Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: rPqA2HZVwz9qdfnhKBCjf6ZU5YoUGl1LyYsbE+h7c2U=
Subject key identifier: E0:E6:08:0F:DE:F1:52:4E:D8:91:EB:74:36:75:80:75:00:15:1C:BC
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 675F8DAE9E60A03806DE30017223AF487F50F54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 01AA
Signing time: Sat 13 Jun 2026 00:57:46 +0000
Manifest this update: Sat 13 Jun 2026 00:52:46 +0000
Manifest next update: Sun 14 Jun 2026 03:49:46 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: FUQkrk4avVEbUwRmtVV6m51b5A5GERYz+WxIH0WANZc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:5f:8d:ae:9e:60:a0:38:06:de:30:01:72:23:af:48:7f:50:f5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Jun 13 00:52:46 2026 GMT
Not After : Jun 14 03:49:46 2026 GMT
Subject: CN=E0E6080FDEF1524ED891EB743675807500151CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:a0:3f:48:df:9c:bf:03:3f:a3:bc:b2:63:
0b:66:cd:e3:45:77:41:a0:42:0b:d3:c6:7d:df:be:
46:20:76:a4:13:95:61:e0:e4:04:2b:47:be:b4:50:
ab:4b:35:f6:9b:21:16:14:10:c8:7d:ea:ef:08:74:
cf:45:0b:87:ed:48:9d:59:25:59:96:54:56:e7:1d:
32:b1:e9:a3:ba:f6:a9:42:b1:02:57:bf:e8:47:57:
84:16:23:51:c2:2a:60:66:72:0a:98:8a:bd:2d:c4:
35:99:a3:30:da:22:0e:37:1b:79:c0:2b:17:b6:54:
29:91:45:61:0c:20:af:7f:8a:fc:74:69:84:43:12:
c3:46:a0:15:90:a4:34:1e:d9:6a:0a:9d:6a:8b:3e:
3c:19:89:b1:48:aa:ba:4d:b3:8e:00:00:18:25:0d:
b9:9d:08:3e:23:75:f2:78:58:8b:e6:ed:7e:93:45:
3a:a8:ec:86:50:bb:a9:48:10:46:c8:57:20:eb:49:
2d:dc:e8:93:53:87:9e:b7:3b:74:4c:02:04:65:27:
62:1e:35:2d:98:fd:5c:68:65:c2:d8:69:9c:bc:b8:
0c:fe:b8:96:b6:d0:32:de:bd:31:94:00:76:6a:fe:
2f:8c:9a:94:8c:18:b9:c6:54:37:74:98:88:0c:fd:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:08:0F:DE:F1:52:4E:D8:91:EB:74:36:75:80:75:00:15:1C:BC
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:76:b2:6c:bc:d6:3a:53:bb:7a:4b:2f:f5:0e:46:1e:b7:
c4:11:d5:76:d1:aa:c6:1b:42:e8:61:71:f1:d7:6d:ba:d0:87:
ac:f9:12:6a:22:47:6d:bc:f0:0e:d3:0c:b0:81:9c:a8:63:a4:
ca:1a:bc:96:b7:8f:20:53:c3:84:5e:e8:52:18:33:3c:cf:b4:
3d:06:b6:57:86:4b:22:9d:12:51:c8:9c:ac:08:3b:54:08:7c:
08:c1:8f:82:9e:33:ed:1d:10:ca:91:50:e2:9e:db:16:db:7d:
b3:b0:51:18:21:ca:96:9c:ec:73:e7:be:3b:50:d5:0a:0a:2f:
84:66:20:7a:c4:ea:ce:65:74:0a:d2:8a:01:d8:11:33:d6:e7:
ff:7d:89:6b:78:71:8a:ca:b4:08:3a:82:53:2b:79:2e:bd:15:
fe:c2:a6:69:5c:8d:78:5c:81:28:f6:fd:3c:f3:42:a1:4c:04:
b8:47:05:53:62:61:df:b7:eb:d0:a2:88:25:6e:49:e1:b3:7e:
1a:e8:43:a4:18:d7:19:ac:4b:ac:a0:05:63:0a:80:42:39:bc:
eb:76:12:99:65:70:2e:ca:95:83:d8:7f:5d:a9:f8:9b:fc:30:
89:ef:ea:20:94:65:7d:3f:21:d1:86:ae:65:44:fe:a5:76:26:
4e:e1:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:09 2026 by rpki-client