Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: +i78aW9Y1X0vE2bPC33HnaVRhXHPJ35/A1yELFqFEFM=
Subject key identifier: 62:95:4F:D3:A2:19:71:53:88:31:A9:75:95:BD:F3:06:DC:7B:DB:4B
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 1B5201E6F4D0A45E7A2436AD57BC44A6CBD70871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 01B4
Signing time: Thu 11 Jun 2026 09:33:37 +0000
Manifest this update: Thu 11 Jun 2026 09:28:37 +0000
Manifest next update: Fri 12 Jun 2026 13:01:37 +0000
Files and hashes: 1: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: bzmsjTvrqzLl9EtmMUpiNAFzpvqum2wr0c+FSRIKw9k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:52:01:e6:f4:d0:a4:5e:7a:24:36:ad:57:bc:44:a6:cb:d7:08:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Jun 11 09:28:37 2026 GMT
Not After : Jun 12 13:01:37 2026 GMT
Subject: CN=62954FD3A21971538831A97595BDF306DC7BDB4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:df:d9:3e:c6:33:3a:d5:0e:01:67:d0:42:
40:ba:a9:bf:f9:0b:7a:62:b8:75:b3:ab:2b:e5:be:
03:80:7c:cc:9b:42:04:ed:d4:04:81:9c:32:be:53:
87:c8:c9:c5:d8:b4:8c:6a:2a:03:28:b3:b6:4d:85:
f3:80:3e:b7:31:0e:56:47:e9:d3:13:e2:c2:0a:18:
75:56:3a:a1:06:19:6c:6e:d0:28:7e:75:aa:58:42:
70:e3:ac:31:bd:99:66:6f:ff:2f:59:b6:1a:88:5c:
43:d5:b9:6a:0f:e3:7a:41:d0:ff:c5:41:3c:5b:20:
cf:e8:24:64:27:65:24:dd:7e:d7:70:33:fb:09:3b:
24:13:52:6c:06:0b:ab:74:01:d4:0d:a2:0a:4f:a0:
7b:4c:03:1c:8d:1b:27:21:c3:b5:78:c3:60:9f:a0:
e4:cb:a9:b2:26:a3:77:8d:c1:69:02:91:bf:95:c6:
ca:11:d8:5f:e1:d5:7f:c5:03:a8:7c:61:7b:09:e7:
6c:53:c4:a3:37:fa:14:0e:14:b2:f1:6d:bd:6e:85:
27:29:d7:26:63:58:8e:82:de:cf:4c:87:1a:75:e1:
71:0d:92:19:fa:f5:1c:19:60:bf:5c:1c:a7:04:30:
0b:cf:3d:b6:68:5e:81:90:c3:0a:3e:fe:03:f7:df:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:4F:D3:A2:19:71:53:88:31:A9:75:95:BD:F3:06:DC:7B:DB:4B
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6c:3e:e1:11:65:48:87:7d:c1:0c:34:d6:48:83:45:97:3c:
e2:66:bb:83:1b:5f:6a:bc:f0:9c:f4:fe:5c:c5:11:1b:9d:de:
e4:52:de:31:77:a3:0b:e3:a1:96:97:b8:9d:6a:1b:4a:aa:0f:
7b:db:69:67:8b:1a:24:8e:c8:6a:19:52:12:9d:28:d2:75:c4:
0d:7b:1c:db:45:df:08:67:9e:98:66:ba:0c:37:4a:28:00:3f:
5e:05:5e:a5:e0:8f:70:3e:26:dc:6a:b7:48:f0:68:d6:f4:d0:
54:f5:a1:ef:22:7d:33:51:64:5a:ac:92:ec:72:09:20:21:15:
ba:7a:4c:7b:48:ee:6e:7b:3b:f1:6c:41:da:12:1a:dc:b7:6f:
81:f5:11:c7:ad:7c:32:e7:97:5d:8f:c4:ff:f2:c1:5b:e9:5e:
d9:74:9d:a0:77:8d:30:20:ca:04:08:ad:b6:ef:cd:c0:93:b8:
db:bf:0f:54:65:de:f8:3d:66:b4:60:12:5d:56:bd:4e:8e:44:
28:0a:dd:95:9a:34:fc:b1:bd:bf:93:0f:75:cc:eb:7d:02:1b:
ed:cd:d8:ce:cc:38:f7:40:61:be:8d:52:bf:05:d1:13:0e:fd:
05:6b:d3:d0:52:49:7f:b1:4f:4d:21:0c:ef:50:0b:be:78:82:
65:cc:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:44:56 2026 by rpki-client