Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: 2sjHYTntFFYU+3Rk6kORCO+rv/OWcsGcL+P7GDylV8s=
Subject key identifier: C9:24:6D:CB:AC:D5:9B:24:89:74:E3:84:78:F7:89:E3:A9:A8:FF:02
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 019D97E1B774995BF9AD5E67E6E7CF1FAE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 11C7
Signing time: Thu 16 Apr 2026 20:00:45 +0000
Manifest this update: Thu 16 Apr 2026 20:00:45 +0000
Manifest next update: Fri 17 Apr 2026 20:00:45 +0000
Files and hashes: 1: 1-RlwPgkm_UvcXOCMS-B-tCjFDd4.roa (hash: JIVt8LRE4P4teDbJAFqyE2U6gD9MsbOuAB3Fl+sGOjU=)
2: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: 1O6bxNQBl9LkhW56OMsqizKX9bXS9NONtsccUXY2yNM=)
3: fQLdgyYM3tvuNVHUZIpaKxsjEZc.roa (hash: 9sR/eMSi1iqqDAz/FqyHyeV4iHU6LW2Zpai7cg/dyoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b7:74:99:5b:f9:ad:5e:67:e6:e7:cf:1f:ae:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Apr 16 20:00:45 2026 GMT
Not After : Apr 17 20:00:45 2026 GMT
Subject: CN=c9246dcbacd59b248974e38478f789e3a9a8ff02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:fa:73:b5:a7:34:4a:4d:fe:51:3d:10:54:
1e:6e:84:54:8e:c8:67:54:de:54:21:f4:4e:d6:4f:
70:00:3f:e8:a3:f1:ef:45:dd:59:be:f5:1d:53:76:
78:04:62:f1:2f:9e:90:fb:a8:04:4e:91:44:d5:68:
11:f8:eb:34:a1:c0:38:70:d6:ad:67:8e:03:46:bd:
fc:37:f2:f6:24:1f:07:2c:aa:0e:41:7f:e2:d0:bf:
21:f1:0b:fc:b3:3a:02:9f:ae:dd:98:af:b6:76:e5:
56:6a:c7:2b:31:bb:85:c4:2c:77:e6:fb:4c:ce:eb:
6c:f4:80:3f:fb:2e:2a:dd:5b:d2:1e:53:9d:49:f1:
04:31:65:0e:92:ac:7e:db:8a:68:88:e0:0a:5c:85:
79:c9:1b:da:77:25:11:c8:2e:5c:31:b9:f2:14:50:
71:be:d8:c4:78:ae:8f:3a:68:91:b6:ec:ed:c5:ae:
27:5d:3a:70:88:a3:fd:d9:9e:35:f6:41:c8:a9:2c:
aa:cd:46:57:40:64:94:15:ed:dd:61:a2:3d:78:12:
b8:2d:c4:d9:ac:4f:1c:14:34:95:a9:2e:64:86:7d:
65:4a:3a:e4:5a:7c:ff:5f:91:45:88:2a:94:2a:f9:
cc:6f:8d:c3:7b:22:95:51:85:ed:b5:33:68:9f:99:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:6D:CB:AC:D5:9B:24:89:74:E3:84:78:F7:89:E3:A9:A8:FF:02
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d4:f7:7a:74:e8:d3:0d:30:3a:6b:9a:ab:b4:4d:f7:36:bd:
dc:7f:fd:72:30:6c:35:06:6a:54:a3:f0:7c:15:2c:7e:78:4f:
02:4f:d9:7a:ba:fb:c0:ab:e5:c3:05:91:99:5a:67:8f:6c:72:
8c:24:b7:8b:dc:7b:3c:ac:b2:10:d1:d1:8e:0c:3d:1f:22:cf:
80:7f:c8:b7:3b:d8:40:f5:7e:b6:52:71:3c:be:0a:04:7e:bf:
d1:53:37:03:74:ac:ea:c3:78:dd:6c:49:aa:55:ab:6c:46:06:
2f:6b:c9:a9:e2:3d:b4:11:b3:9e:96:ee:d1:18:1b:76:9b:c2:
42:a5:32:14:e1:06:36:1b:6b:dd:20:86:82:99:70:4d:57:46:
64:3c:2b:51:35:d4:80:c1:59:79:78:a6:04:45:b6:5d:59:ca:
00:4e:94:1d:71:54:87:fb:cf:ab:7e:55:f2:2f:f1:25:3a:65:
52:16:93:73:4c:ce:eb:12:85:25:42:28:89:6c:c6:f9:b6:2c:
ec:65:66:d0:29:8b:90:03:9c:22:de:ae:85:3d:c7:0d:4e:e9:
8c:3a:84:fc:4b:4b:c1:c4:59:52:7e:a1:0d:4d:13:09:a5:d5:
06:95:7b:1c:a4:52:6e:89:34:45:83:ac:51:09:a1:a0:6a:b6:
98:4f:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:52 2026 by rpki-client