Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: pOA5SsVl327rSmfw5zlbwXDdx08Jop4c8kpQXloYYcc=
Subject key identifier: 59:E8:A3:F5:63:75:94:1D:A2:64:42:D6:AA:30:A4:B1:D7:84:17:4C
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 3D548AE0F1552BCA1B7260BFF0EDEF71201BE215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 0230
Signing time: Thu 10 Sep 2026 00:30:03 +0000
Manifest this update: Thu 10 Sep 2026 00:25:03 +0000
Manifest next update: Fri 11 Sep 2026 00:31:03 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: KGcepszySHNl7F+aKkHXfa7dlENPGRy0PksjThyrCes=)
2: AS211575.asa (hash: PEZMTsY76v1BI64BGAr+a6nHvjlH7aGwrvtJ4PkVK2s=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:54:8a:e0:f1:55:2b:ca:1b:72:60:bf:f0:ed:ef:71:20:1b:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Sep 10 00:25:03 2026 GMT
Not After : Sep 11 00:31:03 2026 GMT
Subject: CN=59E8A3F56375941DA26442D6AA30A4B1D784174C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:a6:75:7b:3b:50:1d:92:e3:5d:85:11:42:
bd:2a:64:1f:45:82:e0:94:3d:3a:9b:56:a4:29:58:
9e:63:3f:f6:5b:60:4b:a1:5b:71:de:65:31:36:17:
b0:15:c6:96:f0:48:6f:b0:ff:9f:17:af:13:a7:29:
a4:98:91:c5:5b:59:ec:18:50:64:e1:7b:f0:13:ae:
6f:4a:f0:d1:f4:b4:3d:8c:c4:9a:69:b3:e0:4d:e6:
6e:c8:56:5a:07:a4:6d:40:f8:93:c5:54:4a:2a:8b:
00:b0:78:e3:49:fb:a0:ca:2f:a1:a1:b1:04:77:1a:
73:b9:1f:8c:49:ff:ce:61:36:64:f0:1f:3e:92:2f:
65:5c:a4:5e:c1:74:61:a0:ec:41:c6:31:19:09:b4:
5b:9e:bf:32:53:20:8e:63:90:45:a4:b3:ab:d9:a4:
90:78:19:8e:72:0f:45:dc:a7:f5:c2:76:be:c8:46:
92:95:30:b0:ad:8a:cb:bb:71:22:43:2f:c4:d1:ee:
91:44:e2:fa:3f:a2:b4:5f:10:74:49:e3:c5:29:79:
31:63:07:1b:17:e7:76:18:bc:28:a8:b7:4f:c3:17:
58:a7:af:a9:ff:39:3e:4b:00:b6:59:30:1b:54:1c:
00:1d:ca:6e:46:02:dc:7c:fb:3f:24:b6:73:bf:05:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E8:A3:F5:63:75:94:1D:A2:64:42:D6:AA:30:A4:B1:D7:84:17:4C
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:81:3a:7d:41:6d:32:e6:78:85:11:97:4e:cf:a9:51:e0:
db:78:89:e0:1c:37:74:88:e1:98:50:fc:0c:88:80:17:3f:21:
23:1e:e4:d8:69:27:04:fd:12:11:ec:4d:48:18:38:8e:53:18:
21:97:9e:06:a0:56:0c:0c:b0:cb:00:72:6b:d9:11:ae:b9:04:
4e:65:f3:b4:2d:0e:2e:c5:ad:3d:0b:42:a6:ce:9a:e9:bb:f4:
54:45:dd:2d:9d:cb:fe:32:cb:ee:19:99:4e:78:ea:8d:89:c0:
60:aa:d9:e4:b5:c5:e3:c2:ba:d7:61:e4:e3:c1:9e:29:cc:c2:
27:f3:6c:03:a6:a8:66:c0:37:53:90:1e:99:ef:4c:1d:3e:e6:
06:8d:2c:91:6f:2b:ae:78:f9:29:30:26:a2:56:d5:17:31:d0:
80:91:8f:c0:2d:5a:4f:55:0a:46:a6:db:6e:3e:75:ca:11:eb:
ab:25:76:1c:9b:51:25:fc:42:67:37:8e:f4:31:4a:6f:8f:b3:
91:d2:fa:09:4e:e7:17:d9:04:d0:76:83:0c:5f:1b:c4:b2:d2:
0c:84:74:7c:9f:b2:7a:e3:98:f7:7a:db:e9:12:41:ed:c8:51:
4c:52:9f:06:ec:51:66:b9:e6:ca:37:00:fd:ea:d7:8d:46:ec:
5b:2d:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:22:03 2026 by rpki-client