Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: 6ao1Gy/ZkT25XnRMM1ZCodx9qqQZgqzzhNnw6EAhMks=
Subject key identifier: 49:C0:54:21:B4:09:9A:18:24:F0:F9:72:B7:C2:1D:73:D8:C3:BD:5A
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 2EA4097F177203075C6EFFAA361AF304FBADBE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0125
Signing time: Wed 04 Mar 2026 22:14:38 +0000
Manifest this update: Wed 04 Mar 2026 22:09:38 +0000
Manifest next update: Thu 05 Mar 2026 23:16:38 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: MMY6hRRAxhm7iHDJCh3FITv9US53GOBHL44RFp9RAdk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 23:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a4:09:7f:17:72:03:07:5c:6e:ff:aa:36:1a:f3:04:fb:ad:be:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Mar 4 22:09:38 2026 GMT
Not After : Mar 5 23:16:38 2026 GMT
Subject: CN=49C05421B4099A1824F0F972B7C21D73D8C3BD5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:63:5d:ac:f1:2e:e7:9f:7e:fb:21:f2:34:
6f:51:f8:c2:0d:8c:4d:8b:b4:ae:26:13:a9:b3:0b:
69:7c:e8:7b:4f:45:18:b2:1a:d7:a9:0e:4b:fe:25:
3d:69:64:35:05:21:7f:5b:0d:de:a9:f4:2f:e4:a5:
af:c6:58:41:40:cc:73:c9:52:a1:f2:29:24:06:de:
5e:8c:d2:5a:de:7a:20:67:ab:06:01:85:06:13:32:
01:de:af:d9:72:d5:c9:eb:c3:6a:c0:20:19:f2:90:
de:d4:7e:df:da:17:2a:3f:52:2c:ab:5e:5b:9e:d8:
3a:98:7f:42:ab:43:6c:2e:df:8f:39:e9:db:91:5a:
f2:e3:52:f5:4e:9c:23:ce:62:80:13:07:ec:5b:be:
11:16:0d:4a:1e:38:30:6b:d6:24:03:ba:4a:e5:c4:
f9:51:97:0c:03:2c:40:7a:3c:0e:05:b3:58:cc:6a:
5a:38:f8:a3:ab:04:a2:c3:12:ab:d7:d6:ad:8f:79:
a0:0b:87:e3:07:41:6d:79:c9:a2:7a:2b:f4:74:f0:
f4:69:dc:88:85:17:b4:d8:90:9d:07:77:8b:17:7c:
f3:ea:9e:90:d0:aa:8a:9f:87:35:00:a1:de:c6:17:
f8:94:c9:fb:99:f6:a5:8b:e0:ff:d4:0c:25:0f:6a:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:54:21:B4:09:9A:18:24:F0:F9:72:B7:C2:1D:73:D8:C3:BD:5A
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7e:64:61:8a:86:56:6a:c3:63:14:39:b3:bb:74:ab:c5:1e:
6e:24:fb:2a:74:42:ae:a8:3e:5d:e2:9d:ab:fc:de:83:fe:8b:
d5:3c:17:04:e1:71:e9:c4:48:f8:38:e2:25:db:68:6c:86:56:
6b:4a:4d:64:14:4b:6b:4e:db:fb:0e:e5:44:fe:ca:5c:94:3b:
28:d2:67:11:26:b0:1e:b2:c1:8e:8d:b4:5d:0f:d6:df:75:95:
78:e4:9d:bd:f1:af:6a:fe:c2:54:18:96:1c:f6:37:85:ac:8f:
d6:18:51:8a:f5:5e:e0:e7:33:69:6d:a0:81:e0:74:94:39:06:
d5:26:35:cc:c4:d7:0f:62:ba:b5:f2:6b:50:6f:63:34:a6:fe:
9f:46:a5:be:29:fd:53:38:f6:7e:3c:1e:95:eb:f3:8d:91:e4:
9b:7a:7c:a2:d8:b6:95:61:83:df:4a:27:7e:9b:c1:6b:ec:bc:
08:c3:f6:a1:1e:bf:1e:1c:8e:c2:e6:a4:5f:50:8e:38:b5:14:
74:60:31:ea:17:ce:01:2f:21:74:ca:63:a8:37:ce:de:0b:f9:
97:a0:66:32:5b:f3:ed:5e:09:a8:67:9f:db:41:24:3a:bc:c3:
b8:d1:bf:72:4a:f1:eb:b8:26:b1:1e:94:bd:9c:09:73:c6:01:
1e:39:4f:8b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIULqQJfxdyAwdcbv+qNhrzBPutvlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx
YTgxOTYwZjAeFw0yNjAzMDQyMjA5MzhaFw0yNjAzMDUyMzE2MzhaMDMxMTAvBgNV
BAMTKDQ5QzA1NDIxQjQwOTlBMTgyNEYwRjk3MkI3QzIxRDczRDhDM0JENUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdmNdrPEu559++yHyNG9R+MIN
jE2LtK4mE6mzC2l86HtPRRiyGtepDkv+JT1pZDUFIX9bDd6p9C/kpa/GWEFAzHPJ
UqHyKSQG3l6M0lreeiBnqwYBhQYTMgHer9ly1cnrw2rAIBnykN7Uft/aFyo/Uiyr
Xlue2DqYf0KrQ2wu34856duRWvLjUvVOnCPOYoATB+xbvhEWDUoeODBr1iQDukrl
xPlRlwwDLEB6PA4Fs1jMalo4+KOrBKLDEqvX1q2PeaALh+MHQW15yaJ6K/R08PRp
3IiFF7TYkJ0Hd4sXfPPqnpDQqoqfhzUAod7GF/iUyfuZ9qWL4P/UDCUPauCBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUScBUIbQJmhgk8Plyt8Idc9jDvVowHwYDVR0j
BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi
NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx
QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i
MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2
NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOH5kYYqGVmrDYxQ5s7t0
q8UebiT7KnRCrqg+XeKdq/zeg/6L1TwXBOFx6cRI+DjiJdtobIZWa0pNZBRLa07b
+w7lRP7KXJQ7KNJnESawHrLBjo20XQ/W33WVeOSdvfGvav7CVBiWHPY3hayP1hhR
ivVe4OczaW2ggeB0lDkG1SY1zMTXD2K6tfJrUG9jNKb+n0alvin9Uzj2fjwelevz
jZHkm3p8oti2lWGD30onfpvBa+y8CMP2oR6/HhyOwuakX1COOLUUdGAx6hfOAS8h
dMpjqDfO3gv5l6BmMlvz7V4JqGef20EkOrzDuNG/ckrx67gmsR6UvZwJc8YBHjlP
iw==
-----END CERTIFICATE-----
Generated at Thu Mar 5 15:52:27 2026 by rpki-client