Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: OCdB8gy+ydusrM3uHOdxqDiw8ORURU42ZQg3jDynMko=
Subject key identifier: 56:BB:E5:CE:93:A2:0F:4B:74:7A:60:6F:3E:53:C4:43:45:84:7D:21
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 21CF791E0B723BA28F45BB0E8D6B4935E2D1D1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 3D
Signing time: Sun 01 Mar 2026 01:28:04 +0000
Manifest this update: Sun 01 Mar 2026 01:23:04 +0000
Manifest next update: Tue 03 Mar 2026 01:28:04 +0000
Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: DJSpP/MppPw9g4p3Hcj0GTqe+NlOzc6lyDWA/SCu5pY=)
2: AS205848.asa (hash: fTS5ERLhS7vaYmpMsvIfT8uNgkhxssArAc3C3S/JQfU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cf:79:1e:0b:72:3b:a2:8f:45:bb:0e:8d:6b:49:35:e2:d1:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Mar 1 01:23:04 2026 GMT
Not After : Mar 3 01:28:04 2026 GMT
Subject: CN=56BBE5CE93A20F4B747A606F3E53C44345847D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:1b:03:69:34:2b:e3:4d:c3:68:48:22:1c:
8e:20:a0:3d:d4:b8:f6:b8:a7:f9:0e:c6:c9:18:54:
94:cd:a7:66:dd:e5:6c:97:b2:f1:10:28:e1:f8:47:
a2:a4:8c:ed:ce:44:97:45:81:5c:8e:25:c5:aa:7c:
32:ea:b6:1c:24:c4:18:43:1b:d2:94:36:64:ef:77:
bb:11:f6:d7:05:f5:0a:0c:87:e9:bd:e0:38:8c:08:
c7:39:b4:61:c6:29:5d:cc:45:9b:3f:0b:f3:98:e0:
6f:7a:58:f6:df:c0:e6:23:31:9f:c3:09:54:db:dc:
43:c4:19:9a:cf:cd:3f:8a:39:0d:e6:a0:a1:e8:41:
b0:0a:81:c5:fa:03:16:2a:11:e3:28:a0:cb:d4:97:
90:39:16:ad:c3:be:9a:25:3a:eb:85:1e:5b:fb:cf:
51:bd:ac:9d:43:63:6c:04:6d:8b:9d:2c:fe:28:5e:
2a:83:96:15:ae:4a:b6:b4:89:5e:64:09:dd:74:04:
b4:23:d5:0b:7b:fc:1d:c2:61:57:8c:c5:ee:e6:f7:
bb:11:39:e6:90:bb:c6:16:10:ff:25:64:fc:07:3e:
d8:be:bc:54:ea:b0:f7:33:61:2b:25:d0:7b:97:98:
eb:77:b7:bf:9e:1f:d4:5e:cb:9d:7b:65:39:f5:67:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:E5:CE:93:A2:0F:4B:74:7A:60:6F:3E:53:C4:43:45:84:7D:21
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b1:7b:6d:2d:9c:12:f5:06:0e:fd:d5:e5:d0:82:8e:38:1f:
24:ac:87:d2:03:f7:82:9c:2e:5c:79:f1:64:cf:ac:77:f4:d3:
9f:81:be:6a:0e:b3:45:d3:f0:3f:fb:56:5c:ce:57:90:e0:30:
be:55:b1:fe:4b:26:c1:59:74:59:c8:fd:37:9b:29:fd:ef:12:
8e:3b:ec:fe:54:1c:e6:e5:39:24:4b:18:ca:df:25:0b:1e:b4:
98:52:4b:cd:4c:13:5e:79:ab:99:f2:7a:64:ef:19:fe:96:df:
bc:ac:67:0a:17:b9:96:e5:d7:fe:8b:21:eb:10:72:ac:92:80:
8a:dc:89:e2:f0:cf:79:1b:f7:06:40:f4:05:cf:c3:8c:51:71:
da:b3:ab:9b:2a:69:b7:54:37:44:d1:17:fc:8a:d0:3e:ee:2e:
32:59:56:67:3a:11:96:69:b5:70:b9:cc:21:97:23:c6:91:e0:
75:8a:90:c2:d6:92:c6:e8:0a:4b:f4:74:0c:a0:55:bc:77:07:
4e:45:f6:61:cf:6f:91:7d:31:a7:90:a4:69:7b:8e:3a:f5:85:
78:0b:d0:ee:71:26:84:c4:35:64:68:36:7c:c4:9b:b2:5d:4f:
66:e6:9a:b2:8a:f9:d1:26:8a:06:8d:68:5e:28:a9:78:9a:6a:
31:53:f5:ca
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIc95HgtyO6KPRbsOjWtJNeLR0fYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw
Y2ZlMDhmZjAeFw0yNjAzMDEwMTIzMDRaFw0yNjAzMDMwMTI4MDRaMDMxMTAvBgNV
BAMTKDU2QkJFNUNFOTNBMjBGNEI3NDdBNjA2RjNFNTNDNDQzNDU4NDdEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJhsDaTQr403DaEgiHI4goD3U
uPa4p/kOxskYVJTNp2bd5WyXsvEQKOH4R6KkjO3ORJdFgVyOJcWqfDLqthwkxBhD
G9KUNmTvd7sR9tcF9QoMh+m94DiMCMc5tGHGKV3MRZs/C/OY4G96WPbfwOYjMZ/D
CVTb3EPEGZrPzT+KOQ3moKHoQbAKgcX6AxYqEeMooMvUl5A5Fq3DvpolOuuFHlv7
z1G9rJ1DY2wEbYudLP4oXiqDlhWuSra0iV5kCd10BLQj1Qt7/B3CYVeMxe7m97sR
OeaQu8YWEP8lZPwHPti+vFTqsPczYSsl0HuXmOt3t7+eH9Rey517ZTn1ZwZ5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUVrvlzpOiD0t0emBvPlPEQ0WEfSEwHwYDVR0j
BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj
MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6
LUNQOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l
NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMC9ERERBN0M0QzZBOTg1QzQ2NUU2
NkJGREU0QzNFMTFCRDBDRkUwOEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrF7bS2cEvUGDv3V5dCC
jjgfJKyH0gP3gpwuXHnxZM+sd/TTn4G+ag6zRdPwP/tWXM5XkOAwvlWx/ksmwVl0
Wcj9N5sp/e8Sjjvs/lQc5uU5JEsYyt8lCx60mFJLzUwTXnmrmfJ6ZO8Z/pbfvKxn
Che5luXX/osh6xByrJKAityJ4vDPeRv3BkD0Bc/DjFFx2rOrmyppt1Q3RNEX/IrQ
Pu4uMllWZzoRlmm1cLnMIZcjxpHgdYqQwtaSxugKS/R0DKBVvHcHTkX2Yc9vkX0x
p5CkaXuOOvWFeAvQ7nEmhMQ1ZGg2fMSbsl1PZuaasor50SaKBo1oXiipeJpqMVP1
yg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:33 2026 by rpki-client