Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: HEc1Ch/lpdks/kyFsNm890eXd/c6qxY3M9yRqL1kdPc=
Subject key identifier: 9F:6F:D6:FF:B6:53:03:BF:AE:01:AA:4F:0F:6F:4B:D4:28:3D:EE:BF
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 27FD2500469343E099CFB1CDEBC7A1DC2EE1E638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0162
Signing time: Sun 19 Apr 2026 18:59:55 +0000
Manifest this update: Sun 19 Apr 2026 18:54:55 +0000
Manifest next update: Mon 20 Apr 2026 21:40:55 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: jy2cRNvyKB9jxAj3g03WkqH3Ay+mKN9+Z+z3Fxf/y7g=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fd:25:00:46:93:43:e0:99:cf:b1:cd:eb:c7:a1:dc:2e:e1:e6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Apr 19 18:54:55 2026 GMT
Not After : Apr 20 21:40:55 2026 GMT
Subject: CN=9F6FD6FFB65303BFAE01AA4F0F6F4BD4283DEEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:21:00:85:b1:cf:b3:b4:f1:dd:fd:4b:be:
8b:af:ea:68:f7:36:15:7d:c7:a8:3e:08:c3:ea:1a:
98:22:6f:f3:bb:d7:08:d8:0d:69:32:57:58:aa:0b:
48:7e:31:ac:fd:2b:dd:15:a2:e1:18:90:b9:88:de:
ef:86:99:68:3b:36:f3:34:1d:00:d9:ee:57:08:30:
bc:90:98:be:bb:65:c6:5a:ec:85:30:11:40:52:7d:
08:6d:13:dc:38:5e:ca:e7:5d:74:1e:07:cf:32:63:
27:a5:66:e2:33:63:ed:aa:ff:2b:12:5a:2b:16:a0:
c3:34:43:3d:13:5d:67:bd:b9:7c:d3:64:86:b5:40:
7c:b7:56:1b:94:f9:d0:3d:ee:8c:40:48:8b:e6:f3:
03:3a:0f:11:6a:e2:7a:d9:99:be:9b:29:b4:0a:67:
e8:de:54:09:25:06:da:10:a4:e1:9e:23:b0:dc:7b:
48:e1:f4:76:1b:b1:ca:62:8f:47:b8:63:d3:ed:4d:
26:9c:6f:2a:bf:23:31:bd:ac:28:eb:31:9d:d4:1f:
c8:f2:86:be:26:3e:10:4a:6c:a4:f6:73:8d:7b:bc:
b3:b1:02:6d:e4:39:b2:44:62:d1:e5:70:d3:d4:ee:
05:db:39:0b:99:69:aa:23:8c:b4:ca:c3:51:bd:8a:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:D6:FF:B6:53:03:BF:AE:01:AA:4F:0F:6F:4B:D4:28:3D:EE:BF
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:be:e3:1d:90:51:ad:70:0c:67:1e:04:53:02:36:d1:ef:35:
a9:3d:db:a8:40:44:97:be:17:0e:b9:aa:2a:a7:7a:7c:1f:7e:
f3:97:fa:f1:53:51:44:74:3c:e3:61:50:ce:61:95:43:18:69:
5c:cf:76:61:89:a1:a3:b7:14:fe:d6:c6:cb:63:c2:c4:fc:e5:
f5:16:da:bf:f5:b9:1d:37:45:68:f2:d0:74:30:61:c0:a3:00:
3d:fb:c3:ca:4e:0a:77:2b:95:9c:3a:78:4d:b9:74:be:12:5e:
c3:ee:78:fd:29:ea:d8:4a:21:2f:b4:6b:1f:b0:73:e7:c8:c4:
c0:72:00:fe:49:4a:a5:7d:86:4d:52:f5:93:57:c1:39:e3:23:
83:b0:3d:bc:98:bd:2f:a8:12:92:7c:81:4d:9a:3c:7f:10:e0:
94:0d:24:cc:99:7c:5e:60:fe:6f:cf:9b:b8:90:ae:d6:f1:61:
a4:37:bf:bc:54:22:77:14:30:eb:cc:f5:56:78:7e:75:09:ae:
f3:a7:5f:d2:99:89:bc:cd:7d:0c:ea:b2:2f:27:80:38:be:1d:
04:a2:ff:a9:35:e6:77:81:28:2a:80:4d:1e:62:0f:ad:24:46:
ac:b2:34:3e:48:ae:eb:f8:3e:ef:66:08:4d:8e:8d:0b:cc:8d:
0c:f9:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:54:28 2026 by rpki-client