Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: 0x+7/LNhQjhgnApqygUQ8hm0TVTA9df64pey8IOsRuQ=
Subject key identifier: CE:75:83:EF:39:E8:47:A1:36:FA:73:2A:4E:EC:EE:6F:20:28:AD:76
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019D254C49CF44F34F46834297513A1CC4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 118A
Signing time: Wed 25 Mar 2026 14:00:49 +0000
Manifest this update: Wed 25 Mar 2026 14:00:49 +0000
Manifest next update: Thu 26 Mar 2026 14:00:49 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: SVL+VsBrv1rmn6YTTjN+RyiUgKiZWleC9PEO2l8d7QU=)
2: DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa (hash: Kdz9GuJlZ7ZKJVHKRBo+yO7QuXh68uExIpIMEaag7CQ=)
3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:49:cf:44:f3:4f:46:83:42:97:51:3a:1c:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Mar 25 14:00:49 2026 GMT
Not After : Mar 26 14:00:49 2026 GMT
Subject: CN=ce7583ef39e847a136fa732a4eecee6f2028ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:ff:72:41:99:49:d4:83:c0:15:2b:bf:6a:
db:80:34:ae:f9:68:96:68:05:c6:25:73:9d:e5:0e:
e7:c0:be:63:33:74:c8:2c:72:d6:ba:c2:73:0d:90:
39:d0:73:af:6b:78:99:7a:4a:d4:0c:a8:28:70:aa:
6d:ff:a7:09:e0:a0:c4:86:8a:3b:e4:30:f0:99:5d:
58:fc:15:68:ab:9c:a7:c5:c7:a0:0f:4a:a1:34:de:
33:0d:78:fa:1b:af:50:a6:dd:29:23:4f:ed:bd:02:
99:c9:a8:3c:59:7b:97:fa:a7:f4:9f:e4:b2:ec:52:
66:99:11:21:cb:2b:9c:36:f9:50:6b:d2:7b:84:8a:
db:a7:45:a6:8d:ae:9c:4b:48:3d:d0:3a:c1:84:fa:
f0:ae:c5:cc:40:6e:a5:97:21:15:8c:21:17:55:b7:
c1:32:cc:7e:cf:c0:4f:7f:b1:bc:0b:68:39:75:1f:
e8:ca:c4:b0:b1:38:df:24:91:e4:32:93:44:48:c7:
e2:e4:ed:99:1e:a4:4e:ad:ed:59:46:35:fe:0b:c0:
89:14:f6:25:49:5b:01:f6:9c:ce:f0:04:56:90:92:
3f:36:d7:fe:33:31:e5:04:39:9f:10:a5:09:ff:a3:
c3:fb:e0:c8:d2:67:aa:47:3d:16:5a:c8:1d:2d:c8:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:83:EF:39:E8:47:A1:36:FA:73:2A:4E:EC:EE:6F:20:28:AD:76
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:83:7e:b2:6a:9c:a1:bd:a6:c9:85:79:9b:f3:41:0e:be:eb:
02:35:03:3c:af:0d:ce:7a:b0:c9:ec:9c:05:f6:a6:63:09:c4:
c9:92:1d:2c:1e:09:4e:3e:1b:ec:34:e5:ed:2d:3f:e1:82:d5:
22:6d:c3:10:ce:cc:6e:f0:63:c0:c1:e9:04:fb:ff:43:35:a8:
b2:d5:80:17:a4:92:1a:b2:e7:a1:3f:3d:7b:49:9f:28:bb:9f:
94:4a:dd:00:1f:e8:0e:bf:87:a9:52:d0:5c:c5:10:96:f4:1e:
4d:8a:3e:c2:d6:bc:1e:f9:9b:12:bc:e8:b4:a8:40:aa:d2:2e:
73:eb:da:54:6e:49:36:37:53:b2:07:df:cd:e4:7f:26:18:95:
b3:4e:70:a1:0b:60:26:2d:74:1b:11:4b:4f:dc:1a:75:5f:65:
6e:14:f4:ba:76:9d:56:08:6f:d2:6c:25:af:f8:28:19:17:5e:
c8:28:ac:34:d2:b3:50:fa:ae:4f:f3:e0:a9:a0:f7:9b:27:7c:
12:0a:89:81:e2:f5:2e:22:ae:d3:b8:b1:a6:ff:3d:94:57:42:
5d:7d:de:5b:48:3d:e1:43:bb:bf:7e:71:60:33:ec:e0:51:5b:
d6:83:27:fa:55:95:11:11:c1:a9:b6:18:ac:e2:56:a1:aa:6c:
18:f2:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:01 2026 by rpki-client