Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: sFxjDHywSxfvajSb9/chSLnsvAQ9jCrSWN2acbYmDwc=
Subject key identifier: D5:07:23:65:66:6C:2F:78:98:8E:BE:6D:A1:72:22:0D:BB:FA:94:C8
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 46315CDC0B360ADC14C3C657F176E9981CDE4062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 47
Signing time: Mon 16 Mar 2026 01:58:04 +0000
Manifest this update: Mon 16 Mar 2026 01:53:04 +0000
Manifest next update: Wed 18 Mar 2026 01:58:04 +0000
Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: lDh4ac0KfRfdhTPZIkhhsJdjyIQVEgWdo9dDD06AGXQ=)
2: AS205848.asa (hash: fTS5ERLhS7vaYmpMsvIfT8uNgkhxssArAc3C3S/JQfU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:31:5c:dc:0b:36:0a:dc:14:c3:c6:57:f1:76:e9:98:1c:de:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Mar 16 01:53:04 2026 GMT
Not After : Mar 18 01:58:04 2026 GMT
Subject: CN=D5072365666C2F78988EBE6DA172220DBBFA94C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:4d:5d:58:f4:0a:91:53:12:ca:97:84:fa:
db:71:f3:e4:2f:88:35:3f:64:c2:e7:f0:3a:ec:3a:
23:bf:49:62:e4:36:1b:5f:95:44:6c:7f:04:59:82:
4b:77:55:ff:60:fd:0c:fa:4e:bf:37:4a:a5:99:13:
99:0c:38:51:18:61:45:bc:f1:d3:09:7e:8d:ab:94:
1d:25:5e:fa:d9:62:b0:f1:bf:0f:36:ef:27:f1:82:
89:f5:23:51:41:f2:06:12:79:78:79:78:a3:55:37:
75:52:ae:80:3e:ad:ae:3d:46:f9:76:63:15:d1:33:
47:55:cd:e8:4a:9c:9d:94:ab:bf:54:c1:e1:07:23:
ad:da:b9:10:4b:25:89:13:5a:fe:74:47:8c:44:ac:
c3:d3:f3:19:04:cf:49:19:1d:66:2c:40:cd:92:07:
16:76:e0:ae:1f:81:12:4a:2d:6e:70:3d:6d:a6:35:
8d:ef:8b:df:e8:e4:11:10:2f:86:7a:ac:bc:f2:e4:
1c:27:3c:4f:d4:9a:b9:48:24:3d:ba:52:25:d9:e4:
3e:a8:13:71:8d:df:33:f3:54:ba:f7:38:9a:04:b1:
41:df:26:05:d3:e1:f4:e1:ad:65:08:74:1d:cb:cb:
cd:16:cc:8d:05:3c:2f:0d:d3:44:81:cd:f6:d9:29:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:07:23:65:66:6C:2F:78:98:8E:BE:6D:A1:72:22:0D:BB:FA:94:C8
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:13:24:a1:9a:01:ae:61:18:b0:f8:8f:86:24:87:e8:f0:b5:
4a:6d:4b:9c:ce:b4:8c:b3:83:87:28:a4:48:d5:f8:77:26:f0:
28:3f:b0:74:5e:06:85:eb:c8:d7:0e:c0:94:21:86:7d:b4:33:
e8:f7:90:14:73:0a:da:c8:bf:3d:d3:d8:6d:68:19:10:5d:f3:
9b:d9:70:3f:2a:2d:e7:bd:0a:1a:7f:38:cd:3f:c4:f1:f8:3e:
0b:a7:17:80:02:91:c1:06:86:73:d8:89:2d:a5:ff:4f:0b:29:
0e:b8:25:0f:40:97:f2:84:87:86:a0:95:8f:ca:93:eb:17:bf:
2c:b5:5d:a1:f3:e2:f0:c1:92:78:b3:44:4d:72:d0:d9:74:58:
35:cd:ce:4a:dd:26:14:1c:07:60:ed:61:34:ec:ed:c6:03:f5:
9c:c4:48:2a:d1:a0:83:56:54:81:67:2c:15:7c:22:98:55:6b:
d6:81:d1:46:a9:b5:e2:03:3d:28:4c:da:04:11:a7:9b:cf:b6:
2f:ca:52:34:39:f1:9a:23:f8:8d:a4:e4:b9:59:2e:08:19:b4:
1f:83:45:38:08:0f:18:88:64:1a:f1:d2:06:1c:06:0c:e7:61:
53:d2:d6:99:9e:b6:69:f2:c0:39:64:0a:81:c2:5a:22:2b:38:
77:f5:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:13:52 2026 by rpki-client