Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: 5pl0RZnyWrITo8hm4qgqbBacmf75OQ7DmMLBqvAqwWA=
Subject key identifier: 33:DA:09:5D:29:45:47:D4:7B:0B:B3:FE:6B:4A:32:A1:0E:84:25:CC
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 1EEE0964829F646C9473E42B6F63729167A68928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 01F1
Signing time: Sun 26 Jul 2026 12:42:02 +0000
Manifest this update: Sun 26 Jul 2026 12:37:02 +0000
Manifest next update: Mon 27 Jul 2026 14:57:02 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: Qp3+F+wb3r0k6r175zlLer2dVz1v10FQBgsuRSxhXZo=)
2: AS211575.asa (hash: 3jQ9FknJaDWbQ17PwY7n5aItgcBqYzxUnCnDy4fGyBA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ee:09:64:82:9f:64:6c:94:73:e4:2b:6f:63:72:91:67:a6:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Jul 26 12:37:02 2026 GMT
Not After : Jul 27 14:57:02 2026 GMT
Subject: CN=33DA095D294547D47B0BB3FE6B4A32A10E8425CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:4d:8f:45:90:e4:c0:aa:13:32:a6:5e:8f:
ca:b8:d1:24:67:67:1d:9e:cb:50:89:4c:8b:55:1a:
b0:bc:5c:c3:29:67:6c:34:2f:3e:4d:a5:8b:d3:4e:
fa:05:f0:fe:2d:48:f7:af:3b:17:b1:c0:e0:95:58:
5c:17:a8:25:40:76:24:0c:c4:5b:48:e7:05:d7:91:
d7:62:79:68:21:e6:97:6e:fd:2b:7a:8e:a3:84:4e:
9a:7f:c4:a3:c1:24:6b:7a:57:cf:9f:4d:64:19:0f:
ab:fd:41:43:53:e7:2c:96:d1:b6:92:cc:73:0f:f0:
41:3f:f8:73:a6:75:39:8d:a1:21:c5:77:dd:63:1a:
fe:35:8e:ae:0c:f6:83:00:8d:c8:48:97:51:63:87:
11:02:07:db:a0:83:82:03:b9:79:60:d7:7b:c6:b8:
c3:ba:ed:a1:6f:7c:2b:01:c0:e1:a4:5f:e7:11:ad:
77:3b:12:3e:c4:8b:50:a2:72:c6:0c:22:de:e9:43:
01:c3:7f:18:59:3d:40:d2:8d:a3:91:62:af:1c:14:
fb:56:b0:40:29:4c:34:9e:13:44:f4:a5:5d:21:6b:
0e:b2:1c:d9:76:93:fb:a9:6a:04:12:3e:31:6b:0b:
c1:51:9a:59:99:24:3e:36:3a:21:9f:02:87:cd:56:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DA:09:5D:29:45:47:D4:7B:0B:B3:FE:6B:4A:32:A1:0E:84:25:CC
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:04:56:2b:22:6c:9a:43:85:01:78:a6:b5:f4:a4:2c:06:f6:
19:d8:1c:5d:02:e8:ed:ac:09:5b:1a:b7:cf:9c:cc:af:84:81:
e8:f0:65:32:d2:b9:15:dd:27:6d:d2:18:7d:5e:90:ae:a5:c2:
33:b5:bf:da:c6:06:ef:21:25:65:33:0c:c7:e1:f5:1e:7d:4a:
26:39:fb:9a:d3:4f:6a:75:a3:15:21:ae:0a:33:dc:85:82:28:
9a:cd:ad:35:35:73:22:29:a8:17:42:12:54:72:87:41:50:14:
29:ce:0d:e3:bf:3f:b8:2f:4c:5c:7f:2b:40:80:e8:d2:ea:54:
06:ec:6d:1e:ba:22:85:3d:fe:c2:d2:d3:e6:0a:bb:af:75:93:
a0:c8:0c:bb:ec:cc:b0:a7:25:87:90:2a:c3:de:1c:9f:a5:82:
ee:12:07:16:94:d9:38:79:27:09:b7:7b:f0:8e:10:02:9e:c5:
cd:ec:10:4d:75:5e:94:c3:24:05:14:bc:28:6d:f4:e7:91:b9:
37:95:aa:e7:a4:ef:1f:7c:2d:7f:62:e0:54:87:4b:a8:74:9d:
aa:73:fc:52:37:36:e0:98:6e:7b:10:ee:54:76:d7:6a:78:9c:
53:53:e4:06:68:f7:bc:33:84:33:bd:dd:e6:91:d4:12:48:f5:
e9:fe:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:46 2026 by rpki-client