Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: 7/sRspA8uxMmGLH69nHgGcdoG1Pb4dHK5fzx2Xe74yA=
Subject key identifier: 4F:8D:5B:23:EF:58:86:AD:5D:92:9C:E1:3A:7E:4E:88:69:74:70:66
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 17FF3CFF50A7E458BDF186AE4BE698F4214ED546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 83
Signing time: Fri 12 Jun 2026 09:51:18 +0000
Manifest this update: Fri 12 Jun 2026 09:46:18 +0000
Manifest next update: Sun 14 Jun 2026 09:51:18 +0000
Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: FKpX8UOeZNLzdoJQHdgpo6tTJOMAEm1SmA9127HTvdg=)
2: AS205848.asa (hash: RQF3LRWfhi4ThAqwiOqIQhEXzfuBwp4KojFsAWNe1XE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ff:3c:ff:50:a7:e4:58:bd:f1:86:ae:4b:e6:98:f4:21:4e:d5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Jun 12 09:46:18 2026 GMT
Not After : Jun 14 09:51:18 2026 GMT
Subject: CN=4F8D5B23EF5886AD5D929CE13A7E4E8869747066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:78:e7:83:85:24:b6:7f:ff:b3:6d:41:1d:
74:a6:d0:90:ce:28:01:51:47:3e:4f:10:d8:2a:9c:
fd:a7:66:7a:8c:06:c7:51:cc:6c:7f:4b:60:41:3e:
5f:4f:d9:a8:4d:d0:43:11:dd:f6:3f:a4:82:33:73:
d9:09:73:ef:9e:94:6b:bd:fc:fb:42:64:51:9f:ff:
a6:65:b2:10:da:a6:54:b8:d4:3e:7a:af:dc:fd:88:
fc:32:fb:a6:de:ca:d3:a5:eb:4d:c2:38:c5:a5:ad:
c6:99:9a:b1:e4:c5:89:e2:c9:bf:e9:02:33:23:55:
6d:2e:1a:b2:8c:81:b1:2e:9e:bc:76:18:60:9e:c2:
64:57:6c:72:ff:41:23:ec:bf:18:57:ed:4b:f4:c1:
4e:ce:e9:5f:51:df:87:8d:cf:e9:06:37:94:29:66:
83:4b:d7:3f:16:a7:77:a1:3c:92:ed:09:3c:ef:c7:
50:8e:8d:f6:f0:47:46:d2:a6:c6:b0:bb:b0:bb:81:
2f:73:56:32:87:e5:fb:5b:d1:d2:06:eb:3b:70:6e:
75:e7:3a:b6:b1:69:02:89:1f:06:78:48:1a:d1:cb:
bf:77:fe:4d:b7:ad:4f:90:4e:1b:5e:86:2d:12:cb:
c3:a3:de:e9:09:9c:b8:10:ab:cc:34:9b:01:4f:26:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:5B:23:EF:58:86:AD:5D:92:9C:E1:3A:7E:4E:88:69:74:70:66
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bd:59:e9:d8:5a:67:e1:b6:75:77:29:35:82:cd:a8:a0:76:
b9:25:d7:51:72:44:86:7c:f5:c9:7a:e2:0e:0b:79:74:c0:c4:
c7:5c:96:86:36:57:80:29:64:81:7c:f1:7c:d3:fb:7a:02:1e:
a7:62:74:ba:f5:ad:f6:0b:56:78:cd:44:92:8d:d7:8a:3a:41:
93:3e:31:ab:ce:d5:0d:19:17:1d:18:17:91:f1:be:c7:ef:29:
e9:30:93:94:e5:2f:83:d0:88:e9:3b:ff:af:1e:5a:6d:94:35:
24:6d:c6:8f:02:9a:fe:3e:d6:74:c5:35:cc:da:24:15:54:0c:
88:9f:81:d4:80:9d:dc:8a:5a:5d:7b:c3:b6:9a:06:ad:38:a7:
92:44:06:1f:01:bd:cc:7d:53:ee:e4:39:80:6e:10:30:44:6f:
f6:a0:24:3a:7b:88:a3:52:cf:32:cd:61:4f:dc:a9:6d:1e:8e:
f8:2e:19:13:95:83:5d:72:ae:6a:54:5a:f5:f2:cf:d4:ba:b4:
c8:7d:f8:a1:db:47:5b:d0:de:ec:06:f0:2a:ed:ce:b5:fc:ab:
6f:45:c4:7e:0f:d8:f9:43:fa:28:81:f2:96:19:ad:71:37:c3:
33:b5:a7:f1:4a:43:4e:01:61:57:23:d8:59:2c:32:be:42:75:
55:97:25:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:47 2026 by rpki-client