
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier: jt5Or/yPK7+mINEI5Xlc+LaCl8EC7kOG+HmE2KU9C3M=
Subject key identifier: A7:C8:4A:D8:0A:B4:7E:1E:11:93:CB:12:83:56:29:25:C6:51:31:C3
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 6FACB7E3BE389A8D458615214F5792D426C8A66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number: 03A7
Signing time: Sun 18 Oct 2026 21:06:32 +0000
Manifest this update: Sun 18 Oct 2026 21:01:32 +0000
Manifest next update: Mon 19 Oct 2026 23:09:32 +0000
Files and hashes: 1: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
2: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: EK3UjLLyjmaMmV74umu/GLpiDN5Z2BDfo7bejD8Ms9w=)
3: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
4: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
5: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=)
6: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
7: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=)
8: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=)
9: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=)
10: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: ezwToAJ0VaS+G2Asefk7lhvNLH+fSQ7L+qAfmQYiijA=)
11: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
12: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=)
13: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=)
14: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
15: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
16: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=)
17: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=)
18: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=)
19: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=)
20: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=)
21: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ac:b7:e3:be:38:9a:8d:45:86:15:21:4f:57:92:d4:26:c8:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Oct 18 21:01:32 2026 GMT
Not After : Oct 19 23:09:32 2026 GMT
Subject: CN=A7C84AD80AB47E1E1193CB1283562925C65131C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:df:b9:eb:05:ae:09:e3:85:9f:b0:3f:e8:
86:b0:28:0c:4a:6a:57:eb:b1:f5:c7:13:4d:00:2d:
ec:0d:6a:c7:48:4e:c5:b0:65:3e:08:92:cb:ee:bb:
1d:14:2c:8c:a4:83:9b:d1:a1:a6:13:e8:5a:4e:4c:
5c:6e:15:58:47:2a:c5:21:fc:70:10:f5:99:ff:70:
b8:4e:bd:79:33:2f:1d:3a:40:4d:ff:03:28:ad:c1:
b4:a0:cc:94:43:1e:e3:3a:1d:2e:5f:5c:e2:3f:8f:
f6:6e:2b:53:87:dd:9a:0c:22:42:26:cb:bb:34:4e:
6a:ed:0c:cb:07:3b:e9:37:0c:4d:a4:23:66:83:32:
f4:64:58:ad:ac:76:7b:1e:c5:92:25:40:8d:43:25:
66:b4:c0:c7:36:40:52:11:a4:57:66:21:87:ed:48:
d3:9e:68:20:2e:04:92:e0:f4:3f:a4:bf:43:65:43:
c8:ae:a6:aa:02:a5:f2:c2:0e:66:2b:dc:43:40:75:
e9:43:b0:af:f1:8e:0a:c5:e8:68:aa:36:5b:88:ff:
f3:67:7a:7b:6d:0d:0e:d7:a8:d0:00:c8:8a:bb:f0:
28:7e:3c:f4:e6:0b:5e:aa:e7:f2:6b:ca:94:6a:a0:
8e:f2:67:0a:e8:f3:46:d3:30:b7:02:46:2e:9e:f6:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:4A:D8:0A:B4:7E:1E:11:93:CB:12:83:56:29:25:C6:51:31:C3
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7a:58:7e:90:f3:26:66:7a:54:60:c6:66:50:66:36:84:ec:
4e:b2:f6:55:89:46:6a:6c:b9:12:28:db:dd:e6:65:37:66:27:
09:32:13:d2:1c:0c:68:02:eb:3c:9f:ea:63:2c:60:cc:ab:de:
4a:19:5f:57:d9:41:37:97:a1:ef:65:a1:0d:87:40:25:73:7f:
07:f0:59:d2:21:83:68:1e:ac:5a:fc:ec:1c:c2:b6:80:c7:47:
0a:10:b4:5f:82:1b:e3:cf:ff:a7:d7:16:05:36:10:b7:66:09:
e0:6d:62:61:17:a5:20:fb:12:8e:fe:3e:62:74:5b:ed:15:59:
c2:79:37:79:4b:96:4c:40:b3:94:9b:62:6e:01:44:3b:6c:7c:
eb:06:ed:55:6a:72:bf:86:33:70:93:a4:c2:6d:7d:27:66:04:
ca:10:b0:ec:b8:e7:c6:d3:24:b3:b3:de:4f:c1:13:9b:ea:b9:
d2:7e:0b:c3:a1:71:5c:62:0b:d3:ef:a7:98:69:e3:36:88:b6:
cf:fc:ae:20:84:b7:de:92:cd:70:4c:21:8d:4d:0a:fb:28:f7:
30:25:f7:87:10:c8:f9:23:41:9c:0d:73:ee:7a:2c:e0:df:19:
80:9e:f1:db:b2:ef:4e:ff:c3:06:51:fd:2d:7b:95:43:97:a1:
23:1c:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:50:43 2026 by rpki-client