Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: N+JYFFixYy7/biZa2eDPvPtmt8fdJaEr7PKIkrlXzbQ=
Subject key identifier: 2C:D8:87:E6:DB:C8:42:6D:93:EF:C2:77:1E:AD:D0:C6:AF:46:D7:4A
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 030778B573AB24C4B3CE8A132DE33D3066325D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 0178
Signing time: Mon 27 Apr 2026 08:05:45 +0000
Manifest this update: Mon 27 Apr 2026 08:00:42 +0000
Manifest next update: Tue 28 Apr 2026 08:24:42 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: 1tgiQXTZ5sYDg/MT5C4jmAoMtaE0kA8f0pl8T4VQLjA=)
2: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:07:78:b5:73:ab:24:c4:b3:ce:8a:13:2d:e3:3d:30:66:32:5d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Apr 27 08:00:42 2026 GMT
Not After : Apr 28 08:24:42 2026 GMT
Subject: CN=2CD887E6DBC8426D93EFC2771EADD0C6AF46D74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:ce:24:58:f5:78:f2:7f:90:27:f7:13:85:
08:46:d8:07:37:cf:be:98:48:00:da:23:19:aa:38:
20:5b:84:f3:bc:75:f0:bd:05:72:c1:8e:a7:9d:d3:
42:c7:b2:d8:fc:e1:a0:d3:91:84:19:8e:18:8e:9a:
76:d2:c6:49:a3:ad:3f:bb:8a:0a:9e:b6:8c:ff:e5:
14:8f:8b:6b:9d:ec:36:a0:6e:a1:cb:44:16:f5:5c:
54:9b:f6:b3:f3:dc:9e:2d:bf:4f:7e:bc:a6:80:e6:
3f:f9:7d:7b:52:fb:a4:fd:62:a3:82:eb:ef:4c:9e:
0e:29:4b:b2:89:9c:b7:bf:39:f8:b7:95:8b:35:e8:
6c:a2:a5:18:b6:a1:55:f5:94:a7:d7:18:05:2e:35:
3f:26:63:60:86:15:a0:fa:98:7e:2a:cf:39:bb:4c:
03:0a:71:38:11:61:d7:c3:32:10:72:10:b5:5b:a2:
7d:de:ef:73:dc:5a:4f:dc:6a:99:b0:c4:fb:18:3e:
1b:50:4b:50:5f:a8:80:19:83:da:08:3a:b4:60:ee:
73:0e:08:4a:35:c3:3c:04:61:64:1f:ef:eb:fe:73:
d5:8e:34:84:59:29:47:92:7a:53:b6:17:73:64:5b:
16:67:c7:4f:61:0f:4d:65:55:62:98:94:06:3e:e7:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:87:E6:DB:C8:42:6D:93:EF:C2:77:1E:AD:D0:C6:AF:46:D7:4A
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:ea:b0:cb:98:a8:b2:f6:e5:c1:fb:a3:45:a4:27:14:b8:
52:4d:8d:55:c9:a5:26:6f:fe:b0:de:9d:35:bc:68:d5:e2:13:
20:ae:c1:dd:d0:1e:00:ef:74:78:46:03:11:d1:4c:0b:ba:99:
51:a9:b4:43:73:7a:98:f9:21:40:d1:0c:60:4f:80:de:a4:6d:
fa:94:67:25:f7:88:31:2e:c7:3a:ca:22:f3:b3:df:f4:bf:d9:
b9:08:af:fd:54:64:d4:f2:77:fe:a0:48:1f:89:bf:ce:ae:4c:
31:bd:2c:d1:17:bc:1d:e7:fa:3a:8d:f4:dd:4b:30:63:cd:ad:
d5:63:07:78:fa:72:2d:1b:00:11:17:46:0c:c0:6a:1f:36:44:
54:ac:d3:f3:d5:f5:de:ac:14:67:8e:8c:22:fb:db:9e:7e:17:
9a:e3:b8:9f:4b:b0:57:e4:1a:52:a0:ef:23:c3:9a:5e:9f:e4:
82:eb:f4:b9:f0:2c:0f:55:bb:17:3f:f2:5b:7d:5a:73:b6:d0:
6f:c0:c1:78:16:03:ed:c3:b0:10:d0:8b:8e:4c:da:02:da:0a:
0f:66:4c:93:ea:74:ba:4f:f0:8a:f4:52:3e:cb:e1:91:11:b8:
b4:e0:37:43:4b:c8:bf:93:8e:5a:d8:fe:f5:a4:91:29:20:b8:
fd:0e:94:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:15 2026 by rpki-client