Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: 3i1J1/BY6qBlE3/T5RMEy0+p9K7sTWCkGCBe8W2d/J4=
Subject key identifier: 5B:12:E9:A0:7D:69:36:A5:CA:71:DF:8D:F4:06:74:7A:F1:1D:6C:82
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 59C64ECDB2000DA8274C201F83A7F87C501876DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 0247
Signing time: Sat 26 Sep 2026 05:42:37 +0000
Manifest this update: Sat 26 Sep 2026 05:37:37 +0000
Manifest next update: Sun 27 Sep 2026 08:32:37 +0000
Files and hashes: 1: AS211575.asa (hash: PEZMTsY76v1BI64BGAr+a6nHvjlH7aGwrvtJ4PkVK2s=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: E5KzbAFfYUSDxyz/vi84EB18NDqsQ+fdszFwfnpFiDQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c6:4e:cd:b2:00:0d:a8:27:4c:20:1f:83:a7:f8:7c:50:18:76:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Sep 26 05:37:37 2026 GMT
Not After : Sep 27 08:32:37 2026 GMT
Subject: CN=5B12E9A07D6936A5CA71DF8DF406747AF11D6C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:5b:4a:73:0f:ab:96:59:2a:ca:4b:6d:bd:
4f:c2:c9:97:b7:fd:99:5b:4e:ac:a7:5b:32:06:73:
60:16:2d:46:34:2a:e6:4f:c3:8c:17:37:8c:27:d0:
35:24:57:bd:76:a9:e6:a9:02:42:4c:3c:1b:1d:41:
2e:89:fd:b8:ce:2b:6b:b8:d1:ca:09:83:66:b9:c7:
e3:3b:db:1d:15:9b:66:36:b6:d7:42:0c:c9:cd:0b:
36:a7:10:6b:5d:0b:14:7a:ff:1e:fc:ea:71:49:f2:
42:42:24:b2:a7:bd:5d:0f:fe:5e:2a:1c:0f:48:3b:
bc:85:59:f6:6e:e8:62:e0:49:1c:f6:ab:04:59:f0:
20:46:ba:fd:d0:0f:da:0b:40:08:68:75:04:9d:92:
9c:c6:66:0c:57:cb:2d:be:d1:da:f2:e0:b5:fb:4f:
2f:10:1d:b9:f6:13:c7:9a:28:0d:25:16:bc:23:94:
e9:54:ba:34:ec:98:56:86:0d:51:ea:b5:e5:97:27:
0b:1c:e9:2a:d6:e5:bc:f0:31:5f:f3:8d:cd:f3:af:
aa:98:b5:35:c9:41:ba:50:ce:fc:d4:cc:48:fe:d5:
c3:49:e0:f4:8a:82:6d:43:ef:17:3e:ab:41:57:ef:
43:0e:dd:f9:84:d8:3e:7f:d4:f7:5c:ce:c4:27:c1:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:12:E9:A0:7D:69:36:A5:CA:71:DF:8D:F4:06:74:7A:F1:1D:6C:82
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3a:9b:93:ff:c1:7c:d6:d5:dc:9c:65:e7:b8:24:73:f5:a8:
dd:1f:89:c6:b1:69:a9:c9:14:cf:6a:d8:3a:ff:2d:75:07:16:
72:7a:95:05:d4:39:ff:0f:5e:7e:23:25:3b:24:00:c2:f7:33:
9b:0b:a5:00:23:60:b8:8b:86:ed:fb:b3:3f:dd:d9:8f:30:16:
bc:26:e1:5c:4d:81:68:a1:5a:b9:0a:24:d3:43:b7:45:17:6b:
f9:9f:0f:cf:5b:82:66:3e:2b:cc:d3:43:48:d9:f3:24:df:72:
4f:9f:9b:6f:de:fd:d6:4f:dd:24:cd:b6:4e:1b:ca:f2:60:78:
96:67:07:a6:86:b8:e0:a1:c7:0b:e6:6a:f7:5d:ca:74:5a:44:
aa:80:d2:99:5a:77:40:0b:25:d5:dc:d9:ad:57:a3:8f:e8:b4:
45:6b:78:7a:1f:38:d6:95:08:f2:57:0b:d9:05:b1:c7:8c:4c:
5b:8f:6e:6d:f1:70:a4:d9:00:92:dd:a3:72:7b:b5:4d:2e:53:
2f:10:3c:aa:dc:67:cc:81:56:48:72:68:bc:5f:66:42:d2:33:
40:a1:23:0e:c7:1f:df:35:91:26:02:a1:e4:4f:35:17:b1:7e:
35:70:56:90:e3:7d:4f:5a:f0:08:a7:f5:fa:e6:dd:a4:5d:8b:
36:89:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:37:35 2026 by rpki-client