Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: MC0IKbSXYIuVTYv4XUoaEIFyNMjYQ2po2JuKbmwGMhU=
Subject key identifier: B9:DA:F3:B4:98:C3:4C:85:CF:BF:B1:28:C5:DA:A4:D0:C6:A4:26:BC
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 01F3B4CE4189C85AD0DF5E73E7DC36ECB09D2B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 65
Signing time: Wed 29 Apr 2026 15:58:28 +0000
Manifest this update: Wed 29 Apr 2026 15:53:28 +0000
Manifest next update: Fri 01 May 2026 15:58:28 +0000
Files and hashes: 1: AS205848.asa (hash: byHj8V8+dZsMDMexV561rIcgjjbafjxJ7s3hHFIHNC4=)
2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: Hrn/m7GvFBb7ulF9JAHH0+dzhfJXDp06wcNDykdeJsA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f3:b4:ce:41:89:c8:5a:d0:df:5e:73:e7:dc:36:ec:b0:9d:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Apr 29 15:53:28 2026 GMT
Not After : May 1 15:58:28 2026 GMT
Subject: CN=B9DAF3B498C34C85CFBFB128C5DAA4D0C6A426BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:db:79:83:b3:57:e2:5a:2c:61:03:5b:89:
4c:a7:9c:06:0d:e4:81:8c:c9:c5:d3:f4:de:14:cb:
10:24:a1:06:59:8e:50:2f:65:e8:f6:c6:b4:41:d1:
7a:2c:54:93:17:47:3c:49:69:8b:d9:b6:01:50:d2:
a4:81:c4:69:e8:8a:cd:5a:e9:80:75:4b:a6:0d:fa:
86:aa:b7:26:06:01:00:07:da:34:af:53:00:27:2b:
51:3c:ab:84:7c:d5:80:14:74:d9:2d:3f:6a:ec:8f:
77:cf:5f:ad:76:10:4a:cc:d3:88:31:aa:91:16:55:
d0:a2:a1:8f:4f:07:dc:e9:14:e0:d8:bd:9d:db:6e:
66:cc:a9:59:c2:e3:66:24:25:00:f8:e4:50:f8:0f:
68:36:74:36:cf:66:5e:0e:90:49:bd:41:cf:8b:a7:
e5:7c:e2:4c:ca:25:69:d3:7f:b8:f5:cc:9b:27:03:
76:bd:f3:09:41:c8:62:31:43:e4:e4:5a:04:45:93:
87:70:81:7b:ff:a1:7f:3b:f6:50:75:07:2f:ea:d0:
fc:61:10:f4:e8:77:35:ee:1b:f7:e1:c0:05:55:98:
31:7f:39:51:d9:1f:69:57:f9:03:3d:a6:55:af:49:
2f:36:92:8a:40:62:73:19:be:e8:d6:78:88:c2:b1:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:F3:B4:98:C3:4C:85:CF:BF:B1:28:C5:DA:A4:D0:C6:A4:26:BC
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9b:cc:b2:65:d2:54:e4:09:4e:ce:b2:35:5d:97:47:9f:8d:
d8:c7:86:41:cb:0d:80:de:28:d8:75:2b:76:c1:3e:aa:b7:52:
8a:2e:3c:a8:0d:cc:00:2e:bf:69:4f:0d:18:61:7f:92:ee:ce:
66:ed:bf:8b:07:41:16:8b:0c:a0:3b:38:ab:35:71:4b:ab:88:
f2:4e:63:8a:76:2f:b1:7a:05:41:37:29:71:43:c2:4b:14:57:
fd:7a:4a:03:10:64:55:7e:c7:fd:3a:5c:a9:e7:47:7d:e4:df:
6a:e8:70:f8:61:de:91:18:44:57:53:e6:3f:df:a7:1b:91:5d:
53:6f:2e:93:8e:c8:8d:ec:c9:de:8e:27:49:32:6a:4f:41:53:
fa:53:36:66:e3:5c:40:24:e9:29:11:31:ca:b8:2d:f8:5a:5a:
5a:74:11:5e:6c:16:bd:6c:6c:c3:b2:93:0c:61:f1:78:d5:1a:
0b:89:00:a1:bc:b7:eb:87:50:a4:42:89:d4:56:d3:f6:4c:cd:
fe:97:8d:ce:33:b7:ac:37:6b:59:33:a9:01:f0:5b:91:c9:84:
ec:b7:df:93:9e:66:41:75:a1:72:20:a5:26:5f:06:89:55:92:
a2:af:05:5e:03:21:30:ec:16:cd:46:07:9f:84:a0:28:ad:2f:
fd:57:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:55:05 2026 by rpki-client