Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: 0vDlJJUzNIGgWyoAa2uvbv+eXtWhQ9HvkpyYhEK9Ieg=
Subject key identifier: 94:7D:5F:38:2E:D7:A4:54:97:AB:DE:BA:2F:86:7E:C8:25:78:B2:6C
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019CABA20EA6015C412A02DF818AA6C768FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 114B
Signing time: Sun 01 Mar 2026 23:00:50 +0000
Manifest this update: Sun 01 Mar 2026 23:00:50 +0000
Manifest next update: Mon 02 Mar 2026 23:00:50 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: P2oa+5nTuF6RtMQZLzBot4JLDsJe1I1VZlKkdC8VM7I=)
2: DAxx-UN0iBz6pOJGvTXHcOZD_jg.roa (hash: Kdz9GuJlZ7ZKJVHKRBo+yO7QuXh68uExIpIMEaag7CQ=)
3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0e:a6:01:5c:41:2a:02:df:81:8a:a6:c7:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Mar 1 23:00:50 2026 GMT
Not After : Mar 2 23:00:50 2026 GMT
Subject: CN=947d5f382ed7a45497abdeba2f867ec82578b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:d0:47:d3:03:60:46:2f:bf:95:69:fe:7c:
33:fd:e3:21:a7:6e:54:93:b0:96:4d:e3:cf:89:91:
08:b7:b5:b3:05:7c:e1:44:7c:88:c7:a7:41:96:f5:
3e:20:15:60:cc:19:de:86:a9:39:87:80:9d:d8:7b:
86:85:d3:c1:a5:54:6c:6c:92:75:0d:0c:e7:4a:64:
a3:30:a3:5b:9a:33:1a:ea:13:e8:84:f2:66:b0:3a:
09:61:ac:42:89:d4:0d:3a:19:2c:4f:15:32:30:8d:
f1:46:7f:0a:e0:3f:c6:88:ab:c8:ee:c8:61:b2:11:
6c:c0:c6:ed:fa:8e:36:15:9b:5e:f5:19:90:a4:81:
09:79:c8:1a:32:94:c6:35:2f:1a:9b:26:c6:3f:2b:
2d:ce:52:d8:51:e8:5c:00:bd:2f:8e:b1:72:f0:63:
e1:98:eb:00:60:28:46:6f:b1:b0:14:99:8f:59:79:
5a:44:0c:dc:7d:2c:a0:b3:ec:9a:51:b1:58:28:9f:
31:7f:f4:3d:25:18:f4:b7:9f:e0:af:f4:7c:a4:40:
01:25:f5:bc:39:71:5b:de:e5:5d:d0:39:0f:fd:3c:
f6:a9:89:6c:a6:e4:52:f4:db:83:58:ec:df:2e:d8:
35:c1:a8:bf:e2:43:35:78:91:63:99:0d:5c:6a:b5:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7D:5F:38:2E:D7:A4:54:97:AB:DE:BA:2F:86:7E:C8:25:78:B2:6C
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b9:7f:7d:ba:75:96:dd:f7:90:30:01:5a:b0:b1:18:90:fa:
aa:34:10:87:c1:86:f9:e6:33:b5:24:b9:ca:50:2d:fa:9d:33:
68:77:f8:8f:1a:d1:c1:fc:83:56:a2:a8:86:25:5c:0b:42:7a:
85:29:7e:7c:64:0e:a7:29:b8:54:72:97:b9:52:88:fc:92:63:
86:f3:3d:e4:b4:ae:26:18:9e:8a:87:87:7b:25:fe:26:2e:6e:
ba:59:0f:db:b4:f4:8e:74:f9:bd:ab:18:0c:e9:51:cd:92:28:
51:32:0a:3c:ea:72:6b:ce:5f:74:39:5d:6a:85:d8:a6:5f:78:
9e:72:f1:58:7d:f4:19:72:0b:f9:a2:c7:1d:46:38:23:78:0d:
9e:f4:8f:b9:0a:85:3e:4f:d5:12:9c:ad:8b:36:da:67:5d:e5:
2c:7f:3a:66:52:1c:c3:bf:70:f3:34:59:66:ab:92:67:88:72:
cc:79:2a:0e:52:7e:c3:0f:1c:8e:a1:a4:e0:ac:9b:ae:00:7c:
e0:32:bf:9e:66:82:42:b6:81:66:15:d5:be:2f:4c:44:d8:45:
97:16:d1:76:5f:61:5b:8c:93:b0:b8:73:5a:ce:a1:09:59:7e:
4d:0a:71:3f:5a:76:3a:56:66:40:f4:ff:76:7d:65:ec:84:8f:
29:19:ed:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrog6mAVxBKgLfgYqmx2j6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh
ODAwYzcwHhcNMjYwMzAxMjMwMDUwWhcNMjYwMzAyMjMwMDUwWjAzMTEwLwYDVQQD
Eyg5NDdkNWYzODJlZDdhNDU0OTdhYmRlYmEyZjg2N2VjODI1NzhiMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhbQR9MDYEYvv5Vp/nwz/eMhp25U
k7CWTePPiZEIt7WzBXzhRHyIx6dBlvU+IBVgzBnehqk5h4Cd2HuGhdPBpVRsbJJ1
DQznSmSjMKNbmjMa6hPohPJmsDoJYaxCidQNOhksTxUyMI3xRn8K4D/GiKvI7shh
shFswMbt+o42FZte9RmQpIEJecgaMpTGNS8amybGPystzlLYUehcAL0vjrFy8GPh
mOsAYChGb7GwFJmPWXlaRAzcfSygs+yaUbFYKJ8xf/Q9JRj0t5/gr/R8pEABJfW8
OXFb3uVd0DkP/Tz2qYlspuRS9NuDWOzfLtg1wai/4kM1eJFjmQ1carWKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR9Xzgu16RUl6veui+GfsgleLJsMB8GA1UdIwQY
MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt
YzgzMDA3MzI3NDQ5LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5
LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbl/fbp1
lt33kDABWrCxGJD6qjQQh8GG+eYztSS5ylAt+p0zaHf4jxrRwfyDVqKohiVcC0J6
hSl+fGQOpym4VHKXuVKI/JJjhvM95LSuJhieioeHeyX+Ji5uulkP27T0jnT5vasY
DOlRzZIoUTIKPOpya85fdDldaoXYpl94nnLxWH30GXIL+aLHHUY4I3gNnvSPuQqF
Pk/VEpytizbaZ13lLH86ZlIcw79w8zRZZquSZ4hyzHkqDlJ+ww8cjqGk4KybrgB8
4DK/nmaCQraBZhXVvi9MRNhFlxbRdl9hW4yTsLhzWs6hCVl+TQpxP1p2OlZmQPT/
dn1l7ISPKRntBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:29 2026 by rpki-client