Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: PJVJ4TeZMvrDEEjhW1ypvN4aHzJNlEro1zLRnpKdcEA=
Subject key identifier: 24:05:C1:E8:65:73:D2:01:62:9E:78:60:A8:F3:C0:05:58:84:AF:D4
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 01D2B54E54DA9A541B2AF0E99D13C269698A2208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0161
Signing time: Sun 19 Apr 2026 01:19:54 +0000
Manifest this update: Sun 19 Apr 2026 01:14:54 +0000
Manifest next update: Mon 20 Apr 2026 02:57:54 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: I42IRQmaD/kXGG9hVMbNlV0uP6MSBrC/BTiUSwVqtS8=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d2:b5:4e:54:da:9a:54:1b:2a:f0:e9:9d:13:c2:69:69:8a:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Apr 19 01:14:54 2026 GMT
Not After : Apr 20 02:57:54 2026 GMT
Subject: CN=2405C1E86573D201629E7860A8F3C0055884AFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:b3:dd:bc:99:bb:87:1d:da:d5:39:9a:61:
5f:35:be:0a:e5:fe:e1:39:09:ca:2d:cc:69:8c:3d:
d5:4b:2c:a2:47:be:db:af:2d:d6:8b:85:6b:5b:6c:
95:51:b7:a6:7e:e8:76:da:b2:d3:e8:69:c8:86:64:
99:86:22:e9:d1:d2:5f:ce:96:80:00:13:a0:d1:a5:
7c:00:4e:47:ba:d9:4b:5a:75:28:80:f2:ed:88:78:
6c:df:1f:38:fc:38:92:d2:00:8b:6e:ae:cb:12:d6:
2b:7c:6b:13:a7:29:34:da:02:29:98:c1:27:b6:03:
82:52:5d:dd:1b:3e:aa:b0:39:2f:93:a5:6a:6e:f9:
4f:f8:c1:01:3e:0a:33:54:21:35:b7:68:c1:f2:36:
52:ab:f8:7d:67:a3:a5:47:45:aa:26:6b:93:bb:7d:
a2:82:21:31:9c:a2:02:7b:6e:6b:86:55:f8:9b:fd:
9c:96:e2:9b:22:43:c0:72:f2:06:88:5f:64:0b:34:
fb:80:f9:2a:d5:49:d4:60:69:c2:06:cc:6d:0c:32:
be:53:f1:ad:6f:ab:9f:cd:81:77:86:84:fd:e9:01:
c6:61:ad:4a:8f:24:3b:c8:22:5e:c1:ed:2e:a1:02:
cd:92:07:42:3d:ba:c2:e6:75:28:ab:87:4c:fc:5f:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:05:C1:E8:65:73:D2:01:62:9E:78:60:A8:F3:C0:05:58:84:AF:D4
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:aa:e2:83:33:ea:4e:9f:2c:c7:41:f4:0b:b3:33:d7:4f:
09:d8:dc:5f:36:70:a8:9b:40:91:89:fe:c0:47:57:19:64:5f:
03:df:ac:3a:e8:3f:4f:fe:f3:6e:b9:d0:ad:cd:a9:5c:3c:3a:
94:5f:1a:19:df:c9:09:d9:35:9d:d9:52:9e:86:c6:57:4b:df:
d4:83:a9:ad:ef:c0:16:9e:eb:63:4d:85:ef:be:4c:85:f2:02:
d8:d2:72:ff:de:0f:01:59:4d:3e:45:31:48:94:69:88:61:10:
3b:c4:00:7a:de:6e:9a:4f:2b:20:65:6f:aa:af:7e:9f:27:cb:
7d:b1:fe:5a:d4:47:a0:2a:2c:ab:f5:dd:d4:dc:c2:9e:03:bf:
c1:62:49:da:58:eb:e7:85:6b:18:5d:14:16:e4:cb:db:35:e7:
c7:73:5f:89:b6:8d:71:17:0e:c0:a5:39:c3:56:fe:6e:1e:43:
49:af:af:94:71:94:37:6f:b5:4b:1d:ce:ff:e1:0e:fb:6b:83:
c7:25:38:e8:7c:24:e2:95:03:68:ee:0a:b6:17:b9:72:25:b8:
e7:c0:3b:ed:6f:44:26:e2:3d:d7:86:24:aa:97:87:5d:b7:9b:
ae:57:ff:83:bd:d2:70:d9:5f:2f:9d:5e:81:cd:6f:74:88:bf:
26:23:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:20:04 2026 by rpki-client