Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: VrAe3TUW7oLdrTIBfO+pQEXbpFwNPyMbKdF4XFi/AAs=
Subject key identifier: DA:76:E4:E3:74:17:89:6D:39:A6:71:79:24:6D:7A:81:3F:BD:EA:39
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 01A0C09F317D2C3B54E71CF51E733C98FA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 136F
Signing time: Sun 20 Sep 2026 21:00:53 +0000
Manifest this update: Sun 20 Sep 2026 21:00:53 +0000
Manifest next update: Mon 21 Sep 2026 21:00:53 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: JKhkgpvnwACxoLj+kqEOGHmc+LW00XeRNXG7qzfE6Sc=)
2: DCqCb_mFehnRF04MWwWhiZGFy2s.roa (hash: hBwRUVH63MvIYesZ1GBehKeF1wWcH7teYvi7RaedN7w=)
3: fPQVF7ZndJOXR689OYjsA4HroQE.asa (hash: hPNOyWW6q8UcI5eWp2HdGBUdR6sF1OiKH8X6IdTh8PQ=)
4: wCxCDwUCOQsdlSNMlK0k4YI2tx4.roa (hash: rTTIUnsFLtdqF3QLDJSJAUZc2UdnIsqTTuD5CypPI48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:31:7d:2c:3b:54:e7:1c:f5:1e:73:3c:98:fa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Sep 20 21:00:53 2026 GMT
Not After : Sep 21 21:00:53 2026 GMT
Subject: CN=da76e4e37417896d39a67179246d7a813fbdea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:93:62:b0:a8:98:6a:3e:05:57:49:da:94:
99:29:82:6e:3c:53:28:3c:65:f3:3a:a5:87:3a:a5:
e4:d8:de:de:7d:15:3e:fa:79:58:ab:93:cf:8a:39:
3f:3a:5a:d6:9a:ca:87:d3:d2:98:28:31:12:c8:cc:
d6:6e:24:df:dd:d5:2a:d0:c8:ff:ab:c9:96:4e:6b:
86:cc:d1:93:cc:fb:5b:6c:fb:f6:70:ec:89:eb:35:
ac:80:71:7b:1b:4a:5d:c9:f4:88:3f:65:10:d7:84:
6a:cc:bf:8e:f1:fd:69:8f:49:58:a9:05:e8:6f:5c:
48:44:c4:a7:b0:78:28:90:10:a1:6c:87:22:b1:f4:
e0:69:2e:62:17:b8:0d:ea:d3:38:7e:51:b3:9d:d2:
ed:6a:19:2e:32:d5:a1:0e:84:30:39:04:6e:4c:ac:
00:60:29:8e:6e:1e:f2:2a:05:66:7d:80:17:ba:29:
7d:cc:ea:98:b8:07:01:f9:3f:ac:d5:93:6a:d7:11:
b7:ca:a9:21:70:19:e4:f9:90:66:95:a2:1d:f0:7b:
6d:0c:53:a4:fb:ef:87:69:7e:fc:8b:cf:6e:0e:f1:
4e:48:eb:d1:92:62:29:18:ed:7d:ff:42:f0:fd:30:
13:6f:39:57:fc:b4:59:25:78:2c:5a:13:ba:f2:7e:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:E4:E3:74:17:89:6D:39:A6:71:79:24:6D:7A:81:3F:BD:EA:39
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6c:14:f4:c9:5f:ab:8a:74:d3:a2:dc:fe:b3:37:91:db:e2:
f7:3b:8d:6b:1b:a8:57:e3:83:79:fa:89:88:d6:0b:b4:3e:55:
e6:af:f1:47:8a:81:69:61:e4:79:6a:f9:84:a8:b8:74:a8:0c:
a3:71:18:00:15:6e:d0:63:29:dd:d7:c8:23:18:fd:4e:85:7c:
c2:67:57:79:eb:63:b5:c6:22:aa:4f:fa:47:67:a4:bb:89:68:
33:ba:73:95:65:5b:d8:21:f5:e3:a3:cd:0d:cd:ae:16:fc:88:
79:93:9e:4e:24:3a:80:e8:37:59:89:b8:de:a0:69:c2:b1:34:
a1:19:b0:33:19:ad:d6:1f:25:45:2b:43:c6:ef:8c:2b:77:2b:
79:c6:7c:51:ae:1c:b7:1e:27:7d:7c:fe:6e:ff:b1:1c:46:f9:
62:47:bd:d1:43:38:13:22:63:c9:9c:82:d7:f1:3d:d7:6d:1c:
8f:de:b6:1d:26:a6:ff:68:31:f7:a3:86:6f:1c:4a:b5:e0:14:
d0:ab:ca:ea:5d:4d:1b:04:c6:86:d1:07:17:9a:a3:aa:38:36:
e1:3d:d8:1a:42:cb:58:43:c6:d5:79:f1:7a:0b:33:99:53:ac:
ac:e3:c6:b9:14:f8:82:c1:fa:7a:1d:9c:db:74:7f:3f:b8:7e:
e2:65:60:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDAnzF9LDtU5xz1HnM8mPofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYzI2MDM0MzdlZjc0MTE3ZmExMjI3MmVjNDJjMjUyN2Rh
ODAwYzcwHhcNMjYwOTIwMjEwMDUzWhcNMjYwOTIxMjEwMDUzWjAzMTEwLwYDVQQD
EyhkYTc2ZTRlMzc0MTc4OTZkMzlhNjcxNzkyNDZkN2E4MTNmYmRlYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyGTYrComGo+BVdJ2pSZKYJuPFMo
PGXzOqWHOqXk2N7efRU++nlYq5PPijk/OlrWmsqH09KYKDESyMzWbiTf3dUq0Mj/
q8mWTmuGzNGTzPtbbPv2cOyJ6zWsgHF7G0pdyfSIP2UQ14RqzL+O8f1pj0lYqQXo
b1xIRMSnsHgokBChbIcisfTgaS5iF7gN6tM4flGzndLtahkuMtWhDoQwOQRuTKwA
YCmObh7yKgVmfYAXuil9zOqYuAcB+T+s1ZNq1xG3yqkhcBnk+ZBmlaId8HttDFOk
+++HaX78i89uDvFOSOvRkmIpGO19/0Lw/TATbzlX/LRZJXgsWhO68n4SGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNp25ON0F4ltOaZxeSRteoE/veo5MB8GA1UdIwQY
MBaAFN/CYDQ373QRf6EicuxCwlJ9qADHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUt
YzgzMDA3MzI3NDQ5LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTVlNDAtZDhiZS00OGQ5LWJkNTUtYzgzMDA3MzI3NDQ5
LzEvMzhKZ05EZnZkQkZfb1NKeTdFTENVbjJvQU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2wU9Mlf
q4p006Lc/rM3kdvi9zuNaxuoV+ODefqJiNYLtD5V5q/xR4qBaWHkeWr5hKi4dKgM
o3EYABVu0GMp3dfIIxj9ToV8wmdXeetjtcYiqk/6R2eku4loM7pzlWVb2CH146PN
Dc2uFvyIeZOeTiQ6gOg3WYm43qBpwrE0oRmwMxmt1h8lRStDxu+MK3crecZ8Ua4c
tx4nfXz+bv+xHEb5Yke90UM4EyJjyZyC1/E9120cj962HSam/2gx96OGbxxKteAU
0KvK6l1NGwTGhtEHF5qjqjg24T3YGkLLWEPG1XnxegszmVOsrOPGuRT4gsH6eh2c
23R/P7h+4mVg3Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 00:23:31 2026 by rpki-client