Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: li/q7gC3os3iXUvqe+OTQaeek8uQMbp0FwHYrXmwgx4=
Subject key identifier: BC:ED:3D:EA:DF:60:DD:B8:9C:D1:7E:8C:01:1E:89:37:CB:25:90:55
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 30F5616D62E5675CED6A20234529602663D3598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: C6
Signing time: Sun 20 Sep 2026 17:13:42 +0000
Manifest this update: Sun 20 Sep 2026 17:08:42 +0000
Manifest next update: Tue 22 Sep 2026 17:13:42 +0000
Files and hashes: 1: AS205848.asa (hash: IikDWCRBwwK8sSNZmwImnmeMmSBFyeMb5C9qOOloZyw=)
2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: V4eb87J5B3zGU7Kni/aCKOWW5NdvEHFMnrm6LGAjw6w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f5:61:6d:62:e5:67:5c:ed:6a:20:23:45:29:60:26:63:d3:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Sep 20 17:08:42 2026 GMT
Not After : Sep 22 17:13:42 2026 GMT
Subject: CN=BCED3DEADF60DDB89CD17E8C011E8937CB259055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:8a:5c:c8:d9:3d:12:9a:55:01:56:02:92:
08:35:d3:6e:fd:4b:df:e7:73:98:79:d3:12:c2:e4:
63:58:38:4b:90:0e:92:92:1e:2c:db:b9:12:af:09:
9f:c5:21:cb:dd:fb:36:4a:45:33:93:7c:20:97:64:
8c:32:9a:c6:13:20:f2:5f:08:a8:a4:1b:6b:23:3b:
83:b2:bd:1c:43:71:1d:34:dc:3b:56:b2:68:d3:8d:
5f:43:ed:cd:43:e0:c3:05:36:6a:08:73:e7:a6:e5:
2b:13:dc:e3:21:4c:60:bc:cb:45:06:65:fb:2a:96:
af:ed:85:59:91:6a:ad:9c:a9:9f:69:75:da:5b:d8:
c1:38:4c:ab:67:fc:35:31:f9:aa:c8:8a:68:50:3f:
d0:e4:45:c2:dc:4c:1b:e2:a1:6e:9c:44:59:eb:0a:
a6:3e:d0:9c:4b:c2:c9:d4:36:76:23:3b:b5:a0:dc:
19:b5:5e:91:6c:4c:44:be:23:52:5f:0e:da:6e:cc:
16:00:51:76:fd:bc:83:fb:c8:47:9f:1a:3e:2e:a5:
f5:a3:9e:f6:ce:82:9b:05:87:eb:c1:c7:cb:d4:44:
ef:16:c4:ef:44:7e:01:c0:51:7b:59:0c:3f:f4:e6:
40:65:48:7f:fb:35:64:d9:df:f1:4d:e0:10:b6:2f:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:3D:EA:DF:60:DD:B8:9C:D1:7E:8C:01:1E:89:37:CB:25:90:55
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:38:e8:68:6c:9a:3c:dd:7d:dc:da:e0:a7:26:b4:66:3f:0f:
1d:5a:8e:60:d7:ae:5b:78:71:04:8e:ce:89:40:c0:a5:81:21:
f1:de:5f:f4:60:ed:86:d5:21:83:e9:fa:3b:5c:31:a9:c7:eb:
77:f3:e4:27:f9:20:75:b8:fb:a8:f3:3e:fa:9c:22:79:5a:5e:
49:1d:76:0d:c9:8c:aa:76:03:69:b1:23:47:fc:59:f2:21:67:
cd:5d:11:83:7c:ac:09:3e:f3:3f:58:c9:95:5a:3f:06:6c:56:
62:b8:a2:9c:65:47:4c:bc:0e:4e:23:68:be:7d:05:04:bb:ee:
f3:b0:49:c5:ce:00:ec:0e:17:b0:48:14:82:5c:66:3b:d3:fb:
9a:a6:94:e2:6d:8b:7f:07:6c:73:d9:08:ab:93:bb:cb:4d:47:
c7:d8:b2:31:77:60:cf:2e:0f:05:a1:cc:c4:8f:c3:4f:92:16:
61:b3:7b:98:28:3a:f4:4c:d3:fd:98:c0:dd:1f:a7:68:34:00:
69:58:ef:6d:a0:d7:56:b6:89:2c:3a:bc:ed:b4:50:df:53:4d:
c5:58:98:70:8b:ad:89:e2:8d:81:52:ee:f2:3b:21:e3:c1:78:
6b:83:d0:ad:3f:56:cb:a1:31:7c:76:85:7d:e1:10:1e:da:5b:
1e:91:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:38:56 2026 by rpki-client