Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: is5mckMiV75DvwCnAS7We+AhMpMQKcIlRQeAZK2nesI=
Subject key identifier: C3:AE:8D:D5:12:B1:6E:8A:F9:DF:3E:9F:2D:F2:15:76:66:53:44:77
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 10067607E09E90BF722BA5227CAACB9EBFA66AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: D1
Signing time: Wed 07 Oct 2026 05:48:42 +0000
Manifest this update: Wed 07 Oct 2026 05:43:42 +0000
Manifest next update: Fri 09 Oct 2026 05:48:42 +0000
Files and hashes: 1: AS205848.asa (hash: IikDWCRBwwK8sSNZmwImnmeMmSBFyeMb5C9qOOloZyw=)
2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: K2l7+QyFkhvRmVimC1B/xmVSGyfThvLsHCiqs+UMM6Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 05:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:06:76:07:e0:9e:90:bf:72:2b:a5:22:7c:aa:cb:9e:bf:a6:6a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Oct 7 05:43:42 2026 GMT
Not After : Oct 9 05:48:42 2026 GMT
Subject: CN=C3AE8DD512B16E8AF9DF3E9F2DF2157666534477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:92:bc:cf:ee:f8:53:09:3c:e6:b8:be:38:
33:62:30:7c:6f:8d:e4:e0:a7:7c:a0:62:54:b4:35:
6b:e5:0e:b1:a9:b7:0c:05:50:6b:a9:ae:04:38:14:
a9:41:a3:f8:7c:d4:2c:32:61:ea:50:af:39:bc:49:
57:e0:23:c1:4b:1c:be:80:c7:77:4a:c5:63:c1:20:
41:ea:63:1c:29:5c:bf:2a:ad:22:13:0c:88:21:25:
6d:64:bf:2a:36:1a:6c:a5:9d:94:57:a6:4d:4d:b6:
2e:a5:6d:c4:41:2a:e1:4b:2d:18:ca:72:0b:62:2b:
63:26:fc:c9:4a:57:23:50:67:b2:eb:38:3e:e9:8e:
5b:94:85:f0:32:d8:5f:13:b8:d4:96:9e:64:41:ae:
fe:21:c8:1f:a4:51:10:63:f5:97:9f:2d:09:6d:41:
1c:46:10:45:ae:35:74:a3:5c:40:0c:de:b7:ac:a9:
9f:6d:11:a2:73:29:fe:0d:88:52:77:36:b5:99:b9:
1c:a0:14:2c:40:3b:fd:cb:2b:73:96:31:26:de:dd:
48:dc:f8:9e:62:8c:5d:f3:36:85:eb:c7:e2:ec:89:
47:c1:30:b6:c3:e0:f4:bf:e5:7e:25:8e:de:e1:51:
54:24:5f:07:a7:de:02:7d:78:2e:68:40:7e:9e:2b:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:8D:D5:12:B1:6E:8A:F9:DF:3E:9F:2D:F2:15:76:66:53:44:77
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:34:98:13:75:da:14:73:26:d4:a6:74:82:dc:ba:77:32:
0c:36:76:78:b3:d8:60:89:0e:c1:2f:ef:16:4e:00:fe:f1:ff:
98:74:4d:10:18:e0:7d:81:f8:d5:bb:ee:21:87:7a:02:58:ca:
a9:92:d0:76:92:75:3b:e1:6e:ea:71:6a:e2:3f:b6:82:9d:a5:
84:f2:18:73:7d:f6:8f:2e:8b:bc:2a:aa:04:7a:1a:1a:2e:d9:
b0:a1:8a:52:98:be:93:0c:0b:f2:95:91:2f:94:d4:10:1d:8a:
04:ca:7f:3a:7a:96:7e:ea:6c:34:c6:46:67:09:25:9e:9c:da:
eb:6e:0d:57:72:b6:bf:d9:22:81:46:08:00:20:fd:e8:6e:6a:
a6:ff:8b:a8:37:d6:b2:9d:f6:34:c7:8a:78:5e:b3:4b:d8:f5:
3d:8d:c5:5a:b4:a3:1d:d7:50:92:2b:ea:cf:26:74:e5:8c:5a:
41:e7:ea:c2:48:a3:21:42:36:51:65:64:8d:0f:5e:21:6c:6b:
d9:28:32:7a:89:55:29:a4:ff:49:f6:24:de:89:03:ab:eb:8f:
14:67:7d:08:ab:25:75:4f:87:f7:52:9b:c1:43:2e:d2:e1:21:
ff:67:8a:72:cb:3f:5d:7f:11:ac:e8:9a:7c:c6:72:cd:73:fd:
e3:e0:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:43 2026 by rpki-client