Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: MoUEBX227P4ByzNGDtdYI+Q72sm1mx75laUqcjWYykc=
Subject key identifier: 24:2C:72:65:33:ED:2A:25:B1:D4:C3:2F:69:B9:CD:0A:3F:07:AD:D3
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 36C6975A1C119FEC1AE4426FBF2C3756082FFABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0231
Signing time: Tue 22 Sep 2026 23:40:47 +0000
Manifest this update: Tue 22 Sep 2026 23:35:47 +0000
Manifest next update: Thu 24 Sep 2026 03:12:47 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: 2JwvhpmW03PiHvz+Nw8P33ZYCsro9/8EsoSumLhwRZk=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: ZxxwePdbiW78fNSOv1bBP11xPv9WTPgkb7eypMWI7iQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c6:97:5a:1c:11:9f:ec:1a:e4:42:6f:bf:2c:37:56:08:2f:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Sep 22 23:35:47 2026 GMT
Not After : Sep 24 03:12:47 2026 GMT
Subject: CN=242C726533ED2A25B1D4C32F69B9CD0A3F07ADD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:d4:3d:38:3c:1d:89:90:fd:d2:5d:85:c5:
77:c7:8d:a1:a1:77:bb:a7:3b:e5:f1:fd:a8:74:f6:
f3:37:d5:3b:26:13:93:f1:f8:56:83:4f:61:3f:d2:
f3:ba:27:b3:a4:da:00:a0:b4:4b:7c:5a:1c:fa:79:
ba:7a:7a:0a:b4:6e:01:7a:f4:1f:b6:93:97:c9:df:
cc:dd:a8:75:5f:ac:7b:e0:04:c6:f6:2b:3b:24:d2:
1b:67:13:e4:2a:6b:a0:ec:d4:26:26:de:cf:34:13:
c1:2c:ad:bb:b8:b0:57:8b:86:1f:78:b4:b2:ef:97:
32:ef:0b:ac:ee:d7:18:d7:bf:d7:7b:05:f8:23:70:
74:16:8f:65:0b:48:8f:6e:f1:34:29:89:11:4c:6a:
f9:0d:82:0a:b9:0d:78:9b:3d:bf:d4:3e:ce:eb:58:
75:7c:07:be:18:bc:3d:c6:b9:04:58:e6:0d:df:f7:
d0:d4:c2:36:43:17:6d:90:7e:a1:b2:6e:53:0b:22:
0c:7a:eb:f1:f2:8f:c3:f2:14:7f:8e:34:2b:63:5c:
e4:31:43:27:d5:69:77:9d:55:e7:fa:1d:0b:e3:14:
66:65:0e:fe:f5:14:9e:17:d0:64:34:af:49:73:e7:
b0:e6:a1:69:6b:94:e1:17:90:29:d0:84:b6:55:ee:
ee:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2C:72:65:33:ED:2A:25:B1:D4:C3:2F:69:B9:CD:0A:3F:07:AD:D3
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:24:05:be:4c:5d:f2:3f:8c:a7:29:0f:d8:c9:45:ea:b2:
cf:78:b4:dc:b1:7f:28:52:6a:07:3b:e0:5a:37:6e:37:d5:ed:
64:b2:a9:ef:3e:5d:f8:fc:c9:07:2a:f6:f6:b1:68:71:27:d7:
5a:d2:e9:d3:9a:2e:d9:93:d2:08:54:bd:59:3a:2e:78:4d:97:
0f:53:4a:07:90:5a:ab:b0:99:8c:ff:b1:3a:9c:7f:83:83:87:
92:a8:e8:ed:06:84:4e:7f:fd:c7:2f:54:51:23:17:5f:64:89:
b7:49:88:cc:78:e4:56:55:d2:87:6b:b8:21:a4:87:79:fe:3d:
1f:46:4a:cf:d7:d8:15:1d:56:f8:ba:c6:9f:da:ef:cd:93:7f:
89:bf:85:fd:88:65:47:3c:f7:bf:e4:62:ba:57:c5:02:b4:7c:
f0:81:52:62:dd:d4:18:9e:87:ca:06:26:09:95:0c:54:df:de:
83:f2:9f:cd:7c:26:fe:65:e9:ff:73:a1:99:ab:d3:a2:3e:9b:
2f:33:d3:a7:07:44:ec:95:38:97:83:e4:1a:bb:97:f8:aa:ec:
0c:61:ee:8e:4f:4a:f7:37:6f:23:6a:18:30:30:ab:d8:76:3e:
1b:9d:e9:71:e7:a8:aa:b6:81:bf:20:3b:fa:7d:8c:eb:44:52:
0f:7c:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:59 2026 by rpki-client