Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: Xhc1tG2UPVUZXMh6R8AeD6cYGvY+J1GcBy78HZzHoss=
Subject key identifier: E5:A7:9B:E2:7F:9F:F0:94:E7:A6:FF:37:0C:CB:51:23:CA:C7:A6:7C
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 3975EF4C979A4592E7DB529C51C9BDF91BC0FC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 015E
Signing time: Thu 16 Apr 2026 19:54:42 +0000
Manifest this update: Thu 16 Apr 2026 19:49:42 +0000
Manifest next update: Fri 17 Apr 2026 22:12:42 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: 0UT20WM2r224Gcpm28RqhiNuwcslc2/KGNRhzuwIXKk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:75:ef:4c:97:9a:45:92:e7:db:52:9c:51:c9:bd:f9:1b:c0:fc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Apr 16 19:49:42 2026 GMT
Not After : Apr 17 22:12:42 2026 GMT
Subject: CN=E5A79BE27F9FF094E7A6FF370CCB5123CAC7A67C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:9d:b2:d9:63:0b:09:10:61:3a:ae:82:ef:
66:79:00:dd:fa:eb:cf:00:0a:cf:6f:09:d2:e3:86:
63:30:4d:8f:47:25:aa:eb:a4:79:7a:41:c1:7c:61:
fa:1f:65:d7:e5:51:9d:1b:ea:20:79:6a:a3:64:7f:
bc:d6:7f:e4:73:3b:49:5b:2f:d3:43:e3:76:99:08:
62:be:c6:d9:60:1b:e5:01:ff:88:77:87:e4:a8:c2:
81:25:eb:cb:0d:dd:16:3a:3a:91:1d:ca:6b:16:67:
57:f0:b4:be:af:2f:f1:0b:b0:56:8a:57:ca:dd:6f:
c2:43:34:f7:91:72:f5:65:37:02:b5:eb:75:41:d8:
72:f2:fb:d5:a4:11:f1:d0:88:3f:64:57:13:e8:14:
e4:f6:49:72:e5:2b:a8:18:40:94:e8:15:b5:85:44:
d2:46:41:1e:aa:83:06:01:86:ce:41:57:ae:9a:0b:
f0:90:60:0c:87:9d:e5:fa:40:32:75:72:f4:95:52:
a5:ad:3b:ff:b9:a2:3a:e3:bc:9a:ef:68:74:a9:00:
fc:ab:50:a7:9b:78:d3:63:b7:0b:5a:3e:20:2e:2a:
ff:d7:35:87:4c:de:e8:4d:76:98:d2:17:e6:35:c5:
24:b8:f0:6e:cc:2f:86:70:e7:28:1a:ef:61:76:3e:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A7:9B:E2:7F:9F:F0:94:E7:A6:FF:37:0C:CB:51:23:CA:C7:A6:7C
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:15:7f:39:1b:ca:ea:25:46:25:c0:b4:34:70:f7:61:27:6c:
49:57:d6:d2:37:aa:98:b8:86:c3:9c:9e:f9:eb:11:5d:bd:cc:
ae:9d:cc:61:6e:5e:0a:0b:8f:a5:d5:b6:50:2e:68:dd:c4:2d:
45:2a:4c:cb:ca:9f:9b:c0:7e:61:54:f2:02:3d:5c:71:c4:90:
35:65:3a:eb:c6:26:7a:bc:7e:8d:7f:2f:88:64:25:ef:42:37:
b7:87:64:4a:19:94:43:29:18:ce:cd:e2:7a:07:23:32:9b:2b:
78:75:99:bd:de:ec:d2:24:cf:4a:ca:19:8b:4d:c1:1d:1c:5a:
b2:5f:f2:99:34:cc:05:18:b6:f8:bb:81:ce:a6:ff:13:d1:2c:
66:30:be:68:66:d8:1d:3f:ac:6e:75:23:79:aa:89:e6:8a:77:
e6:0e:cb:ba:78:30:77:76:c9:be:e6:01:c2:24:f0:6e:fb:4f:
cc:9e:26:af:4c:81:f3:d7:e0:83:bf:8a:76:a9:6e:07:91:3d:
07:e8:44:9f:58:53:9f:0d:92:d5:6b:4f:cf:6b:52:c1:65:e9:
dc:d5:bc:9c:7e:ed:bf:7b:a8:61:67:8e:1e:9e:61:69:c7:0e:
8e:b6:fe:22:93:ee:e7:80:03:db:89:a1:e1:01:95:5c:56:f2:
bc:2b:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:14 2026 by rpki-client