Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: 4LEoTFm6oTyioW29KS5wmjgtA9vWoPmp5uVciPXZoAo=
Subject key identifier: BC:25:0B:4E:8E:AF:47:08:5D:1F:EF:44:05:A4:D6:53:FC:DE:D1:DD
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 09A9947CC0D7193D3BC02F07617C6360FFB7F2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 5C
Signing time: Thu 16 Apr 2026 15:03:04 +0000
Manifest this update: Thu 16 Apr 2026 14:58:04 +0000
Manifest next update: Sat 18 Apr 2026 15:03:04 +0000
Files and hashes: 1: AS205848.asa (hash: fTS5ERLhS7vaYmpMsvIfT8uNgkhxssArAc3C3S/JQfU=)
2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: VhtyjO5P+qwyG17Yq9SFATq0GpCcIAaxa5LDMk/BG7k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a9:94:7c:c0:d7:19:3d:3b:c0:2f:07:61:7c:63:60:ff:b7:f2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Apr 16 14:58:04 2026 GMT
Not After : Apr 18 15:03:04 2026 GMT
Subject: CN=BC250B4E8EAF47085D1FEF4405A4D653FCDED1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:b4:ec:46:68:8e:6a:7f:20:39:bd:86:47:
e3:28:54:52:62:81:16:e6:d1:63:5d:c5:9c:9d:a7:
2b:a9:a1:2d:66:1d:f4:8b:78:4e:25:5e:16:b9:4a:
6f:46:02:33:ae:b4:95:32:0c:49:3f:67:fe:dd:97:
71:60:4f:33:4c:8e:59:e7:97:ae:c7:a1:bc:78:7b:
b0:2f:73:4a:d7:cc:16:f4:93:e6:b6:a9:04:35:71:
a9:0d:4d:72:70:25:2d:36:28:fa:0e:ab:a1:31:5d:
be:ab:ee:0b:2b:08:51:16:cb:16:97:f9:54:66:e3:
23:8d:64:d5:67:61:9c:b1:55:6b:0e:fd:80:8c:99:
c0:7e:83:be:02:25:50:fd:51:41:93:05:80:70:6e:
05:05:2b:f2:e3:71:cd:e9:eb:c8:3b:ca:49:4a:6e:
74:a0:53:4e:10:93:d1:55:9b:2f:ef:0a:16:f8:b2:
fb:1c:99:6d:96:a3:3a:5e:2c:01:6e:7b:6a:dc:b2:
28:65:5e:48:15:ec:02:e2:be:c3:b1:69:f1:40:96:
f0:2e:9f:d3:f3:08:65:89:c9:de:f2:93:e1:e1:1b:
53:5c:91:78:02:f9:5c:07:fd:6f:be:3a:78:c7:1b:
0c:f9:ce:8b:e3:5b:7d:86:06:bc:17:01:54:16:06:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:0B:4E:8E:AF:47:08:5D:1F:EF:44:05:A4:D6:53:FC:DE:D1:DD
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:97:83:74:42:7c:a4:29:3f:87:bf:f9:40:8c:24:d3:46:
30:59:f9:4f:8e:da:c4:29:49:9e:0b:b6:3e:7d:0e:31:2d:e3:
af:64:d3:d9:63:f7:f8:15:17:2e:b1:1b:5d:53:1e:fc:d7:fc:
98:d1:29:d8:61:49:8a:e3:08:26:80:7d:d6:54:63:b4:76:da:
75:12:c4:82:9c:e7:6e:38:88:fc:71:a0:8a:50:d1:8f:01:d7:
3d:31:87:d0:86:72:d9:bc:20:e2:d2:55:88:a5:51:d6:b9:32:
ad:a8:c9:da:9e:36:1d:cd:38:f5:7a:07:49:a8:8d:2a:90:6f:
48:6a:20:93:31:41:66:16:3d:50:33:90:58:43:2d:bd:09:1d:
27:d5:4d:03:af:1e:19:9f:da:5f:49:ed:6f:29:cd:94:ca:0b:
a5:1b:9d:b7:5d:b9:a0:c3:c0:7e:f0:c0:f2:77:ae:9b:b9:3e:
ef:81:d3:20:91:8b:ec:c1:1f:ac:43:b8:6b:da:f1:34:62:33:
6f:49:37:6b:c1:72:16:ed:7a:63:41:1e:1c:ef:07:7a:f0:54:
c8:83:da:ea:e6:9c:bd:a0:47:06:1c:cd:87:bb:7c:bc:29:11:
7d:4a:3e:d9:d9:ce:a1:f4:b2:52:18:15:ed:9a:08:dd:11:1b:
ce:7c:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:12 2026 by rpki-client