
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier: RDxsMgcrC4QfDoUa1KAFhwBpqhU2P4HvNrI3YOUIt/k=
Subject key identifier: 60:29:52:D2:29:47:15:A5:65:3E:89:FB:EA:36:D1:7D:5A:EC:80:2B
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 3CFE336B0902E7AB7DB7A335CB5F5733AF9B5149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number: 02FB
Signing time: Sat 13 Jun 2026 01:47:56 +0000
Manifest this update: Sat 13 Jun 2026 01:42:56 +0000
Manifest next update: Sun 14 Jun 2026 04:29:56 +0000
Files and hashes: 1: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: Z+WIv07j1sBVImJqjc9zRKxTh7Kgz0Src+x8TbAlpmA=)
2: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc=)
3: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: DOvKVeAcOxkNybkMS9ylFdnOy9WAJnB82IVDJTGNOcA=)
4: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=)
5: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: e5s2Yb7TVZML9070ZZ1W7yMbNeK9i8gaNwxWx8a/KY8=)
6: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
7: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: CvE/2nozaB8au2uvpxJMY+EdD8m6tEw4CMkYGuLnkDo=)
8: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: iRELkqpaBbCAlaM6y+J6q4kh+pIWEdfXLorHhotW+GY=)
9: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 3eq5nqcWXArfTLTt49eQVbJE/TvYqCpeKpdG09P51uw=)
10: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: BDHilFVFazV1NVQVasFrYxHm84RYPEPgutds1qndvSo=)
11: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: QJBMGqM6yaqk5niJkAuqPHI8VvVSx/j3kqEzba0aJEs=)
12: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
13: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: RRKi1JjdgrwKCFAb2NwHADxT8i70yn0i5n0X0HMmC+E=)
14: 3138352e35382e3135372e302f32342d3234203d3e20323038303633.roa (hash: U8pAF8O/Eli71dyqa/IEGmD/EnmCJf29XWZJsJoO2Kw=)
15: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=)
16: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
17: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: bVWg5FT0q2sCo7QMK6bLu4l3oPAGVseUqslWoQKo1ZE=)
18: 33312e3138352e3130352e302f32342d3234203d3e20323130363939.roa (hash: 5S0IvbVNk6KE/CUqhOCj7rmzwdduYx2Ci6hKBhe3Hsg=)
19: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
20: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: 26dymixRUGGYjsbH8YaqhXyRXEQ3TQKBfTk9MxYv13g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fe:33:6b:09:02:e7:ab:7d:b7:a3:35:cb:5f:57:33:af:9b:51:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jun 13 01:42:56 2026 GMT
Not After : Jun 14 04:29:56 2026 GMT
Subject: CN=602952D2294715A5653E89FBEA36D17D5AEC802B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:5f:51:05:72:bc:15:e6:0e:b2:b6:89:43:
9f:94:b5:5e:e5:e3:ee:9c:d1:9b:95:4c:14:93:7f:
f0:be:21:a2:24:b5:87:c3:a3:29:29:67:b2:70:dd:
bc:bf:31:56:3d:f4:82:70:4f:d7:6a:2a:5a:c8:a2:
09:22:b7:34:40:fa:69:2d:bd:76:ab:2e:74:66:27:
59:39:86:31:c0:6a:c6:79:fe:89:c8:96:85:4f:c0:
12:b7:b9:18:33:27:22:a4:b3:82:bf:92:db:b4:e9:
69:15:65:f9:fe:43:ca:c7:35:e9:f2:e2:26:cf:35:
cd:cb:1f:dc:54:3b:94:80:da:0b:bd:e0:b1:30:bc:
8a:09:57:08:a6:74:a3:42:a2:08:9c:92:35:4f:a2:
eb:ec:46:e8:26:ed:d9:7d:c0:cd:49:a4:11:e8:6a:
3b:9e:f6:a7:41:3c:05:0e:66:b7:32:26:05:ed:24:
d1:a8:ed:89:7d:e0:82:ae:b9:3b:c5:6b:ed:00:fb:
63:9a:75:ff:42:5a:ff:f2:7f:84:5f:9d:5d:bb:d4:
24:1c:b0:09:95:d5:8d:42:38:82:60:f6:e8:07:ea:
17:01:a7:55:33:21:d1:4b:f5:c2:2a:c9:bc:a6:68:
07:de:c9:61:96:df:e4:6e:b0:dd:6f:4b:27:4e:bd:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:52:D2:29:47:15:A5:65:3E:89:FB:EA:36:D1:7D:5A:EC:80:2B
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:7f:9a:52:2a:e2:b6:96:7e:f1:50:0d:02:01:eb:c3:19:
12:47:12:d9:06:85:34:9c:25:db:9c:e9:f8:97:29:45:dc:25:
ee:63:b6:14:9c:5f:18:1a:21:6c:99:0a:5a:7b:3a:fc:89:7a:
da:6a:dd:aa:7f:1a:4f:3f:97:a9:ab:a3:68:6c:30:bb:bf:c8:
ff:d4:91:42:d9:97:79:b4:47:ba:aa:c1:55:36:d1:3b:9f:26:
fd:2c:fa:7b:2f:c1:58:f4:a7:5e:17:83:e0:d4:28:66:1a:06:
5f:64:3e:b2:45:92:fe:ae:b3:46:23:31:e5:62:19:eb:bf:3f:
de:1c:e1:c4:16:7c:9a:84:d7:b0:fa:58:d7:02:b2:11:c3:ad:
db:37:fa:64:b0:cd:40:0c:b7:c2:a6:7c:15:f8:cc:0d:16:54:
a9:3c:b0:6c:7c:e8:09:b8:36:97:d1:f5:9f:05:b2:d5:ea:5d:
46:b7:dc:f0:59:92:a1:c9:c2:6b:96:a6:84:c4:fa:42:63:eb:
6e:e4:3b:ea:68:06:b9:60:84:b9:9d:0b:f4:1d:55:7a:67:1e:
2d:e9:7c:01:83:ae:29:98:51:3a:fe:ac:98:fa:20:bc:63:ee:
ef:ec:65:47:a6:ad:a4:b4:1c:1c:07:25:13:50:e2:de:f0:23:
e2:c8:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:02 2026 by rpki-client