0yNjEwMjYwNzQ5MjJaFw0yNjEwMjcxMTQ4MjJaMDMxMTAvBgNV
BAMTKDY2RDAyNDQ0QTIwNjQ3RjVCMzZBNjZEQThFQjdBNjgwMEQ3QjczMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0RSh+ZIdP7IaGiBrMRjt4xMT
vYYGraov/i3/czQKPKDH3V2Gma49Ntbwk3VIuWxtI90IuGorsktyIlcTg4tu4hU3
qkiqG9oWWb6YxbyktXbJv4NXE8maLvrxUfrRlGrbDGX+PA54wSAX+Kvkb9YW42Tl
tY8PxuRYTRAB2Pke9Jqtpj9nvC0jlfKbHmVM6SRD4CxLU4EAqcypDzSPKnUkHmwx
NfQJN2LJN8vrwvV0D0OLOUZJQ7haPWvz40INeFBzAC+S23bwaxNSiKaua2Hd4fui
Zj7IgKL06ZUYU/LlRt49dxLdcWJxKTL47QjJj3L04y1GrurWJTIyikAlBcB7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUZtAkRKIGR/WzambajremgA17cxswHwYDVR0j
BBgwFoAUOOiVk487zs1I2at4lspECfb2xZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj
OWRjLzAvMzhFODk1OTM4RjNCQ0VDRDQ4RDlBQjc4OTZDQTQ0MDlGNkY2QzU5RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09PaVZrNDg3enMxSTJhdDRsc3BFQ2Zi
MnhaNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04
OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMC8zOEU4OTU5MzhGM0JDRUNENDhE
OUFCNzg5NkNBNDQwOUY2RjZDNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXf+thqZBE/zIc8noePg
SrY91guB7cIYbU3hFX15jCIL2UZiQ4C+83TMNiMIRC80L6RiK0Wcdf2as7eaVt9b
D08z/7B9dYX+5yy7VYY4zIbkCq6Wg2lPVlFtPH4Ens2wLN4rxxH/x7FAyN6ccsx0
FIyRALyrJRoGHYCBh35E7dtZhvzlkziWxrGFKfUfa/vsmn3CKX7EkgBMB6/IkZ6x
4KS9TYjn96HR2A9+Y3eDniY8TAV49/ca5/upYxTtAyK4aLh0jXbVF2PTo70g+dpB
9EGm6C1X8TqRYPZPqVgsFMVO2XvL8nGTmMJox9P2V8sHx5pvSXF4qdBgH20ZrmDq
TQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:41:42 2026 by rpki-client