Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: e0QuCBjAq1XZtsgGhlMxgUCvOZoa0zGGiVrFocLe1HM=
Subject key identifier: D1:A0:EB:A8:36:88:06:5D:79:CA:F8:97:A2:47:3E:7B:AE:B9:F5:AE
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 22F83BC88AC0FCB2327824E3480D73CB2F3C975D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0278
Signing time: Sun 15 Nov 2026 10:05:18 +0000
Manifest this update: Sun 15 Nov 2026 10:00:18 +0000
Manifest next update: Mon 16 Nov 2026 11:00:18 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: tUk8Sk1Yamkf7SPPW32675Us2wznS0U2rPIRV5Bcs48=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: ZxxwePdbiW78fNSOv1bBP11xPv9WTPgkb7eypMWI7iQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f8:3b:c8:8a:c0:fc:b2:32:78:24:e3:48:0d:73:cb:2f:3c:97:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Nov 15 10:00:18 2026 GMT
Not After : Nov 16 11:00:18 2026 GMT
Subject: CN=D1A0EBA83688065D79CAF897A2473E7BAEB9F5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:1b:56:b5:00:43:52:81:3c:53:26:11:c8:
00:6f:9c:85:d2:8c:d1:41:80:18:17:95:32:f9:f2:
d6:cd:7e:cb:a6:79:10:0d:d9:81:83:00:8e:d7:bc:
65:5f:b6:0d:2d:ec:d9:b7:cd:2e:c1:17:55:20:7a:
1e:48:11:fe:30:22:c5:7a:cd:91:db:30:0e:63:06:
91:98:ca:9d:9c:ca:b1:13:ad:72:9d:00:9d:54:d0:
8b:f1:4d:b1:bc:b9:0d:92:16:0e:e4:e2:62:35:87:
d9:f0:97:44:6d:20:cc:7f:93:98:c7:42:44:d4:5d:
32:09:d4:c5:54:37:ae:e7:d7:05:5c:43:4d:7b:e3:
bf:5c:4a:f5:64:f1:de:92:22:14:59:7d:2d:70:02:
9c:21:f3:5b:e8:55:8d:59:f3:63:b8:b5:df:0f:38:
d0:bf:15:0e:6f:cb:74:4d:82:d1:83:18:a3:72:dc:
e6:03:17:cc:4e:cd:08:ac:1d:6e:80:53:0d:d6:08:
a8:43:25:7c:b4:50:ee:9f:86:3a:24:13:e2:2d:ff:
bf:f1:42:b8:4f:3d:21:65:41:34:17:3d:2f:2d:d8:
bb:df:04:52:ac:69:ae:20:ac:bc:2f:47:c6:f8:41:
51:da:52:9d:05:3c:1e:d6:dc:3d:dc:3f:9b:f5:10:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A0:EB:A8:36:88:06:5D:79:CA:F8:97:A2:47:3E:7B:AE:B9:F5:AE
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4f:43:16:a6:46:34:97:7a:f7:56:15:f6:51:1f:f9:52:71:
12:5d:58:e4:3f:9f:a7:76:e8:f5:94:75:55:57:ad:26:31:61:
06:4c:ae:08:ce:40:dc:b9:33:80:7e:8f:1f:4f:8b:d4:ad:b2:
7e:2a:d9:97:7c:b8:7e:e1:ac:2c:85:59:f7:b9:d4:b5:a9:de:
11:58:74:df:27:bc:b4:4a:32:8b:cb:30:bf:b8:c2:96:3b:1c:
08:ab:f0:01:60:cb:4d:42:20:e7:9f:65:c1:5f:c0:90:af:83:
b1:05:72:c1:b0:f1:be:ff:5b:61:fa:b9:c8:ba:cb:30:7b:59:
58:c3:39:3d:2e:08:93:72:72:25:01:6f:1b:41:1e:48:f7:cc:
54:66:1a:12:78:e9:fb:ac:72:5e:39:ae:6f:ce:15:85:ad:8f:
b6:2e:a2:94:63:56:7c:e8:46:38:ac:6b:a3:16:2a:c2:ca:e9:
aa:a6:d8:05:bb:a3:89:bd:eb:32:e6:85:cf:6a:aa:00:0c:bc:
35:6e:eb:c8:3f:c2:64:54:1b:8b:31:b2:45:82:46:53:f0:91:
9c:66:ed:6f:c8:c6:19:05:02:c8:49:6d:7a:6f:6a:6a:e8:29:
fa:7a:a8:ce:4d:79:db:c5:97:1b:65:b1:4e:de:68:6b:17:be:
b4:2b:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:17 2026 by rpki-client