Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: kmB7C1yWlvVWOw6a5JyvevYTv6El2xFkDfXhJd/dXiw=
Subject key identifier: 0B:2F:D3:33:38:F8:5D:92:B5:25:4B:06:57:76:10:F7:44:91:6D:15
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 5495B7DF558838CCE12BFA17BDCB7E406DACB25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 016D
Signing time: Sat 18 Apr 2026 20:46:26 +0000
Manifest this update: Sat 18 Apr 2026 20:41:26 +0000
Manifest next update: Sun 19 Apr 2026 22:25:26 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: qU5V3XwiM1pdZakqvIDBSqoo9gfLkTVtpvxsTbhe7yU=)
2: AS211575.asa (hash: b2a+JVyWCd5qoGnPVacfX4VuPu62tpE1vIU8foMIMrI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:95:b7:df:55:88:38:cc:e1:2b:fa:17:bd:cb:7e:40:6d:ac:b2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Apr 18 20:41:26 2026 GMT
Not After : Apr 19 22:25:26 2026 GMT
Subject: CN=0B2FD33338F85D92B5254B06577610F744916D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:19:db:aa:99:b7:d3:9c:90:d6:fc:4a:8b:
d9:fd:a4:78:87:cf:39:13:b7:51:68:57:6a:14:af:
b4:2f:35:91:6f:b1:a7:e3:7c:db:e8:72:d1:9f:d1:
5b:e1:c8:79:30:21:c4:c2:03:86:56:55:77:20:e9:
38:2a:0c:76:64:17:04:e4:9f:48:21:11:36:f8:a8:
1b:96:8b:9c:18:ec:13:f2:a7:fb:be:0b:b1:25:43:
11:4f:7b:b5:fd:e3:58:93:f5:08:fe:68:2f:7d:8d:
ce:fb:d9:9d:3a:29:2a:ab:58:70:dc:a1:5a:c5:37:
e4:36:2e:fa:93:44:18:4f:9e:43:79:30:9b:49:bb:
6f:75:5f:9b:15:94:3e:c5:ce:c9:5c:cf:f6:22:4a:
b9:8d:3b:45:a6:52:75:1b:c8:72:78:8e:b1:29:1a:
f1:91:ff:1f:eb:22:51:f8:b7:3b:50:6f:12:37:16:
c9:b3:ec:36:3a:18:0e:9a:7e:91:e6:9c:50:bd:7b:
49:b7:63:65:d1:a1:48:fd:34:46:a6:c8:a0:eb:9a:
df:7b:f2:ad:4b:73:88:e7:10:d1:91:2e:e5:db:eb:
4b:e4:c8:bc:b4:51:eb:65:2b:92:7e:64:d8:e0:75:
9f:5b:63:4e:b7:a5:5e:79:d4:49:8b:09:1c:ec:c8:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:D3:33:38:F8:5D:92:B5:25:4B:06:57:76:10:F7:44:91:6D:15
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:0c:07:84:8d:10:d0:b2:65:2c:69:94:53:e9:aa:5d:58:
24:00:62:12:97:0d:d5:69:6c:63:52:8c:20:39:e2:3e:4d:ab:
33:a6:9b:dd:08:44:99:ca:14:17:bb:fa:69:52:e1:1f:6c:69:
68:e2:76:be:db:89:a7:be:b8:07:c9:5d:b5:b9:97:05:1f:db:
ca:be:d6:87:6f:bd:4b:9d:46:a7:84:2c:0a:0a:a2:95:fa:d4:
3c:e6:61:cb:4c:2b:8e:eb:b1:17:af:f9:ce:62:df:ca:68:4c:
57:54:67:47:38:67:68:74:15:04:55:57:fd:6a:70:e8:ec:ca:
97:e4:d4:ad:fc:26:70:ea:8b:9d:b5:d6:a0:63:0c:68:f4:97:
ad:47:e4:3d:b1:d8:bd:8b:e0:b2:41:5a:69:3a:c3:26:b5:f3:
6f:bb:df:7e:a5:f7:8b:d9:27:b2:a5:ec:1a:77:3e:e8:1b:d1:
36:af:3e:08:2b:aa:3f:42:84:df:f3:b7:13:83:c0:03:ee:62:
50:b3:ca:27:07:32:7c:f4:bc:34:25:a0:1b:b1:77:25:6b:a9:
8b:85:c5:b3:ea:d7:ff:44:06:c8:c9:aa:07:8f:03:1e:ea:c4:
64:e0:19:fd:2c:66:52:83:c6:16:85:50:da:10:8e:82:de:4f:
7b:ae:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:26 2026 by rpki-client