Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: tx4Lt5QQEfPmIzKBXheFVz9LjJApXr7wtRdauMNfP+Y=
Subject key identifier: 13:C6:F8:EF:DD:38:E5:E5:97:AB:91:3D:AA:34:80:D1:2D:AD:35:23
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 675A878E09F70FF11280D31B025A51E94DF6AB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 0240
Signing time: Mon 21 Sep 2026 17:38:57 +0000
Manifest this update: Mon 21 Sep 2026 17:33:57 +0000
Manifest next update: Tue 22 Sep 2026 21:09:57 +0000
Files and hashes: 1: AS211575.asa (hash: PEZMTsY76v1BI64BGAr+a6nHvjlH7aGwrvtJ4PkVK2s=)
2: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: TnJvryAhPd0+KZIyRagdpmV/Yon3CJVYe8CYtMAUILw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5a:87:8e:09:f7:0f:f1:12:80:d3:1b:02:5a:51:e9:4d:f6:ab:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Sep 21 17:33:57 2026 GMT
Not After : Sep 22 21:09:57 2026 GMT
Subject: CN=13C6F8EFDD38E5E597AB913DAA3480D12DAD3523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:a7:a3:f2:f1:55:db:3a:6b:d2:6f:96:bb:
f4:c9:48:8b:00:4e:7d:4a:23:a0:54:2d:12:3f:27:
64:e2:11:f1:22:b4:71:5d:fa:c2:dc:78:0e:e3:e3:
b7:b6:ed:ca:88:d5:d1:6c:7d:4d:d9:61:81:97:dd:
70:5a:f2:34:2a:09:b9:f5:c7:45:f9:c2:09:a2:b7:
8a:f2:17:d1:df:86:ec:9f:85:68:14:53:3b:3d:94:
b0:c8:cb:b4:b9:f7:0b:80:29:b1:3e:0c:4f:d7:b1:
ff:9d:19:70:a3:7b:16:4a:1c:89:46:83:4f:7f:05:
e4:d4:0b:40:c1:eb:b8:ee:a2:a3:21:be:c8:27:c6:
e4:7b:9e:64:b6:95:77:3a:0e:0b:a6:7d:8a:29:5b:
b9:ca:22:21:a4:25:33:26:9c:a8:b3:86:d4:b6:4a:
73:2f:d3:9e:96:49:4d:6b:31:65:ff:c4:10:8b:15:
e4:b7:b4:26:1c:a3:c1:bd:f2:f2:e8:14:9e:b4:ed:
20:1a:84:53:53:b1:6a:80:41:e0:a0:59:92:56:10:
56:2e:81:a7:91:0f:80:62:30:97:9f:e5:6b:d6:f2:
53:f9:10:c7:69:87:de:6a:77:f6:1d:51:22:55:36:
45:60:a9:97:48:12:c7:74:2b:50:0f:ef:d5:08:ba:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C6:F8:EF:DD:38:E5:E5:97:AB:91:3D:AA:34:80:D1:2D:AD:35:23
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:34:4e:10:7d:f3:2f:a1:bb:fe:ad:5b:2b:24:3a:1c:f8:72:
15:14:44:12:e1:05:9f:8f:71:f2:0c:eb:a5:35:a2:e7:31:bd:
7d:27:3c:95:26:b2:06:53:56:5a:43:3f:bc:a9:bb:3b:40:42:
e5:87:cf:4e:ca:92:b8:0e:2a:1f:62:4b:14:45:39:03:ac:a7:
94:96:b5:11:a8:d7:ff:4a:8a:68:8c:44:8b:6f:98:46:d8:be:
2d:84:bc:3a:04:2a:9d:e6:fe:97:c5:33:99:19:ef:ad:19:26:
f4:91:cb:84:3a:f5:91:e3:8a:16:f0:6e:98:af:fc:2a:b7:be:
f0:c0:06:fa:df:dc:40:66:5c:01:7d:50:7d:9b:d6:52:ad:af:
58:cf:3a:7b:a2:85:66:60:90:25:6c:33:6a:bc:82:95:8b:78:
25:8f:84:3b:d6:95:97:20:44:e7:ea:67:c1:4b:e9:b4:e8:f9:
bf:44:8a:36:6e:cf:24:7a:13:9c:72:5c:67:76:a7:c9:b0:fa:
d8:eb:22:6a:bd:ee:79:33:d9:4b:8d:3d:ec:45:24:c0:fc:3f:
77:0c:09:6a:39:eb:c5:dc:d9:f9:4d:b6:05:e6:a2:3b:84:a0:
34:fb:2e:e6:34:75:3a:3a:1c:0f:e4:e4:0f:e0:12:dd:ae:be:
e2:2a:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:04 2026 by rpki-client