Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: V4SXfR6S7qxTQ1zw57T7ZAGh25QPPMQjmbMB9LfOD3E=
Subject key identifier: 14:93:CC:C8:69:BC:BA:F1:D8:81:1C:2D:90:C7:23:88:47:A7:C6:62
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 28E25B442C6972775E3FE9A9C824D7094DBB0FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0219
Signing time: Fri 04 Sep 2026 17:03:56 +0000
Manifest this update: Fri 04 Sep 2026 16:58:56 +0000
Manifest next update: Sat 05 Sep 2026 19:43:56 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: ZxxwePdbiW78fNSOv1bBP11xPv9WTPgkb7eypMWI7iQ=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: D/lBvIEm+TEAmjjxBl3zvu+F/MqFAkS71dt+bG0MRqc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e2:5b:44:2c:69:72:77:5e:3f:e9:a9:c8:24:d7:09:4d:bb:0f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Sep 4 16:58:56 2026 GMT
Not After : Sep 5 19:43:56 2026 GMT
Subject: CN=1493CCC869BCBAF1D8811C2D90C7238847A7C662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:9c:d7:5a:f3:fa:98:79:7d:95:da:09:d8:
ce:ab:be:e8:a9:bc:60:aa:b7:55:a3:69:1f:a0:81:
85:ad:ea:4c:4d:37:e8:b0:f5:d1:ec:97:5d:a0:34:
25:ce:5f:f8:a8:ca:ad:ba:0c:56:05:a0:d6:cf:35:
5d:19:c1:ab:49:96:57:21:49:d9:05:b7:ed:24:03:
3a:0e:7c:01:f3:f4:a9:b5:b3:d7:1d:f5:ab:41:9c:
59:9b:cb:a1:f7:5a:e6:91:22:4a:64:3f:fb:9a:4c:
98:94:58:d3:50:90:ae:71:e0:38:fb:2c:d3:81:ee:
41:1c:7c:31:54:99:92:6f:b1:24:a3:d3:c4:90:a1:
5d:48:54:a3:de:64:0c:c0:3c:5c:63:b1:f3:7a:ec:
00:7a:c7:6f:25:6b:d4:49:7f:f8:ae:90:f1:a9:6f:
fa:06:b9:4f:57:60:e1:68:b5:4a:54:43:03:b5:ed:
36:73:91:7e:19:4a:6f:34:4f:2b:76:10:54:08:77:
8a:0d:89:b3:ec:ee:a7:6a:1f:cb:fc:07:51:95:01:
27:f6:a3:cd:ca:54:49:62:f4:48:c9:17:71:69:2b:
61:56:27:02:e3:4c:7f:62:c3:5d:10:32:f3:f4:ed:
5d:c6:a8:c4:bc:2e:b8:82:05:ed:a1:63:79:7d:7b:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:CC:C8:69:BC:BA:F1:D8:81:1C:2D:90:C7:23:88:47:A7:C6:62
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:05:34:d7:47:b5:27:34:87:c1:4d:14:15:41:a3:90:d1:ab:
43:7f:3b:92:1c:74:a3:0a:89:80:11:79:eb:fb:c0:10:87:73:
d1:f6:f2:1b:ec:b8:fd:73:8b:d0:72:96:54:15:17:53:79:6a:
11:d5:b4:85:4d:40:46:cf:75:aa:0d:4c:35:f9:8c:1e:5d:84:
eb:ab:0f:34:7a:6e:4a:06:5e:e5:a9:cf:63:1f:86:d5:5e:87:
52:94:39:00:00:4a:42:35:31:37:f5:eb:c5:af:dc:0b:37:a9:
67:cf:19:1e:0d:f3:30:54:07:36:b3:02:18:81:e2:ad:d6:b9:
8c:34:f8:89:15:5d:6e:fd:66:66:58:10:65:a0:af:bd:ae:e5:
83:d1:c7:d4:45:85:64:80:aa:97:a3:45:10:9f:5b:e9:13:35:
34:9b:81:86:c7:c2:67:73:54:0e:f7:7d:95:6f:b5:25:bb:6f:
59:b0:2f:28:e1:9b:11:7e:f8:d9:fc:fe:0b:af:18:61:c6:91:
94:7b:35:6a:fe:3f:a1:94:42:90:40:e0:6f:3c:08:1b:c1:c4:
f0:5b:b3:2d:b9:16:1e:c6:72:48:6d:ef:90:0d:3b:84:b6:16:
cb:b9:53:b3:86:d9:08:ad:5f:15:52:a7:72:0d:eb:8a:ce:be:
ce:07:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:09:00 2026 by rpki-client