Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: KHyViUMN+nk77EgcFoqVKf/1XZGPrjOVrEtj/aGqM9Y=
Subject key identifier: 35:38:41:FE:93:5F:BB:09:B7:34:92:B3:32:8B:D9:A9:6B:92:91:93
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019E1D23672D0F6F976793B67021D53E9F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 120C
Signing time: Tue 12 May 2026 17:01:59 +0000
Manifest this update: Tue 12 May 2026 17:01:59 +0000
Manifest next update: Wed 13 May 2026 17:01:59 +0000
Files and hashes: 1: 1-RlwPgkm_UvcXOCMS-B-tCjFDd4.roa (hash: JIVt8LRE4P4teDbJAFqyE2U6gD9MsbOuAB3Fl+sGOjU=)
2: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: NWgewsNUudSNQpL7XYGpH7aIa+lT5M4cuP7J38HWwPk=)
3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:67:2d:0f:6f:97:67:93:b6:70:21:d5:3e:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: May 12 17:01:59 2026 GMT
Not After : May 13 17:01:59 2026 GMT
Subject: CN=353841fe935fbb09b73492b3328bd9a96b929193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:ca:51:6d:7e:bd:fc:0b:a2:1e:87:41:12:
db:6e:d9:c7:58:aa:2f:cc:0f:a1:71:03:fe:78:fb:
47:2e:24:c9:c6:81:e5:93:39:a6:43:a1:4b:17:c8:
4c:23:3e:c9:6c:53:e9:02:fd:f8:b5:91:85:56:8b:
75:56:0b:3d:77:6d:96:bc:c1:30:17:ff:8a:97:ae:
56:0e:0b:19:03:5e:54:8c:6a:f3:f8:b7:82:14:f1:
22:a3:a8:f1:1e:92:35:08:65:82:ca:e1:45:2e:3e:
63:17:c1:ac:08:aa:e7:ff:ff:36:31:7a:42:99:a4:
10:75:4c:cd:f9:58:2e:78:28:59:5c:b7:59:fe:03:
0d:4d:9e:4f:4b:65:5d:f0:26:4e:0f:76:ff:4f:b9:
86:0a:28:64:91:8f:56:6a:2c:81:2f:53:52:4f:67:
87:ca:a3:7f:42:c7:7c:e6:1e:2d:b9:f3:48:6f:f3:
a8:69:97:87:27:08:19:36:e9:e0:66:d2:87:1a:cc:
57:c0:2c:56:51:ac:32:95:31:8a:01:4d:fb:05:85:
de:f5:f7:c7:31:b7:8b:cb:f2:d5:df:d2:af:92:00:
95:e0:4b:b2:c7:5c:39:9e:6c:c7:89:1e:47:80:8b:
4a:75:9e:29:b6:ea:fa:7c:d2:cf:10:ff:47:b0:f8:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:41:FE:93:5F:BB:09:B7:34:92:B3:32:8B:D9:A9:6B:92:91:93
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c2:98:14:2d:39:05:d4:4c:9f:e3:cb:1c:54:7b:32:0f:0a:
08:cd:3e:ec:6c:d6:3b:01:6e:eb:88:d9:aa:2c:f0:e2:bb:6f:
44:62:14:4d:13:98:f1:1d:71:03:b4:1c:0f:ab:00:ab:e3:e5:
f4:ec:a8:e1:64:64:47:b0:2d:97:18:f9:39:9c:9f:bc:92:bd:
99:35:50:3c:80:39:73:d1:16:09:4b:23:16:f8:36:32:e9:08:
86:29:17:c3:b7:d2:f2:5e:91:6e:11:33:d0:2b:4a:1c:10:62:
20:65:d5:a1:71:2a:0d:c2:83:0e:8e:a2:86:ea:a3:35:95:48:
88:6f:9d:42:69:66:53:42:07:66:88:f7:c6:ff:42:8f:a2:9c:
e9:d7:0b:00:05:b1:7c:46:d3:38:4d:01:ed:d8:aa:04:e6:1a:
f8:58:c2:c2:55:4e:6a:25:a2:c6:df:87:e5:d4:59:ad:35:3c:
48:66:7b:1e:28:84:3d:1b:d0:4a:81:ab:6d:0c:8b:a3:96:f0:
35:66:ed:0d:cf:25:69:91:cf:5c:bf:f6:5b:f9:f7:c2:d3:99:
6c:90:17:ab:80:b4:ac:94:27:4f:84:80:5d:47:e5:73:9c:4a:
2a:7f:60:e5:22:1f:41:ce:b0:d4:18:94:3d:6b:3e:56:b2:06:
2a:fd:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:07 2026 by rpki-client