Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: CdJSMKbxS1HKx9CaEoALNsea1240mDxgN54FUvy7YvE=
Subject key identifier: E3:EF:23:A8:FC:88:29:29:0E:C7:28:8E:91:D2:5D:76:1A:BB:2B:8F
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 7752EF061B4F2DFC7A7A124A2C9A22800215CCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0260
Signing time: Wed 28 Oct 2026 09:42:36 +0000
Manifest this update: Wed 28 Oct 2026 09:37:36 +0000
Manifest next update: Thu 29 Oct 2026 12:25:36 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: ZxxwePdbiW78fNSOv1bBP11xPv9WTPgkb7eypMWI7iQ=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: SW6t0kU4HLE7sj6no+nxHoIeU99CTE8IqxuAi8fn6Xk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:52:ef:06:1b:4f:2d:fc:7a:7a:12:4a:2c:9a:22:80:02:15:cc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Oct 28 09:37:36 2026 GMT
Not After : Oct 29 12:25:36 2026 GMT
Subject: CN=E3EF23A8FC8829290EC7288E91D25D761ABB2B8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:7e:61:93:c2:2d:dc:66:a7:b5:64:8b:db:
56:68:dd:cb:3c:ee:87:48:99:ca:0e:20:73:8e:2a:
44:9e:7b:cd:8e:b7:a5:a3:81:52:7b:ae:4a:dc:84:
13:34:03:09:ca:ee:1c:4e:8f:e8:37:ce:a2:11:5b:
4e:6a:f8:db:73:38:38:0f:d9:37:a9:60:be:80:cc:
dd:89:51:99:d8:3b:4d:6a:c4:b3:bd:69:c6:48:cc:
e1:fd:4b:92:3a:9e:91:8b:1b:3c:ca:7c:aa:aa:98:
4b:59:16:6e:62:07:b6:8c:8c:ca:27:45:80:4c:bf:
99:54:00:f6:c2:f5:38:6b:56:72:8e:c2:ff:55:ff:
74:7f:3d:c2:27:43:7e:3f:4e:3e:b3:8c:f4:4a:3a:
b3:3c:25:63:5c:a9:90:87:73:e5:c1:ed:ed:b5:23:
2a:45:bd:d3:f0:cf:93:07:2d:ab:a7:ce:cb:aa:94:
0d:f6:0f:26:ea:27:1a:55:27:73:d1:04:ad:93:d2:
d3:57:39:91:fc:ba:23:c7:6f:30:a3:5f:b6:cd:88:
8d:a2:a6:a6:62:43:30:5a:10:6a:e5:c7:ee:fd:1a:
20:d9:12:c7:76:df:e8:6d:7f:2f:37:78:5e:07:3f:
a1:df:6d:22:d5:8f:2f:1f:d8:9d:28:0d:40:10:72:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EF:23:A8:FC:88:29:29:0E:C7:28:8E:91:D2:5D:76:1A:BB:2B:8F
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5d:b4:20:99:c2:4f:5a:e5:4c:2b:c3:54:fc:bb:f0:84:1a:
03:f0:a3:6f:5a:05:ca:43:4b:e2:d5:f8:77:42:39:2b:7a:e7:
41:8b:9c:24:b8:5b:af:4e:0d:0a:d9:36:c0:6a:90:11:23:83:
c3:22:2c:f9:df:8b:cd:c7:03:e8:cf:78:72:a9:31:2a:f6:5d:
17:c8:33:92:21:77:ef:c9:52:73:85:4e:1f:79:a2:51:c7:94:
b9:53:24:87:c4:6f:50:27:11:b4:6d:29:5c:cb:d9:79:92:89:
12:6e:9c:04:39:49:5a:8f:79:71:5c:7e:70:52:f5:a9:e2:5c:
1d:01:ad:45:54:89:b3:00:e4:7e:1f:a6:f0:bf:f8:f9:bc:e9:
2c:4b:64:f5:3b:13:04:46:d6:69:3a:8c:b9:38:88:12:6d:85:
19:11:f4:06:38:e9:d4:5e:73:c9:d7:05:df:95:ff:84:eb:a8:
f7:d8:93:34:0e:ca:4c:c9:c0:c4:29:40:3a:8e:9b:f0:98:4f:
ff:a8:c6:ac:2e:57:7e:bd:8f:4f:73:66:bc:ac:20:fb:03:1c:
d8:4b:7f:4e:4f:ea:09:74:90:96:e4:aa:43:f4:f0:a4:da:18:
54:a7:50:d5:ce:d0:a7:b8:f6:81:99:df:09:75:44:f5:3f:35:
99:6b:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:35:30 2026 by rpki-client