Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: fw57rByBSc1wmeRqbLSq2Hc75ax44qmnGcEIVool8eo=
Subject key identifier: 69:58:85:FA:02:33:16:4C:68:28:4D:65:5B:8C:69:FF:46:2A:9B:7A
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 0D5FCD698859056A784796F2FCA06DDD0CC4E2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0234
Signing time: Fri 25 Sep 2026 06:01:25 +0000
Manifest this update: Fri 25 Sep 2026 05:56:25 +0000
Manifest next update: Sat 26 Sep 2026 09:11:25 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: y8A5jy1bG4pVnm9NEynjcfhDnCEt8Tm1EgElgQHh0YQ=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: ZxxwePdbiW78fNSOv1bBP11xPv9WTPgkb7eypMWI7iQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5f:cd:69:88:59:05:6a:78:47:96:f2:fc:a0:6d:dd:0c:c4:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Sep 25 05:56:25 2026 GMT
Not After : Sep 26 09:11:25 2026 GMT
Subject: CN=695885FA0233164C68284D655B8C69FF462A9B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:b1:cf:19:94:d4:d3:d2:33:91:69:d9:17:
d6:75:d8:f9:6f:a3:b4:81:b8:de:00:d0:c6:8d:f0:
9e:d1:e1:6d:37:f9:0b:ef:d3:79:e0:77:fd:d0:ea:
07:75:60:ed:9c:aa:30:0f:6e:b1:bf:f4:fc:0a:d9:
66:07:98:7c:29:e6:b1:11:cb:d9:64:8b:b3:8f:ef:
de:1d:ad:63:1d:dd:90:75:b3:be:7f:ff:5f:c0:47:
32:c7:d9:ba:dd:85:ea:86:ef:6b:22:ba:ef:49:07:
9a:e3:4f:6a:98:27:0e:4f:44:9f:ed:86:4b:1d:28:
d2:db:3c:6c:2a:3c:ec:71:67:77:ed:1c:28:90:22:
07:37:d6:dc:8d:8d:2d:79:12:c7:de:2b:7a:f0:ca:
af:7e:66:13:d2:8f:3f:5a:fa:07:8c:b2:aa:a6:a6:
71:0d:5f:91:a8:5a:0c:db:11:fa:71:41:a8:ff:22:
61:ef:ef:5f:b8:e6:60:d7:16:4d:1a:3a:8c:ad:66:
a3:c2:cf:77:d5:e9:a7:d2:cb:b1:df:d9:20:4d:37:
ea:8b:b4:31:cb:6f:31:1f:ab:0e:74:43:bd:71:8a:
6b:ac:54:3d:89:9f:8b:7d:a6:14:b5:a1:2f:df:a7:
54:58:c7:51:b2:ca:c7:f9:a6:55:84:10:51:be:a1:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:85:FA:02:33:16:4C:68:28:4D:65:5B:8C:69:FF:46:2A:9B:7A
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9d:ef:7b:be:ff:4a:5b:8b:37:4e:09:ed:29:1c:25:f1:94:
3e:19:83:98:16:aa:61:b1:89:9d:58:19:98:61:d9:ac:06:6c:
ab:e5:fe:a2:13:95:a7:6b:3e:48:43:bd:3b:0b:f4:de:05:4c:
66:81:88:53:42:9c:b8:b7:f0:53:4e:72:34:d4:3c:9e:c0:a8:
27:38:c8:54:ed:f4:15:e2:20:36:25:d7:2d:f5:e0:7b:8d:d2:
ee:ae:54:21:79:d0:49:a3:28:87:b2:80:be:de:aa:78:53:bc:
25:08:d9:cf:cd:d1:96:70:d6:08:6e:dd:c6:6b:c1:43:de:54:
af:ac:33:09:42:93:96:9b:2d:a5:83:17:b8:17:18:db:f3:1e:
19:88:c9:f2:5c:7f:94:f4:19:3c:98:0e:4b:73:d9:f6:1a:43:
82:df:01:0b:8e:ba:85:92:e7:1f:25:f5:08:4d:54:ea:f4:a2:
b4:5b:95:1c:0b:53:6b:81:39:c1:e5:c0:51:01:9b:73:a5:d5:
6e:03:8c:a5:a7:20:fb:c1:9f:6b:36:c3:59:31:c2:0e:fc:ca:
0e:eb:3f:a9:2b:07:96:82:02:81:b2:33:10:1f:cf:19:41:68:
84:f7:a6:95:7c:33:ed:64:9a:5e:66:b5:42:6c:a1:12:08:11:
38:11:a8:d0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDV/NaYhZBWp4R5by/KBt3QzE4tcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx
YTgxOTYwZjAeFw0yNjA5MjUwNTU2MjVaFw0yNjA5MjYwOTExMjVaMDMxMTAvBgNV
BAMTKDY5NTg4NUZBMDIzMzE2NEM2ODI4NEQ2NTVCOEM2OUZGNDYyQTlCN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvULHPGZTU09IzkWnZF9Z12Plv
o7SBuN4A0MaN8J7R4W03+Qvv03ngd/3Q6gd1YO2cqjAPbrG/9PwK2WYHmHwp5rER
y9lki7OP794drWMd3ZB1s75//1/ARzLH2brdheqG72siuu9JB5rjT2qYJw5PRJ/t
hksdKNLbPGwqPOxxZ3ftHCiQIgc31tyNjS15EsfeK3rwyq9+ZhPSjz9a+geMsqqm
pnENX5GoWgzbEfpxQaj/ImHv71+45mDXFk0aOoytZqPCz3fV6afSy7Hf2SBNN+qL
tDHLbzEfqw50Q71ximusVD2Jn4t9phS1oS/fp1RYx1Gyysf5plWEEFG+oVozAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUaViF+gIzFkxoKE1lW4xp/0Yqm3owHwYDVR0j
BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi
NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx
QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i
MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2
NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp3ve77/SluLN04J7Skc
JfGUPhmDmBaqYbGJnVgZmGHZrAZsq+X+ohOVp2s+SEO9Owv03gVMZoGIU0KcuLfw
U05yNNQ8nsCoJzjIVO30FeIgNiXXLfXge43S7q5UIXnQSaMoh7KAvt6qeFO8JQjZ
z83RlnDWCG7dxmvBQ95Ur6wzCUKTlpstpYMXuBcY2/MeGYjJ8lx/lPQZPJgOS3PZ
9hpDgt8BC466hZLnHyX1CE1U6vSitFuVHAtTa4E5weXAUQGbc6XVbgOMpacg+8Gf
azbDWTHCDvzKDus/qSsHloICgbIzEB/PGUFohPemlXwz7WSaXma1QmyhEggROBGo
0A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:43:48 2026 by rpki-client