Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: N1914WLOUwJdOoNTjLd6jgvZQ3JEZsn6sRfItxfpidM=
Subject key identifier: 75:C9:32:64:41:C4:DD:29:4C:7E:29:48:46:28:65:A6:29:68:08:5C
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 4AABF4D8BE367A3D5F41220653272BB7BD7988B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0121
Signing time: Sun 01 Mar 2026 22:07:26 +0000
Manifest this update: Sun 01 Mar 2026 22:02:26 +0000
Manifest next update: Mon 02 Mar 2026 23:39:26 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: JOux16tCeIuiUUBxpGoUAZrWsgZGVKHhUY1sTM7C0ro=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ab:f4:d8:be:36:7a:3d:5f:41:22:06:53:27:2b:b7:bd:79:88:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Mar 1 22:02:26 2026 GMT
Not After : Mar 2 23:39:26 2026 GMT
Subject: CN=75C9326441C4DD294C7E2948462865A62968085C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:c2:f5:64:27:6d:b9:f1:0d:04:d9:48:a1:
a6:cb:4a:36:d6:d7:49:6d:cf:2b:dd:00:5d:53:85:
52:e3:66:fa:79:35:03:eb:dd:f6:55:c7:67:66:65:
12:48:4f:11:f4:22:fe:16:5a:6f:9e:89:60:dd:95:
e8:5a:3d:02:14:06:ba:42:c7:9e:53:00:2c:1f:1a:
bd:fc:e6:e4:2b:cd:af:c0:43:c1:ea:1d:ac:88:37:
c9:f7:6c:f6:94:eb:7a:9d:5f:cb:21:99:7e:19:c3:
cf:93:11:85:63:46:20:87:28:29:16:1b:81:c5:73:
80:50:af:ae:26:54:f7:c2:e0:9f:e7:a8:18:b5:9c:
49:83:d9:91:9e:0f:27:c1:8d:8c:f3:7b:ba:9a:7d:
78:0b:53:bc:d0:35:4f:eb:b4:93:7c:69:24:36:11:
80:9e:2b:2a:98:e2:8d:b8:47:22:a6:f2:5e:43:3c:
a2:1b:b4:24:35:2f:9e:5c:16:7f:c8:41:56:1f:5b:
b7:9b:54:c2:a5:5f:ef:81:73:33:1e:00:51:e5:80:
04:c2:33:8e:7a:e8:86:9d:ea:64:df:5e:27:72:a7:
7b:ef:bc:04:bc:29:7a:a9:65:17:33:62:23:69:a5:
05:54:07:5e:8e:f7:0c:76:3b:59:0a:7d:96:95:0c:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:32:64:41:C4:DD:29:4C:7E:29:48:46:28:65:A6:29:68:08:5C
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:5c:07:42:d4:26:d7:ae:58:ea:c4:e0:6f:6a:cb:68:3c:
e8:db:32:5b:55:99:82:f3:6b:4f:72:b9:d5:e9:b1:10:8c:59:
4b:6e:b6:fb:36:6d:d3:af:04:db:ed:9c:2d:c5:4f:14:fe:f0:
de:8d:75:c3:73:31:06:14:46:e2:2e:38:a8:75:54:ec:02:a4:
e7:cf:cd:09:d7:ef:c1:4f:02:7a:42:09:51:20:6a:aa:2c:a8:
a8:4f:fd:6a:ef:af:da:f0:7a:e0:07:14:49:b1:0d:ad:69:21:
5d:c5:77:1c:bb:df:09:93:97:12:82:81:bc:06:df:d1:cc:d3:
71:e3:95:bf:47:84:40:ab:2e:00:49:38:85:2f:76:f5:64:dc:
45:62:88:23:27:0e:bf:21:a4:ab:4c:c6:c3:e2:48:3b:66:b2:
df:41:5b:52:70:1e:fb:fe:b1:14:d1:38:05:7d:ab:e5:06:ce:
08:6a:b8:cc:13:e4:a3:97:e2:d1:ec:00:ae:05:7d:cb:d7:22:
9e:b9:47:2a:b7:b3:67:4b:26:24:0d:56:29:1f:30:e2:7b:9b:
ba:7a:ca:1f:d5:05:5f:3c:20:2a:dd:cb:b7:d2:5d:e2:97:bf:
4b:17:0c:11:dc:a3:9c:db:91:5a:ea:2e:5c:08:7b:cf:95:2f:
d5:b5:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:15 2026 by rpki-client