
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier: +R5x2NfqrRREyZyKdp8DUjYuFuj/++lkRK2hb/Qjdz8=
Subject key identifier: 57:34:C0:24:88:8F:E0:D3:47:51:16:7A:B9:6E:69:FB:F0:8F:50:26
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 60E4314EE35950DF23D17310C20C5A768C42ED9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number: 0367
Signing time: Mon 31 Aug 2026 23:48:44 +0000
Manifest this update: Mon 31 Aug 2026 23:43:44 +0000
Manifest next update: Wed 02 Sep 2026 03:27:44 +0000
Files and hashes: 1: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=)
2: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
3: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
4: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: AQQ26lv3mFMwuJYalDQOTND7aBaRxrpCSBYyfjNgtdc=)
5: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=)
6: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
7: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
8: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=)
9: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=)
10: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: 8fHWRHCVBN3ZxoELGEiUX2uucky87/OuM6uDPtuM3kI=)
11: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
12: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=)
13: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: fp1djmYmIVaVkuuh0Iej0rLKsHJgQMZruyFIFW+5qco=)
14: 3138352e35382e3135362e302f32342d3234203d3e203633303939.roa (hash: DC0uMXuyrSg4UTnt8X12aE89X4eMjCQrPVHEP/8iDw8=)
15: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
16: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
17: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
18: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: cRqYQiRVVInanzag9EpWaHhBmtu84FJoIPt+81tU2Nw=)
19: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=)
20: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=)
21: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e4:31:4e:e3:59:50:df:23:d1:73:10:c2:0c:5a:76:8c:42:ed:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Aug 31 23:43:44 2026 GMT
Not After : Sep 2 03:27:44 2026 GMT
Subject: CN=5734C024888FE0D34751167AB96E69FBF08F5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:a3:7c:4f:04:02:03:17:9b:e3:f6:42:69:
cf:c0:5d:66:fc:cf:83:22:a5:f4:52:e2:83:ab:94:
15:d0:36:7f:72:b5:97:18:dd:d4:39:82:26:e4:bb:
f1:50:5d:f8:5d:0a:34:37:1b:7d:d5:07:48:ba:35:
cd:fa:29:d9:d5:bb:a7:23:7b:48:d0:e9:5a:73:f8:
dd:2e:11:87:a5:12:a0:f5:69:71:ec:e0:3d:78:4e:
21:f9:47:98:7c:e7:46:79:86:07:12:d9:f2:b7:f9:
d8:21:e9:80:31:e4:66:99:00:67:48:ae:08:b4:17:
19:02:40:32:ee:ac:0e:7b:09:82:ee:b1:d3:42:02:
ed:57:21:d9:eb:c6:be:2d:67:19:7b:b2:cd:40:19:
a9:b2:8d:d2:3f:ba:10:aa:33:71:af:19:b4:96:cf:
77:2f:e6:99:14:88:ea:27:8e:d3:65:d3:c9:22:99:
f8:19:4b:9a:ea:91:33:50:71:91:39:6b:4a:2a:94:
05:72:de:2b:72:70:5e:1d:e7:21:71:ec:6a:ac:b3:
95:e1:41:c5:7c:c2:3b:c2:f2:e3:20:76:79:ba:2e:
17:88:80:2f:c8:60:a5:f4:ff:d2:61:1f:78:50:43:
35:d5:01:6a:8e:8c:d1:61:a7:46:9f:30:23:a9:c8:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:C0:24:88:8F:E0:D3:47:51:16:7A:B9:6E:69:FB:F0:8F:50:26
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:77:9e:c9:a0:1a:a3:74:3f:59:eb:23:fa:2d:8d:2f:f5:b9:
6e:3f:e2:4f:86:fc:10:7a:03:30:e6:eb:ca:27:60:9b:ec:1e:
96:18:43:75:9a:d7:a9:68:28:e1:dd:9f:2f:13:b7:9c:95:ed:
89:84:df:f4:4b:b2:1a:4b:83:a7:ed:26:3b:24:ff:23:5d:94:
52:b9:4e:70:b0:49:00:9a:4e:2e:e4:8b:38:8c:20:8f:f4:8f:
be:7a:ed:f3:c8:cb:01:b8:11:63:80:f0:16:89:ea:82:85:88:
66:f4:3b:b3:9e:81:32:2f:a3:47:0f:e2:b4:fd:ba:5a:3e:16:
79:e6:8a:25:c2:fc:5d:ee:c1:df:a0:72:52:de:b2:71:a0:1a:
11:6b:51:20:fb:c6:6d:93:89:7b:5e:a5:1f:d4:84:9b:9f:bf:
bf:27:5e:e7:98:b5:ea:80:94:15:da:de:ae:ec:51:ba:1e:9c:
1a:5b:bf:c6:e7:ee:a5:91:04:d5:ba:3c:8d:10:a6:c8:36:52:
3c:80:49:4b:45:36:2f:0a:52:e4:e9:8f:68:c8:ec:43:c5:0d:
b7:4d:d7:3c:da:c8:af:b2:93:98:f7:f9:d5:dd:79:99:34:60:
bf:e0:1c:57:3e:83:de:60:fc:d4:60:1b:b8:1b:56:d8:92:00:
1b:8e:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:56 2026 by rpki-client