Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: 6alDBAibRzX8prF/W6/Vb3OFTrNq0bZVj5YQS0MwJcc=
Subject key identifier: 3C:7D:B7:C2:D4:13:BC:7F:EA:07:F4:19:0A:3C:61:5E:19:6D:E6:28
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 05A87FE0B545008D78B934C702EE5AAD6D76D2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 013B
Signing time: Thu 12 Mar 2026 09:57:37 +0000
Manifest this update: Thu 12 Mar 2026 09:52:37 +0000
Manifest next update: Fri 13 Mar 2026 11:07:37 +0000
Files and hashes: 1: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: MwpIdcJLMQHFmOzkD0tLFqMIAPagvoauU1B1J27hytc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 11:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a8:7f:e0:b5:45:00:8d:78:b9:34:c7:02:ee:5a:ad:6d:76:d2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Mar 12 09:52:37 2026 GMT
Not After : Mar 13 11:07:37 2026 GMT
Subject: CN=3C7DB7C2D413BC7FEA07F4190A3C615E196DE628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:4b:c0:ca:ad:95:65:15:45:ff:53:a3:24:
aa:f2:10:1e:0a:15:bc:62:c8:37:a1:a0:e1:7d:42:
6d:47:30:b9:9b:b1:f7:d4:f6:66:9f:01:8b:e7:31:
b7:8d:5c:f3:5a:58:79:e7:86:84:7d:04:85:25:73:
33:10:ef:76:26:30:53:ca:32:73:45:ab:3b:8f:95:
37:87:37:51:96:cc:11:35:f4:35:bb:7a:61:78:8c:
fc:7c:0b:9d:97:24:c0:4a:bc:1d:a0:ca:66:ee:fb:
9b:62:d5:4d:b0:90:5b:04:50:47:7e:d5:41:b5:57:
ee:58:ec:39:ea:25:9e:76:66:44:d3:85:0e:c6:bf:
33:00:4b:a7:3f:53:ae:1f:21:dd:95:f9:74:9c:51:
43:37:e2:0a:a3:95:a8:b6:73:c2:57:89:db:66:3c:
7c:80:82:35:47:24:40:06:91:e6:38:bd:6f:e1:19:
75:60:62:32:6c:21:58:16:49:d9:73:79:b6:ed:56:
92:1a:1d:ac:17:50:0a:a3:a7:90:68:d9:2a:57:24:
ce:d2:31:3d:c0:6d:12:5b:0c:bf:d3:60:a8:55:a1:
40:7e:40:0f:70:36:f9:1c:7e:c5:1c:9d:20:cb:55:
79:42:4e:95:4c:67:d8:2d:b7:8f:63:88:de:fb:dd:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7D:B7:C2:D4:13:BC:7F:EA:07:F4:19:0A:3C:61:5E:19:6D:E6:28
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:c2:3a:f6:e9:e3:b2:dd:ea:68:2b:b3:d6:1a:82:da:d4:
dd:4f:60:91:02:93:22:72:be:63:18:97:0e:92:cb:7a:a3:54:
7c:16:4f:b8:06:d9:09:f2:00:29:4a:f4:31:bc:5a:d2:16:e0:
cc:a4:5b:96:5f:82:2f:50:e9:ea:c9:bd:47:b6:f1:1d:52:c2:
96:9d:a6:4d:3f:16:ca:f9:a2:3c:52:7c:f8:db:a4:18:a5:64:
d8:ef:bb:c6:23:47:c9:a5:d3:f5:ad:a5:b6:67:bf:d3:f5:31:
b1:fc:28:98:74:b8:7f:da:ea:0d:b6:a3:e6:ed:a4:9b:e3:27:
f1:79:42:0f:82:bb:30:da:2f:88:c4:17:38:6e:e4:f8:24:f3:
02:f5:d6:d3:17:ad:3d:f7:1d:b6:ac:db:b8:a8:6c:16:1b:60:
53:0b:e6:92:66:68:23:f6:7e:80:a7:78:ac:c4:c1:03:38:1e:
9c:5e:27:e1:84:ee:49:48:82:fc:02:6d:8e:af:69:64:d7:0a:
06:88:93:cd:23:00:a8:d0:0a:2d:31:44:89:73:e2:d1:ec:fd:
56:eb:cf:8f:b0:84:c0:11:d1:53:75:40:f0:9a:43:4b:bb:b1:
af:47:77:d1:53:04:b5:63:f1:b2:1b:4f:fd:17:ff:77:91:42:
66:36:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:39:58 2026 by rpki-client