Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: SDhJR5lIbI8oP7Tt0ZPRJsPHEPLQ7dA/7j1Dk+3RXw8=
Subject key identifier: 28:96:08:7B:27:52:F7:62:18:D7:80:20:5D:C1:A5:FB:F7:57:A8:85
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 350864D99BC09BB6725C8AC6E7DA73E7A87843DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 01ED
Signing time: Thu 23 Jul 2026 11:11:53 +0000
Manifest this update: Thu 23 Jul 2026 11:06:53 +0000
Manifest next update: Fri 24 Jul 2026 13:21:53 +0000
Files and hashes: 1: AS211575.asa (hash: 3jQ9FknJaDWbQ17PwY7n5aItgcBqYzxUnCnDy4fGyBA=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: s4xpf6+8hn2lfqtfXnqLx9kBqXG2gTXrnIOPGq45P4U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:08:64:d9:9b:c0:9b:b6:72:5c:8a:c6:e7:da:73:e7:a8:78:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Jul 23 11:06:53 2026 GMT
Not After : Jul 24 13:21:53 2026 GMT
Subject: CN=2896087B2752F76218D780205DC1A5FBF757A885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:84:44:67:4a:3f:88:8e:51:b5:ed:34:b0:e9:
fa:7d:b4:83:ac:72:01:b7:58:6c:30:8d:ab:7e:f4:
02:ae:57:53:f7:d7:37:72:f8:c9:c6:31:69:ec:d5:
0b:2b:53:34:20:22:a0:d4:dc:bb:f2:a0:0d:53:33:
3c:f5:65:7f:76:93:27:e1:d4:8f:ac:39:ed:70:f4:
a9:0d:a7:ce:1b:19:c5:5c:e6:c7:3f:a2:6f:c7:64:
c6:9a:c1:7c:d8:10:b3:67:08:24:05:ee:3a:13:74:
0d:28:5a:e6:9e:be:78:00:59:a6:d0:39:e8:df:f4:
d5:be:35:ee:f5:e9:c3:49:96:e1:ba:86:3a:d4:c7:
65:23:90:d0:0d:d3:a6:c5:e6:a9:98:19:84:98:8b:
31:28:3e:a4:ea:66:d8:53:00:f8:7d:50:4d:02:c4:
2a:cf:46:2b:fe:ac:70:89:1a:65:57:06:c4:e6:75:
97:bd:97:7e:40:61:13:c1:5c:17:41:0f:30:a0:e7:
33:14:83:de:bb:e1:ac:fc:99:70:0d:fc:4b:b7:85:
4a:29:91:78:70:a1:f6:07:97:ef:5c:de:2d:61:a9:
f7:e1:17:04:b3:6f:7b:4c:48:45:ea:a1:bd:2d:4c:
d3:dc:ea:c2:07:72:91:9c:d8:ae:bc:69:c2:bd:0b:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:08:7B:27:52:F7:62:18:D7:80:20:5D:C1:A5:FB:F7:57:A8:85
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c4:6d:e2:4e:a1:d7:bf:6f:d2:bb:c4:9b:78:87:80:5d:fe:
74:04:bb:8d:70:66:13:14:fb:57:85:ff:8b:e5:d6:0b:dc:87:
f7:fc:3b:26:d3:2e:d5:b6:00:f1:e5:09:c7:81:ad:58:78:54:
b7:13:60:76:e1:48:67:a6:c5:df:85:83:45:c2:83:02:bd:60:
fd:e0:aa:44:c3:33:ab:39:ad:78:e9:66:c9:fe:ca:b9:69:88:
63:34:69:ab:50:9e:18:c7:61:63:0c:aa:bd:90:fa:01:09:9d:
67:16:5f:1e:ab:07:cc:f9:a0:f6:bc:5e:ac:e7:df:f3:29:62:
bf:bf:42:78:5e:71:42:ce:99:5a:37:c5:f8:96:67:b0:db:3b:
d1:4a:97:cb:62:60:07:d2:43:ea:a3:33:06:97:c7:83:7b:78:
df:22:31:cc:ed:36:f6:64:d4:4f:a7:3b:24:58:2c:d7:8b:23:
e6:69:b4:4c:32:ff:1f:62:27:46:e7:aa:96:40:b2:f7:e6:f0:
1c:9e:5e:07:48:bd:f3:c1:86:ca:4c:3d:a1:f3:71:97:e0:5d:
87:90:a2:17:76:a3:3c:f4:b7:71:ec:ad:b0:ca:bf:af:24:8e:
9e:4f:a6:55:03:1e:00:b1:8c:bc:a7:55:4e:77:f2:42:b3:73:
24:35:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:20 2026 by rpki-client