Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
File: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft (raw, json)
Hash identifier: BsYUu4WVLyOoMbLq/IWZ+AY+n8ajfmnqGvaogPmILHY=
Subject key identifier: 77:F8:1B:A7:B9:E6:CE:D4:CF:74:10:BD:21:CC:02:B0:20:0D:3B:B0
Authority key identifier: 38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
Certificate issuer: /CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Certificate serial: 30AFC8B7838B74C0C110A2D905BF3128EDC5531C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
Manifest number: 028C
Signing time: Sun 15 Nov 2026 08:04:04 +0000
Manifest this update: Sun 15 Nov 2026 07:59:04 +0000
Manifest next update: Mon 16 Nov 2026 08:41:04 +0000
Files and hashes: 1: 38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl (hash: /QRVsqlBMSUx2L5Le4NvL6EkWzx1W3i7tr/xfjCgXZY=)
2: AS211575.asa (hash: olCOx8lsT0NYF1N0mkzUKgvhHY/2E8SYYVu2j//9ueg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:af:c8:b7:83:8b:74:c0:c1:10:a2:d9:05:bf:31:28:ed:c5:53:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e895938f3bcecd48d9ab7896ca4409f6f6c59e
Validity
Not Before: Nov 15 07:59:04 2026 GMT
Not After : Nov 16 08:41:04 2026 GMT
Subject: CN=77F81BA7B9E6CED4CF7410BD21CC02B0200D3BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:3e:cb:9b:f3:c5:74:0a:85:ea:ea:da:fb:
fb:66:62:a3:9a:99:ec:0f:7c:64:55:cd:02:80:a3:
a5:52:f1:08:2e:64:9f:54:69:a3:d4:2b:88:11:2e:
56:d9:96:97:fa:6b:09:94:92:79:f6:59:21:4e:95:
5c:4f:3e:20:36:68:4d:80:94:64:5c:c6:1c:d8:1f:
4c:7a:81:13:c3:d7:f5:37:b3:a3:a5:bc:f4:aa:e2:
c8:37:77:95:94:00:31:32:b3:a7:8b:42:5d:c5:4d:
cf:88:a8:73:1d:20:0e:cf:97:a4:38:ce:f3:89:c2:
a6:8d:23:f9:fd:3b:43:69:bb:2b:27:a7:ca:64:da:
9d:94:e5:f5:ec:5c:25:d4:58:ed:c8:e2:d8:c6:1c:
69:c3:90:3f:de:5e:c1:fa:11:d8:f1:c1:1a:8f:24:
f2:b9:e2:4b:3a:b0:34:9d:ad:8b:b9:ad:b4:33:a3:
42:69:e3:54:a3:78:75:47:31:37:e3:83:7d:14:ed:
75:c2:d9:42:c2:c5:35:2d:14:f0:ef:25:ce:8f:34:
35:dd:69:54:9b:fe:af:f9:2b:05:d7:dc:ca:da:06:
f0:78:bb:61:32:ea:ab:13:77:40:92:7e:f5:0d:f7:
43:5b:73:f3:ff:19:69:64:a1:bc:60:f3:7e:67:c4:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:1B:A7:B9:E6:CE:D4:CF:74:10:BD:21:CC:02:B0:20:0D:3B:B0
X509v3 Authority Key Identifier:
keyid:38:E8:95:93:8F:3B:CE:CD:48:D9:AB:78:96:CA:44:09:F6:F6:C5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOiVk487zs1I2at4lspECfb2xZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/0/38E895938F3BCECD48D9AB7896CA4409F6F6C59E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fb:68:bd:69:b1:ec:4c:f9:d8:49:c2:1c:9e:00:77:c6:a8:
a9:49:17:f4:d3:bc:8f:3e:0c:3a:5f:33:eb:e2:e0:ae:7f:7b:
21:46:fd:b5:03:59:64:f9:d6:ba:dd:66:16:b4:30:1f:67:bf:
b7:af:3e:27:4b:b1:29:e8:bb:f3:09:a0:a8:bc:53:24:67:a8:
b3:1e:cb:60:07:bd:c4:0b:9f:d2:ae:3f:57:f6:6b:55:9e:12:
ba:72:c5:cb:99:fd:c7:7e:a7:c6:e6:c9:9b:6e:8d:60:1b:df:
6a:d5:a2:10:92:87:d2:01:3a:69:47:37:4a:03:76:e2:42:f7:
3c:8c:09:61:f6:28:fb:24:37:ef:bc:00:52:52:d9:0f:71:b0:
f1:f1:79:85:b8:70:45:b8:e0:7d:de:74:d9:f7:33:86:36:85:
da:81:cb:f5:ff:ee:8d:1b:9f:f6:5e:9b:06:60:82:b2:fa:5a:
c6:34:c9:b5:9a:0d:27:57:64:61:f1:d1:47:08:c4:6b:1b:47:
f4:8c:b6:17:e4:e4:f6:ee:c6:1b:86:56:3c:37:a7:08:5f:45:
53:c5:f9:21:2e:13:10:47:3b:98:9e:ec:fc:3c:6e:86:8c:9d:
46:cd:ea:6a:80:c2:33:4d:c6:ec:ac:84:d7:ea:e5:76:de:ba:
b7:35:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:44:47 2026 by rpki-client