Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: sTmf+kSDhQ9rqklrOwHaV5xdhrWZX8r3OyPKv7y9iEc=
Subject key identifier: CD:ED:1F:9C:7F:20:CA:1D:7E:CE:57:1B:EC:40:AC:E0:5D:C4:C8:FA
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 0C1DD7B1E3959CA2C8EF7E59F6BB76CAFE009B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 01DD
Signing time: Tue 21 Jul 2026 12:47:26 +0000
Manifest this update: Tue 21 Jul 2026 12:42:26 +0000
Manifest next update: Wed 22 Jul 2026 14:16:26 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: XpoNWkmknKqq4EeyDNV79M+nmFZHWj+Ezr/Hl+yK5ls=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1d:d7:b1:e3:95:9c:a2:c8:ef:7e:59:f6:bb:76:ca:fe:00:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Jul 21 12:42:26 2026 GMT
Not After : Jul 22 14:16:26 2026 GMT
Subject: CN=CDED1F9C7F20CA1D7ECE571BEC40ACE05DC4C8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:c2:1a:cd:c3:4c:c3:a0:58:91:73:fe:78:
d0:c9:6f:49:2c:7a:33:2c:8a:d6:44:e1:b8:4a:b3:
8f:dd:1f:f8:b8:a0:b2:ce:ec:39:e8:61:ed:97:e9:
0d:8d:00:2f:a3:6b:d5:e7:2b:d3:1f:cf:b7:67:2b:
49:88:dd:58:a9:ad:ea:7c:9b:db:ec:04:f4:47:9b:
66:8b:3d:2c:3e:7c:ac:22:cb:f0:2a:3d:1e:92:e4:
7c:01:cb:b0:84:71:42:bc:ff:73:d9:15:ab:2a:32:
e0:9d:f3:d0:ce:09:eb:8d:cb:73:dd:79:24:3a:d8:
af:0c:1e:4b:65:fc:0e:c8:0e:67:30:fd:54:b6:20:
0b:5c:0c:27:6b:67:86:09:7c:c2:1e:fe:dc:81:79:
b8:d3:91:e8:6f:b0:21:1d:e0:44:7e:ce:3b:23:5b:
e6:2d:89:ef:76:ce:50:a1:ea:51:25:45:09:48:ff:
c8:8a:82:7c:dd:7c:9d:b0:8a:cf:37:12:e3:dd:ce:
79:ad:d6:1b:55:ef:27:f1:30:44:eb:33:a8:bb:b7:
de:2d:12:03:d6:00:d2:d8:6b:64:e9:d2:38:a2:73:
76:cc:84:6a:a7:fa:ee:48:75:17:74:02:29:1a:9e:
51:80:89:34:6e:2a:38:05:56:e6:bf:ee:fd:9a:e0:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:ED:1F:9C:7F:20:CA:1D:7E:CE:57:1B:EC:40:AC:E0:5D:C4:C8:FA
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cc:f1:66:7d:17:05:75:ec:98:2b:29:7a:38:48:c3:b6:8f:
01:dc:ac:a8:63:6f:df:39:ce:ed:bc:f6:e8:5c:b3:4d:38:df:
91:9b:00:c1:f4:e3:2f:cb:8f:58:dd:91:84:0b:8a:9c:29:89:
aa:5d:fa:1b:02:be:d4:01:90:fa:f3:21:ea:38:48:8e:bd:03:
3e:e7:c2:bc:e3:c7:2d:1c:0c:e8:30:43:95:ce:96:27:17:59:
71:6f:2f:c4:9f:ee:2e:b9:38:3c:ba:b6:b6:c6:69:eb:37:af:
70:1d:c0:0e:82:11:56:05:9a:05:18:b2:f0:a4:a9:2e:ef:61:
ad:2c:aa:9d:a7:25:30:28:76:1c:cb:de:a2:37:58:85:1a:05:
37:d2:5a:b8:e3:ce:39:da:98:43:8e:4f:c0:c6:d3:e1:9f:72:
39:15:60:0c:b9:a9:df:99:82:81:5e:d6:e9:a0:6f:42:21:80:
e6:b1:3c:93:5c:3d:50:47:07:56:37:c4:59:3f:5d:ae:c9:c8:
3a:35:ec:98:f6:a1:ad:9b:18:31:0f:27:2f:e3:34:41:47:1d:
ca:b4:9f:e3:71:72:ae:1e:70:52:dd:1c:45:af:09:38:4b:d6:
31:66:b8:da:96:ce:6e:d2:a3:82:1e:e7:ef:ca:01:a1:11:10:
38:30:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:33:38 2026 by rpki-client