Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: WItfKXF/+dlVF/C1GKfEYF4wFx/sU/O0cArVFMVZvfk=
Subject key identifier: 92:EE:EA:AF:55:6A:7C:FB:F4:56:E4:B2:F9:D7:D2:A2:8F:2F:6E:55
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 280482BA04B31EADCB39F6DD86ECF6590F6F00B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 012C
Signing time: Sun 01 Mar 2026 05:01:45 +0000
Manifest this update: Sun 01 Mar 2026 04:56:45 +0000
Manifest next update: Mon 02 Mar 2026 08:26:45 +0000
Files and hashes: 1: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: Bd+RrXDshjqqHJDYTCeQ9C67BoBoYQRAzCy8vp46DHY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:04:82:ba:04:b3:1e:ad:cb:39:f6:dd:86:ec:f6:59:0f:6f:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Mar 1 04:56:45 2026 GMT
Not After : Mar 2 08:26:45 2026 GMT
Subject: CN=92EEEAAF556A7CFBF456E4B2F9D7D2A28F2F6E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:4d:a0:d3:0c:0f:36:69:e9:7f:13:ea:32:
bc:cf:65:e7:ef:70:f5:aa:2c:8d:8b:3f:78:06:29:
1d:fe:61:85:78:09:5a:8e:58:47:d1:38:d1:ab:46:
86:b4:66:50:91:f9:62:de:d4:99:69:9c:9f:98:b0:
de:d7:c9:3d:8a:77:d6:bf:bb:53:26:68:5b:91:16:
23:cd:77:12:6e:4f:58:67:27:99:a0:c8:5c:bb:53:
ea:c4:81:62:76:0d:7f:84:f0:28:54:5c:be:7c:15:
c0:ee:27:94:67:1f:89:61:2e:39:90:38:ff:49:0d:
be:d9:6a:7d:ab:15:05:08:54:48:fb:a7:51:fc:54:
c9:15:cc:f7:e0:9f:91:3b:e7:20:f3:d3:f6:51:0e:
76:7a:64:fc:eb:40:b0:a0:0d:f5:29:7d:0b:e2:92:
f6:59:49:5b:59:b1:bd:f7:cc:a9:76:6e:e4:57:54:
69:8b:7e:31:cd:c1:04:a3:8f:ba:5e:bc:4c:51:8c:
91:16:a5:f0:3f:dd:f8:5c:35:d3:da:17:4c:61:c5:
30:6f:03:2c:1b:64:c3:f6:c9:f8:17:9a:33:bb:f9:
f1:22:f1:f6:de:bf:60:28:dd:27:58:4a:03:64:4a:
7f:50:11:f5:2f:a6:c1:cc:66:0c:af:ea:6a:32:57:
8a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:EA:AF:55:6A:7C:FB:F4:56:E4:B2:F9:D7:D2:A2:8F:2F:6E:55
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fb:4d:d3:5e:82:b1:b7:be:0c:3c:bc:d2:17:f7:10:4d:92:
7e:16:04:19:6b:b5:37:33:df:c6:e7:fc:1f:e8:91:52:96:91:
45:34:0d:f1:8b:13:d1:7d:f6:65:ff:85:1a:1b:d0:62:26:f4:
71:a9:b8:e9:85:44:f3:cd:f9:d1:a8:cd:5c:4e:74:28:89:3f:
81:dc:a1:c8:01:b4:c1:de:f5:3b:c7:73:58:9e:91:3f:13:12:
e0:8d:2c:3b:e5:59:f6:c9:91:78:51:e6:2a:e7:51:52:ca:2f:
f8:63:7e:33:3c:08:dc:da:13:2a:6a:e1:aa:1d:96:ea:2a:d7:
32:4f:e9:db:14:3a:a0:60:92:ea:83:39:b5:8f:f8:c1:49:28:
71:eb:fd:a7:3e:33:02:31:de:6a:d5:6b:4b:f5:4e:05:56:a1:
86:c0:ed:76:e3:a4:33:b0:b8:62:6b:ce:10:c0:e1:1e:21:21:
f0:27:f1:17:4e:42:2b:2e:3c:73:02:b5:10:be:6a:ed:76:5c:
0c:41:58:1a:54:b5:5a:2c:2f:1a:ea:2c:05:f0:4f:d8:f7:1b:
a2:42:90:7e:f9:dd:84:97:d0:45:49:e8:a4:0b:d3:9c:29:16:
a2:87:b3:f5:25:34:c8:f7:1e:43:be:39:8e:0e:35:40:5c:a0:
da:9a:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:59 2026 by rpki-client