Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: XVPzX2axpRk/0u7eMPq+hzCJ0IaeEizIW9eswXCyHB8=
Subject key identifier: 1B:B2:85:72:13:44:17:D6:66:C6:E8:6D:D2:8A:42:16:BC:ED:4C:28
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 1AA98E580A4510957790FFEA566A05F95E649BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: A1
Signing time: Mon 27 Jul 2026 03:43:07 +0000
Manifest this update: Mon 27 Jul 2026 03:38:07 +0000
Manifest next update: Wed 29 Jul 2026 03:43:07 +0000
Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: Bcb/WmVSlOyMsiI5PMx7HkO//2lwZGLl5B826pCax5Q=)
2: AS205848.asa (hash: IikDWCRBwwK8sSNZmwImnmeMmSBFyeMb5C9qOOloZyw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a9:8e:58:0a:45:10:95:77:90:ff:ea:56:6a:05:f9:5e:64:9b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Jul 27 03:38:07 2026 GMT
Not After : Jul 29 03:43:07 2026 GMT
Subject: CN=1BB28572134417D666C6E86DD28A4216BCED4C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:be:97:39:dd:87:c4:9d:92:ce:91:04:08:
9a:38:93:99:95:ac:ae:c1:04:bf:ad:99:82:98:28:
66:26:e8:7b:5b:60:19:d0:8a:5f:29:9c:19:a8:f7:
f2:60:79:a4:37:08:e1:e9:71:14:bd:a2:80:b4:d8:
d8:18:75:94:a9:3a:56:30:47:cf:84:b6:27:e2:d7:
a8:70:43:2a:61:ae:91:d6:de:1c:be:ee:af:03:4a:
ac:80:ed:0a:3e:41:c7:0f:75:2f:5f:9f:47:c9:02:
60:e2:da:42:c9:4b:b7:8a:1a:30:6c:ff:68:bf:93:
c5:3c:67:0d:45:da:1a:e8:a0:c4:05:9d:77:33:2a:
cd:cb:cb:25:ff:2f:65:80:8a:66:b4:cd:8e:27:69:
99:e5:d7:1d:79:f3:2f:79:70:32:2e:0d:c1:ba:c3:
f5:91:3a:49:7d:5f:30:03:06:b1:7e:1e:ff:c6:a5:
20:e2:fc:dc:1c:d5:8e:37:01:4c:04:2a:46:8f:e9:
c9:a9:98:d2:44:15:f5:63:e6:c2:6d:90:91:d7:b0:
a9:a5:23:4c:a5:ac:14:4b:c7:59:7d:15:0c:af:50:
f8:6f:1c:b4:b5:57:06:40:0c:2c:5a:56:8c:da:7f:
3f:51:32:d4:c2:d9:eb:94:88:78:bf:47:bb:1b:fd:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:85:72:13:44:17:D6:66:C6:E8:6D:D2:8A:42:16:BC:ED:4C:28
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:dd:4a:a3:57:cc:35:2d:de:4f:00:08:c7:76:2d:5b:ad:
0f:35:fd:fa:71:f0:51:de:62:52:0b:be:6e:85:89:7a:bd:5e:
80:5d:7f:fe:f5:90:2d:9a:80:63:74:64:24:97:99:80:59:e0:
cd:73:c5:4e:9b:e8:37:5c:69:50:c7:70:80:0c:a4:3a:44:a1:
d3:ab:41:bc:54:6d:98:fb:5d:45:97:02:a6:49:28:1c:1e:25:
5a:49:b5:4d:be:d8:a3:e4:6b:de:56:3b:09:94:af:14:14:4f:
12:39:1c:13:0f:ee:38:d3:df:b5:28:1f:47:a3:6f:af:e2:f9:
25:20:e4:57:20:03:c8:51:cf:e5:f0:37:60:8b:31:df:b1:6c:
9b:f4:10:73:1f:a8:14:f7:29:ac:82:91:c8:9b:0e:0c:06:7d:
ae:ae:ba:ff:a3:ab:4a:f8:01:1c:df:6b:cc:1f:3f:5f:8a:90:
6a:40:66:7d:59:40:01:9a:40:c2:0c:1a:b8:60:1f:bb:09:85:
a5:59:3c:2b:61:2d:d7:1e:0d:85:1e:9e:2c:56:4f:ed:71:6b:
aa:4d:c3:63:7e:d7:ed:a2:1e:c9:5b:0f:98:83:0b:7f:69:44:
e4:55:a9:22:71:41:e9:b0:b3:c6:4e:50:6e:af:e0:73:1d:fa:
7b:6e:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:47 2026 by rpki-client