Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: FckttsHYq6iOTJ9F5ytcXAWN5dhsR92aqVxeowHQHMU=
Subject key identifier: 31:2F:1D:54:FA:9D:F6:53:03:87:DA:C3:06:5B:D7:5B:80:6C:93:B8
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 5ACC86CA1CB9BE8496C2621A95EEC0C9E27D6F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: B2
Signing time: Fri 21 Aug 2026 16:28:09 +0000
Manifest this update: Fri 21 Aug 2026 16:23:09 +0000
Manifest next update: Sun 23 Aug 2026 16:28:09 +0000
Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: 1fM1pBDdvmxKt8bqCiFqrEFRa4cMncuMtPTedThYLPs=)
2: AS205848.asa (hash: IikDWCRBwwK8sSNZmwImnmeMmSBFyeMb5C9qOOloZyw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:cc:86:ca:1c:b9:be:84:96:c2:62:1a:95:ee:c0:c9:e2:7d:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Aug 21 16:23:09 2026 GMT
Not After : Aug 23 16:28:09 2026 GMT
Subject: CN=312F1D54FA9DF6530387DAC3065BD75B806C93B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:f6:53:d1:70:14:37:18:f4:7e:fe:cb:27:
b2:84:35:14:51:5f:7c:07:44:96:27:a5:21:eb:64:
1a:bb:0d:b8:05:a6:21:e2:a1:1f:4b:43:76:57:50:
bb:09:e0:2b:b7:84:47:3b:c1:27:cf:16:62:2f:c3:
72:be:8b:75:ed:a1:18:8c:ad:82:bc:90:2d:9a:1c:
81:4e:87:6c:a1:c2:8b:65:8e:66:47:72:24:3b:31:
c5:25:61:2e:16:91:fe:18:08:25:76:28:fd:4f:58:
82:53:77:1c:ad:56:bc:e8:ea:af:68:02:03:16:83:
c6:2b:83:e1:f0:27:91:b3:0a:e1:5e:94:aa:cd:96:
6f:28:7e:6e:98:86:e6:28:5b:00:d3:e3:c9:7f:e9:
05:f4:d0:1d:a6:9a:85:d0:d0:d8:8f:ef:16:25:ee:
c8:2d:36:51:47:6c:1b:06:fe:37:8c:a1:33:89:23:
5d:9a:51:28:f1:2d:cb:3c:a8:f8:64:a3:35:76:ad:
0e:59:91:a1:98:c7:95:de:b7:fa:15:c4:df:b4:24:
33:ab:e5:c2:20:b4:d7:3f:c3:7b:4f:eb:90:02:ab:
b1:77:6f:e5:4c:0e:f2:9a:2b:28:c3:cc:8b:1e:97:
f2:c6:9c:d3:04:a1:be:7f:5a:58:01:12:29:37:97:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2F:1D:54:FA:9D:F6:53:03:87:DA:C3:06:5B:D7:5B:80:6C:93:B8
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0d:8e:2c:ba:16:7a:21:3a:8a:b8:88:40:78:88:03:b6:93:
a2:75:3c:a6:10:e4:ef:a3:70:3b:82:9e:32:05:5c:00:22:a4:
d3:76:48:1c:24:62:19:a8:37:4a:a4:22:5b:73:4a:3f:75:71:
c6:93:65:85:4b:99:1d:0a:e4:f7:95:42:31:1c:c4:4b:a7:3c:
8f:7e:a1:c1:86:3d:47:41:e3:cc:41:5a:9d:53:5b:e1:44:5c:
35:ee:a0:a8:90:ac:c1:f4:70:46:fc:29:e7:52:15:d7:90:b8:
f7:5d:2b:75:33:65:d6:b4:88:43:53:92:58:09:ff:03:30:4e:
92:5b:34:77:82:6e:49:03:5c:e4:e9:37:29:b9:14:4e:f3:b5:
36:49:98:a8:6a:06:05:14:62:bd:e7:0a:06:27:2e:21:5f:70:
62:28:5f:df:07:29:c8:97:95:a6:58:0c:ee:ce:b4:99:be:9a:
fe:f5:37:9f:c8:a5:04:5d:09:9c:c4:f9:b4:20:62:e2:47:3f:
2f:37:57:99:ec:a0:f1:eb:a4:d1:67:bc:36:de:4e:9b:6b:b4:
e5:2e:c9:b5:0d:de:85:c1:35:07:c8:ca:5e:3b:0a:61:33:86:
21:b5:7f:9f:f9:ca:14:e7:15:ee:b4:6c:e1:e5:b6:38:88:64:
e4:44:19:6f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWsyGyhy5voSWwmIale7AyeJ9b48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw
Y2ZlMDhmZjAeFw0yNjA4MjExNjIzMDlaFw0yNjA4MjMxNjI4MDlaMDMxMTAvBgNV
BAMTKDMxMkYxRDU0RkE5REY2NTMwMzg3REFDMzA2NUJENzVCODA2QzkzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmfZT0XAUNxj0fv7LJ7KENRRR
X3wHRJYnpSHrZBq7DbgFpiHioR9LQ3ZXULsJ4Cu3hEc7wSfPFmIvw3K+i3XtoRiM
rYK8kC2aHIFOh2yhwotljmZHciQ7McUlYS4Wkf4YCCV2KP1PWIJTdxytVrzo6q9o
AgMWg8Yrg+HwJ5GzCuFelKrNlm8ofm6YhuYoWwDT48l/6QX00B2mmoXQ0NiP7xYl
7sgtNlFHbBsG/jeMoTOJI12aUSjxLcs8qPhkozV2rQ5ZkaGYx5Xet/oVxN+0JDOr
5cIgtNc/w3tP65ACq7F3b+VMDvKaKyjDzIsel/LGnNMEob5/WlgBEik3l7gtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMS8dVPqd9lMDh9rDBlvXW4Bsk7gwHwYDVR0j
BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj
MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6
LUNQOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l
NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMC9ERERBN0M0QzZBOTg1QzQ2NUU2
NkJGREU0QzNFMTFCRDBDRkUwOEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEA2OLLoWeiE6iriIQHiI
A7aTonU8phDk76NwO4KeMgVcACKk03ZIHCRiGag3SqQiW3NKP3VxxpNlhUuZHQrk
95VCMRzES6c8j36hwYY9R0HjzEFanVNb4URcNe6gqJCswfRwRvwp51IV15C4910r
dTNl1rSIQ1OSWAn/AzBOkls0d4JuSQNc5Ok3KbkUTvO1NkmYqGoGBRRivecKBicu
IV9wYihf3wcpyJeVplgM7s60mb6a/vU3n8ilBF0JnMT5tCBi4kc/LzdXmeyg8euk
0We8Nt5Om2u05S7JtQ3ehcE1B8jKXjsKYTOGIbV/n/nKFOcV7rRs4eW2OIhk5EQZ
bw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 18:33:19 2026 by rpki-client