
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier: 20u3ZHnD8uJUDvkQr9W+ijBKq8CIuXV7+cUW3SYHBwM=
Subject key identifier: 57:C5:95:B3:46:86:3F:32:8F:C7:81:B4:7A:E9:B9:F0:3F:61:CD:58
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 2363F6457DE17860F45BAAD7C6A477664ABA9A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number: 02B0
Signing time: Sat 18 Apr 2026 01:04:54 +0000
Manifest this update: Sat 18 Apr 2026 00:59:54 +0000
Manifest next update: Sun 19 Apr 2026 01:42:54 +0000
Files and hashes: 1: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=)
2: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=)
3: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=)
4: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
5: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
6: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
7: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=)
8: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=)
9: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=)
10: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
11: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
12: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
13: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 9zom/IQcqohpSSmGRzCjq6PNC0dLtV3aoYd/hzd1vKs=)
14: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=)
15: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=)
16: 3138352e35382e3135372e302f32342d3234203d3e20343032323033.roa (hash: qEPkBJmJPnkCj+WUZhzItxLAbT+040qoDYW4iZJto64=)
17: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
18: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
19: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
20: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:63:f6:45:7d:e1:78:60:f4:5b:aa:d7:c6:a4:77:66:4a:ba:9a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Apr 18 00:59:54 2026 GMT
Not After : Apr 19 01:42:54 2026 GMT
Subject: CN=57C595B346863F328FC781B47AE9B9F03F61CD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:71:ce:8b:26:55:94:38:ce:12:e3:70:71:
3e:f6:38:b0:75:53:2b:34:92:61:43:91:7b:3e:0b:
9a:10:bb:c1:36:b7:b2:a6:80:48:5a:7a:98:99:d2:
93:8d:38:91:33:18:52:4f:76:22:7b:6a:67:e6:57:
60:4b:79:c5:f5:f8:c8:13:84:b4:93:84:51:fb:56:
a5:d0:96:82:14:b7:5f:ae:ac:f4:a1:08:0c:79:a9:
8e:11:df:e8:36:df:07:6b:9a:61:0d:22:6f:25:82:
0e:32:26:ae:95:85:1a:37:84:61:87:6d:ea:1e:07:
ee:b0:7d:4f:bd:e5:a0:60:dc:09:ce:e4:8d:79:5b:
4b:ac:2c:8e:e4:be:34:2f:34:da:b4:8d:59:6d:a7:
a9:87:86:9d:45:69:ae:ac:95:e9:3d:d8:67:34:88:
0d:92:74:f7:6c:7f:82:8d:8a:a8:0e:90:ec:37:67:
04:00:e0:a1:59:de:f0:45:92:41:51:4d:5d:0c:bb:
46:36:45:de:e5:13:95:6a:e7:cc:99:2b:78:df:d2:
78:ec:31:e8:8a:3d:d3:fb:80:1d:db:0e:17:ca:c2:
06:9a:b6:0e:7b:dd:ea:02:00:e0:e7:5a:4a:60:35:
2f:1d:54:82:ca:ac:0d:df:14:64:66:16:21:2b:a1:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C5:95:B3:46:86:3F:32:8F:C7:81:B4:7A:E9:B9:F0:3F:61:CD:58
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f2:17:d5:e3:29:2d:2e:c3:6f:1d:12:37:d2:4c:c4:a2:43:
9a:ae:e8:f0:14:3d:6a:1d:5d:91:a2:eb:a6:1e:4b:72:91:ee:
02:78:eb:06:2a:35:16:a2:8c:d9:4c:0b:62:09:d8:d6:0b:6a:
0c:de:86:6f:b9:79:7e:ae:9b:d1:e9:d1:de:81:2a:2b:1b:64:
99:06:3b:e1:45:90:4b:37:4a:89:07:ae:9e:ba:a2:76:0d:1e:
37:dd:5d:4e:3f:65:78:82:fd:f4:c4:d1:36:a2:a3:b8:af:f6:
fb:e1:5e:66:4f:8b:08:87:cd:9f:e3:35:dd:ff:ff:75:7e:52:
4e:bc:2c:c6:24:c8:54:31:7a:76:f3:65:c8:19:f5:2d:2f:e1:
2b:bc:22:4c:55:16:c5:19:32:da:a1:fc:7c:13:c0:e1:a3:b8:
06:f6:0f:89:50:3f:01:d4:03:42:81:f6:99:e2:f1:c1:87:1d:
6a:31:3b:c3:68:f0:79:4a:b8:85:02:f7:b2:33:cb:b7:0b:6e:
04:5f:41:f4:d8:4d:4d:e1:32:90:31:31:3c:fc:32:80:0d:b3:
ba:8f:52:4f:f6:0d:77:48:3e:06:65:86:d0:2d:d4:3f:f1:67:
a9:2c:d8:48:7a:e2:be:9a:7e:c2:ef:c5:55:28:a8:1d:c5:d6:
4c:a2:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:54 2026 by rpki-client