Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: UZtjampszk9orJWe+PY67MndTZ4E1qDJujDL64PiGwg=
Subject key identifier: 5E:62:3B:31:97:56:AB:CD:10:E5:17:50:3D:D4:6F:6E:48:E5:69:3D
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 389F89097D7E151271F5FB2FFC6A2E6C1C9D9D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 8B
Signing time: Wed 24 Jun 2026 10:01:07 +0000
Manifest this update: Wed 24 Jun 2026 09:56:07 +0000
Manifest next update: Fri 26 Jun 2026 10:01:07 +0000
Files and hashes: 1: AS205848.asa (hash: RQF3LRWfhi4ThAqwiOqIQhEXzfuBwp4KojFsAWNe1XE=)
2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: MVVCr8ZHmzxLUKvs91QsO7TuIYz/lz+nx7m+slNq7po=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:9f:89:09:7d:7e:15:12:71:f5:fb:2f:fc:6a:2e:6c:1c:9d:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Jun 24 09:56:07 2026 GMT
Not After : Jun 26 10:01:07 2026 GMT
Subject: CN=5E623B319756ABCD10E517503DD46F6E48E5693D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a2:36:2a:bb:42:4d:56:d2:67:2c:d9:8e:68:
ec:db:53:f5:78:cc:c7:c1:40:e5:c6:cd:2a:d9:f3:
3a:c7:d0:93:5e:08:64:a9:02:05:1c:b0:8a:a9:f6:
4c:c9:68:d7:7c:a1:78:35:8c:bd:97:17:a8:9e:ee:
74:97:90:c0:9e:e1:e7:40:17:9c:4e:55:d3:8c:42:
dd:dd:ab:10:77:62:96:56:8c:cc:21:bf:31:dd:f2:
37:cf:b3:ed:fc:2f:94:c4:2d:9d:02:51:b1:d8:63:
83:93:dc:74:df:49:8f:1a:ce:48:96:da:5f:82:df:
ea:86:e4:c2:dd:88:5e:6b:ec:64:21:51:bc:f4:ad:
13:6b:1b:0c:3a:06:2e:f7:52:79:f3:f3:d8:7d:c6:
c1:60:4e:c0:0f:c8:d1:9e:f0:39:1a:15:77:d2:cb:
43:35:66:8f:9a:ad:13:bd:00:68:f0:e2:d0:02:52:
79:5b:fc:21:0c:24:0c:0c:ff:03:9f:0c:3e:e4:58:
02:aa:68:f6:d4:a9:10:8e:3e:22:ec:00:e0:27:a4:
57:c6:e1:8c:79:31:7f:d7:71:71:a2:34:ac:bc:d2:
ae:05:aa:ea:6d:ad:8d:d0:7f:e9:7c:fd:5c:68:da:
3a:a5:09:f6:b4:ee:bc:58:97:68:29:f0:52:e0:af:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:3B:31:97:56:AB:CD:10:E5:17:50:3D:D4:6F:6E:48:E5:69:3D
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:47:e7:73:1f:90:ab:69:dd:fc:dc:ba:3a:b1:4e:4c:97:0f:
fb:17:e6:93:dd:ec:55:9f:d3:ab:10:28:ad:f5:a4:ed:31:1a:
50:49:ac:cd:c8:ea:b4:9a:18:f1:52:ea:2b:b1:34:a8:92:40:
be:1a:45:52:22:52:1d:67:a3:ed:36:b7:b8:7c:04:74:cc:cb:
37:f8:ef:57:b6:c3:b8:06:53:f6:4f:d1:10:6c:1b:fb:a1:a9:
ce:c6:08:45:c7:a8:d0:68:85:d0:5f:3f:3c:ef:f5:77:82:ea:
60:20:b1:b2:c3:4d:96:5e:34:b5:74:46:f8:67:2e:c4:84:59:
77:30:f7:43:c8:06:1c:fd:01:e1:b2:72:3a:12:a7:80:38:91:
1a:5a:0c:e8:92:5d:e2:5b:c8:01:d8:a9:b6:c9:6e:2e:a2:d5:
30:77:be:32:a3:6c:81:d0:1b:cc:2e:5d:28:c3:71:f1:a6:25:
64:f6:ee:1d:31:37:ee:5b:49:96:0c:c6:58:57:db:7b:bb:1a:
ad:80:51:d7:64:5e:76:80:ae:df:f6:8c:81:2d:27:4c:63:9a:
28:11:65:ab:2a:93:02:1c:52:e8:fa:fe:08:f5:97:7f:5a:e3:
61:6c:b4:8e:b8:1d:ec:36:e0:e4:77:f4:37:ed:c3:4c:02:9d:
f7:53:6d:01
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOJ+JCX1+FRJx9fsv/GoubBydnTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw
Y2ZlMDhmZjAeFw0yNjA2MjQwOTU2MDdaFw0yNjA2MjYxMDAxMDdaMDMxMTAvBgNV
BAMTKDVFNjIzQjMxOTc1NkFCQ0QxMEU1MTc1MDNERDQ2RjZFNDhFNTY5M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlojYqu0JNVtJnLNmOaOzbU/V4
zMfBQOXGzSrZ8zrH0JNeCGSpAgUcsIqp9kzJaNd8oXg1jL2XF6ie7nSXkMCe4edA
F5xOVdOMQt3dqxB3YpZWjMwhvzHd8jfPs+38L5TELZ0CUbHYY4OT3HTfSY8azkiW
2l+C3+qG5MLdiF5r7GQhUbz0rRNrGww6Bi73Unnz89h9xsFgTsAPyNGe8DkaFXfS
y0M1Zo+arRO9AGjw4tACUnlb/CEMJAwM/wOfDD7kWAKqaPbUqRCOPiLsAOAnpFfG
4Yx5MX/XcXGiNKy80q4FquptrY3Qf+l8/Vxo2jqlCfa07rxYl2gp8FLgr8H1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUXmI7MZdWq80Q5RdQPdRvbkjlaT0wHwYDVR0j
BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj
MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6
LUNQOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l
NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMC9ERERBN0M0QzZBOTg1QzQ2NUU2
NkJGREU0QzNFMTFCRDBDRkUwOEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUfncx+Qq2nd/Ny6OrFO
TJcP+xfmk93sVZ/TqxAorfWk7TEaUEmszcjqtJoY8VLqK7E0qJJAvhpFUiJSHWej
7Ta3uHwEdMzLN/jvV7bDuAZT9k/REGwb+6GpzsYIRceo0GiF0F8/PO/1d4LqYCCx
ssNNll40tXRG+GcuxIRZdzD3Q8gGHP0B4bJyOhKngDiRGloM6JJd4lvIAdiptslu
LqLVMHe+MqNsgdAbzC5dKMNx8aYlZPbuHTE37ltJlgzGWFfbe7sarYBR12RedoCu
3/aMgS0nTGOaKBFlqyqTAhxS6Pr+CPWXf1rjYWy0jrgd7Dbg5Hf0N+3DTAKd91Nt
AQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:38 2026 by rpki-client