Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: IrZMVR01Y6O9/tdiVx3wO5fmKzQytzbrCCeC7UUTZDE=
Subject key identifier: 20:C4:47:C8:B0:7E:74:20:4E:B9:F3:82:42:A0:9E:6B:19:EF:CE:1E
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 35097DC67E51D6B75622B09F84BCF059D1A4C81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 01F3
Signing time: Mon 27 Jul 2026 23:58:52 +0000
Manifest this update: Mon 27 Jul 2026 23:53:52 +0000
Manifest next update: Wed 29 Jul 2026 01:21:52 +0000
Files and hashes: 1: AS211575.asa (hash: 3jQ9FknJaDWbQ17PwY7n5aItgcBqYzxUnCnDy4fGyBA=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: wojih5MDROeBaU0byACyfekmj3FiQJiw7a8Mko/+H9w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 01:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:09:7d:c6:7e:51:d6:b7:56:22:b0:9f:84:bc:f0:59:d1:a4:c8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Jul 27 23:53:52 2026 GMT
Not After : Jul 29 01:21:52 2026 GMT
Subject: CN=20C447C8B07E74204EB9F38242A09E6B19EFCE1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:46:87:c0:17:58:7e:e1:49:e4:d0:89:8f:
65:7c:d8:e0:05:cf:ea:a7:82:21:96:d5:4b:3c:4c:
cf:6e:97:33:76:54:dc:a3:3a:b1:1a:1b:5d:8f:df:
9b:20:bb:00:ce:78:77:24:f2:0a:a3:f8:cd:4d:a2:
5b:ff:26:90:38:42:ec:1d:55:11:86:d0:c9:21:3a:
37:77:86:75:38:b0:7d:d8:f9:64:69:25:7b:91:c2:
38:e3:89:34:e3:c8:8f:2a:97:ac:5d:ed:d0:ce:96:
02:01:a7:02:59:56:95:67:60:45:6e:1a:06:9e:ba:
71:d7:31:a2:f8:a6:44:0c:8a:80:ee:d8:93:7e:5d:
9d:fb:99:c3:d3:28:ec:90:a6:5b:7b:a2:6f:b4:92:
65:d3:7b:c4:32:12:2e:81:6e:3c:9f:24:20:a7:f1:
e6:f2:09:85:35:e7:41:47:88:c0:39:a0:98:49:bd:
64:5c:7e:09:8a:eb:c4:6e:88:36:82:a7:2b:a1:d0:
eb:a5:b5:bb:ee:e9:ec:e0:bb:55:f1:f4:3e:50:96:
51:60:69:1a:3c:a8:27:c0:7d:e6:c2:20:54:ed:ab:
f1:27:d1:75:5a:21:53:03:ab:83:94:c1:f3:20:59:
17:e8:4d:92:dc:08:6e:94:f8:83:d9:71:c3:9d:22:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C4:47:C8:B0:7E:74:20:4E:B9:F3:82:42:A0:9E:6B:19:EF:CE:1E
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:df:e9:49:28:bf:c4:30:77:18:2c:d2:0f:e0:35:dd:5c:34:
3d:8c:51:99:85:69:4d:1e:1d:0d:5e:c1:78:fa:cf:fa:eb:96:
84:6b:eb:da:97:43:9c:bd:b9:af:9d:f7:df:f9:8e:ee:87:8c:
b7:3e:12:cd:f0:57:94:49:4c:a3:f0:09:ba:81:50:e2:7d:da:
8a:6f:16:8c:c0:12:08:76:14:1f:bf:87:6f:0b:32:90:4b:57:
82:d7:3d:d5:e0:b0:56:cd:5a:1b:cf:1c:70:f7:86:6e:8d:22:
02:35:c5:34:9b:5f:f9:e0:43:96:b8:d1:8b:c3:fd:d1:45:50:
7d:4f:c1:33:bf:3e:67:a2:a4:10:2e:7a:8d:d5:24:f2:b1:ae:
b6:6b:26:20:45:8b:00:0a:8a:57:1a:54:38:ba:a4:15:d1:fd:
f8:b3:89:62:9e:6c:a9:8d:b1:43:1b:11:db:69:52:e8:58:10:
11:a3:d5:88:1b:24:cc:1f:e4:79:cd:61:41:2d:28:76:a8:9e:
33:92:83:f5:c2:11:d6:27:9b:af:ca:b8:ce:74:11:c4:6c:76:
a6:83:f2:f7:ba:ee:f0:fe:70:89:bf:19:c5:f6:2b:dd:f0:06:
a3:7b:53:08:93:37:24:0b:19:aa:2d:12:70:1e:c8:22:d8:aa:
5b:02:5b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:45 2026 by rpki-client