Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: Q+Xw8Cg1uzhFPOY1JOLfu1EW6QPjMAnNNFjWrg4SDI8=
Subject key identifier: 58:97:F4:E7:58:83:5F:B4:C8:CA:12:1A:BB:8E:2D:67:93:70:F3:91
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 472D32FB92E97278638649DBBC92F22E53D7A4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 014C
Signing time: Wed 25 Mar 2026 05:55:44 +0000
Manifest this update: Wed 25 Mar 2026 05:50:44 +0000
Manifest next update: Thu 26 Mar 2026 08:20:44 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: 1egefsCUc8uPXYLZEsZcShoBNMuv97lo5nEROlviEt8=)
2: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 08:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2d:32:fb:92:e9:72:78:63:86:49:db:bc:92:f2:2e:53:d7:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Mar 25 05:50:44 2026 GMT
Not After : Mar 26 08:20:44 2026 GMT
Subject: CN=5897F4E758835FB4C8CA121ABB8E2D679370F391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8a:ef:67:be:f3:c0:19:eb:9e:13:8b:83:9d:
84:60:58:65:67:a1:4b:bc:89:93:be:2e:38:fd:72:
0a:d4:6f:a8:7d:65:9f:df:4a:ef:e4:15:2e:b2:70:
9f:97:81:e9:e8:33:84:0b:30:7d:6f:ab:24:88:47:
20:15:47:1f:6e:f7:08:85:4b:ba:03:78:23:9e:b5:
79:d9:7b:6e:e8:9f:44:d4:0f:5f:cc:df:05:e4:1b:
86:a1:13:66:64:b7:93:1d:f6:6b:b4:56:fe:60:68:
b9:11:6f:41:25:9f:f3:08:29:44:d9:b8:77:c9:df:
31:db:5e:af:03:c5:98:a8:f7:4c:a4:90:e5:ba:e4:
1e:33:f4:50:f1:5c:16:a0:70:6c:94:4f:c4:57:9d:
10:1c:5b:8a:e1:ae:62:90:12:a9:cb:99:46:a4:b7:
13:01:f8:a0:8b:f1:12:45:bf:8b:98:c7:68:f6:32:
8a:5a:bb:46:dc:e0:7e:67:83:79:7e:31:ed:5b:e5:
2d:a9:5f:f0:c4:ff:6b:6e:9a:2d:52:99:87:af:ef:
54:e5:72:27:ab:d5:a5:69:19:bc:3a:a7:93:de:32:
de:c2:60:5d:07:ec:a3:7e:40:08:26:8a:84:11:f8:
0e:b4:02:ca:49:89:51:6a:93:3f:a7:69:1d:de:37:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:97:F4:E7:58:83:5F:B4:C8:CA:12:1A:BB:8E:2D:67:93:70:F3:91
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d3:d9:9a:ee:80:94:fa:e9:31:7e:24:df:64:be:7c:0a:dc:
7e:30:02:17:1e:f8:f3:a7:ed:69:3d:13:25:58:0a:1d:a3:26:
32:5a:2b:a3:36:39:9b:d0:3d:77:e4:94:48:a6:06:6e:ef:bf:
f4:b0:59:15:88:e0:74:55:f9:c9:8f:52:ed:51:6d:08:8b:dc:
17:8a:31:38:aa:19:15:52:b5:38:9d:c1:1d:d4:a1:e8:78:b6:
a8:16:79:e1:5d:3c:33:5a:38:8a:52:88:8b:93:a8:3a:86:b5:
10:59:22:3c:ab:fe:2e:b5:66:0c:7f:a3:0a:41:64:58:a5:a0:
75:fb:5a:63:95:8a:f9:1d:d9:65:72:c6:97:5c:9f:5d:ba:0b:
15:12:11:63:53:d9:83:35:64:fc:3c:80:a3:55:df:b1:18:cb:
0e:af:3c:f0:08:e1:39:5b:a0:ed:e6:1e:f9:ca:7e:e9:31:95:
d3:25:3b:0b:67:ce:7e:04:44:c1:bf:bd:0e:db:3d:ee:34:e3:
a3:8c:1b:ed:91:77:da:d0:8a:dd:3b:cc:55:d3:62:1a:19:86:
cf:cb:3a:7d:e2:f3:d2:30:fd:9e:c8:38:b3:83:c5:dc:c0:ad:
3a:f5:3a:a8:ff:98:e5:22:84:bd:46:d8:11:ea:9c:7a:0c:2b:
0f:dc:64:cf
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURy0y+5LpcnhjhknbvJLyLlPXpOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhlODk1OTM4ZjNiY2VjZDQ4ZDlhYjc4OTZjYTQ0MDlm
NmY2YzU5ZTAeFw0yNjAzMjUwNTUwNDRaFw0yNjAzMjYwODIwNDRaMDMxMTAvBgNV
BAMTKDU4OTdGNEU3NTg4MzVGQjRDOENBMTIxQUJCOEUyRDY3OTM3MEYzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuiu9nvvPAGeueE4uDnYRgWGVn
oUu8iZO+Ljj9cgrUb6h9ZZ/fSu/kFS6ycJ+XgenoM4QLMH1vqySIRyAVRx9u9wiF
S7oDeCOetXnZe27on0TUD1/M3wXkG4ahE2Zkt5Md9mu0Vv5gaLkRb0Eln/MIKUTZ
uHfJ3zHbXq8DxZio90ykkOW65B4z9FDxXBagcGyUT8RXnRAcW4rhrmKQEqnLmUak
txMB+KCL8RJFv4uYx2j2Mopau0bc4H5ng3l+Me1b5S2pX/DE/2tumi1SmYev71Tl
cier1aVpGbw6p5PeMt7CYF0H7KN+QAgmioQR+A60AspJiVFqkz+naR3eN5QtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUWJf051iDX7TIyhIau44tZ5Nw85EwHwYDVR0j
BBgwFoAUOOiVk487zs1I2at4lspECfb2xZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj
OWRjLzAvMzhFODk1OTM4RjNCQ0VDRDQ4RDlBQjc4OTZDQTQ0MDlGNkY2QzU5RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09PaVZrNDg3enMxSTJhdDRsc3BFQ2Zi
MnhaNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04
OThlLTRiODMtOTVlNi00ZmY0YWI3NWM5ZGMvMC8zOEU4OTU5MzhGM0JDRUNENDhE
OUFCNzg5NkNBNDQwOUY2RjZDNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtPZmu6AlPrpMX4k32S+
fArcfjACFx7486ftaT0TJVgKHaMmMlorozY5m9A9d+SUSKYGbu+/9LBZFYjgdFX5
yY9S7VFtCIvcF4oxOKoZFVK1OJ3BHdSh6Hi2qBZ54V08M1o4ilKIi5OoOoa1EFki
PKv+LrVmDH+jCkFkWKWgdftaY5WK+R3ZZXLGl1yfXboLFRIRY1PZgzVk/DyAo1Xf
sRjLDq888AjhOVug7eYe+cp+6TGV0yU7C2fOfgREwb+9Dts97jTjo4wb7ZF32tCK
3TvMVdNiGhmGz8s6feLz0jD9nsg4s4PF3MCtOvU6qP+Y5SKEvUbYEeqcegwrD9xk
zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:19 2026 by rpki-client