Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: 5kfkiRx1TGvwP1Xn/N68ru2+ECJLTo6pYBflAbeuMyc=
Subject key identifier: 57:49:28:28:0E:78:6C:5B:A9:D3:C8:4B:E4:8A:B9:BE:A4:B9:BE:18
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 48EEF26BFEE36935FA5F053D4B17897B497B348F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 018C
Signing time: Tue 12 May 2026 13:04:54 +0000
Manifest this update: Tue 12 May 2026 12:59:54 +0000
Manifest next update: Wed 13 May 2026 15:30:54 +0000
Files and hashes: 1: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: q+WzUxVGWRMQjsdAenrcP8vRel+LqgIt7jLO0kQAyoM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ee:f2:6b:fe:e3:69:35:fa:5f:05:3d:4b:17:89:7b:49:7b:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: May 12 12:59:54 2026 GMT
Not After : May 13 15:30:54 2026 GMT
Subject: CN=574928280E786C5BA9D3C84BE48AB9BEA4B9BE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:f3:c0:94:4a:cc:a5:ab:bd:7a:67:0c:a4:
59:15:de:c5:d1:91:66:6d:02:51:f7:51:b4:ef:ef:
05:df:b9:80:84:94:ea:c8:7a:07:ed:51:5b:7a:f4:
9f:cc:c6:91:d6:64:71:d0:9f:bd:63:e0:35:c3:90:
a6:70:3b:89:19:2a:1e:1c:9d:ca:d4:bf:d6:65:d8:
be:75:5d:56:5a:4d:73:fd:73:8f:84:62:de:7a:38:
9c:26:42:30:85:28:3c:fc:65:a4:a5:cb:93:6e:76:
40:3c:6b:da:98:88:00:bc:a6:d5:5f:ba:cd:f6:7b:
0f:f0:c7:0c:f5:ba:37:f4:3b:25:52:51:24:8b:0c:
ce:a2:db:bc:ed:ee:fe:4d:b9:d7:de:51:4a:61:a4:
a5:fd:e1:78:cd:47:f6:48:ff:8f:7f:ed:c7:a4:b5:
7d:e1:b3:79:86:aa:6e:77:a0:07:5a:fc:94:92:9f:
57:72:55:d5:56:88:15:6c:d4:b1:29:a8:8f:3a:a0:
e9:74:d1:f5:2b:b7:76:ae:eb:3b:b1:94:fe:d8:11:
98:fa:c9:d4:52:1a:8d:fd:c0:a8:2f:a6:65:0d:11:
c2:12:0c:ab:8d:98:c7:d5:f7:d2:ad:fc:c1:0d:bd:
15:96:a8:78:06:12:13:a4:3f:07:0a:15:95:5a:02:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:28:28:0E:78:6C:5B:A9:D3:C8:4B:E4:8A:B9:BE:A4:B9:BE:18
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:16:97:ad:49:8b:50:23:85:fe:f5:f9:b2:65:7e:29:e0:f0:
c4:37:28:8b:6d:a3:8b:35:d3:d6:64:78:6b:9f:8b:56:94:88:
03:de:8b:4b:66:23:f7:88:52:a2:53:ce:cc:f3:d9:bc:c6:b5:
43:bb:a6:0e:60:f0:22:04:51:93:cb:e1:0c:4b:95:16:89:00:
c4:0d:f0:df:0e:8d:c9:e1:fc:78:19:aa:57:b2:fb:43:1b:15:
ed:71:c8:ab:fb:b8:47:2f:2e:1e:2a:75:67:5b:72:eb:b5:83:
ab:78:26:af:72:88:9a:f0:7b:5e:4c:75:91:fb:66:e3:1f:a0:
9a:0d:e8:7c:28:f7:c8:ec:9a:52:c5:ee:bd:b7:c9:c1:b7:e6:
c7:64:9f:0a:37:b4:e5:b4:36:f8:b2:3e:4c:fb:6e:88:f0:07:
b2:81:8c:06:36:0f:32:ca:49:1e:67:ff:3e:28:7c:a2:01:09:
1f:f3:fb:f1:cc:74:86:fe:1d:04:1d:f3:36:b9:b8:f8:d8:38:
78:6c:67:2b:56:84:8f:2e:b6:d3:98:43:9d:ff:c5:ff:5a:dc:
d3:12:5a:06:15:8d:eb:7c:72:ed:92:28:b4:41:dd:60:68:fd:
21:41:83:8c:b7:bd:0d:c6:13:ed:a8:9b:e9:f3:16:f4:f7:45:
e6:fe:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:54 2026 by rpki-client