Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: 58qK8R/LYm1AAMlK8Jk1Mm38x6PzHa4YDNYTrk7asEI=
Subject key identifier: 18:99:97:A1:8C:1C:91:F1:26:83:BB:A1:35:DB:48:C3:6A:08:9A:90
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 1711EC435B5A3D87D7389F91BDF180F4297FEE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0181
Signing time: Tue 12 May 2026 21:35:12 +0000
Manifest this update: Tue 12 May 2026 21:30:12 +0000
Manifest next update: Wed 13 May 2026 23:09:12 +0000
Files and hashes: 1: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
2: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: j3SKswvomaf0pQa3tR4UENaqfEPglO/+V2L+C79mIDY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:11:ec:43:5b:5a:3d:87:d7:38:9f:91:bd:f1:80:f4:29:7f:ee:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: May 12 21:30:12 2026 GMT
Not After : May 13 23:09:12 2026 GMT
Subject: CN=189997A18C1C91F12683BBA135DB48C36A089A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:35:3b:da:9a:a2:c3:cb:54:d1:0a:4d:f4:
5b:a5:68:f5:46:94:8c:02:ea:74:01:1f:44:1b:8a:
4c:9f:5a:09:be:d6:69:0e:e5:91:05:91:d4:67:b7:
cd:37:a4:10:66:6e:98:77:e2:58:b7:87:57:00:2c:
b4:9b:a5:51:74:ee:ac:b5:a6:f9:1d:28:18:61:b9:
a3:54:41:30:14:d1:89:bd:b3:3a:4b:9b:47:11:a5:
8e:3d:c3:34:21:f6:b3:c7:85:f5:79:3f:a9:1c:a5:
e0:67:65:27:36:f5:d3:10:a7:ff:da:22:ea:7e:97:
a8:7a:b8:52:19:ab:6b:02:d1:d2:2b:38:22:af:3a:
d6:9e:df:f5:d2:64:94:8a:54:59:5a:5f:78:36:12:
ec:82:c6:77:e6:ce:28:d5:45:42:77:98:04:f9:c0:
67:3f:cf:cf:4f:7f:7d:c3:4f:2c:17:65:03:65:78:
22:ca:d4:ad:65:91:9e:d9:bd:af:ae:49:47:74:99:
f2:4c:99:55:8c:2d:5a:92:23:2b:96:41:2c:70:aa:
52:cc:b0:2c:a9:ab:14:fc:c4:5e:0b:af:b0:f2:bc:
c5:2d:61:93:38:1d:ad:93:d8:41:7e:55:f4:74:6e:
cb:f7:79:2e:89:dc:13:2d:7e:9a:6e:d7:3c:dd:e3:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:99:97:A1:8C:1C:91:F1:26:83:BB:A1:35:DB:48:C3:6A:08:9A:90
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6a:b3:03:30:42:6b:6c:b9:92:6a:07:f5:aa:77:3a:fb:90:
f8:c0:3b:ea:62:fc:b0:4d:9e:f4:37:fc:f8:20:99:1c:b2:83:
51:39:c2:a4:7c:50:90:c8:bf:52:11:f0:0d:59:f4:e9:b5:6c:
25:c9:4d:4e:af:07:84:7b:0a:11:15:70:d0:57:2a:40:13:a4:
82:55:a2:15:1c:2a:84:0e:b2:f2:ae:3b:4c:2a:fb:b0:9a:d8:
f9:19:de:97:d2:29:9d:bf:11:91:24:c8:c3:cc:f8:b6:d0:a1:
f8:73:17:fb:f7:9b:76:3d:8a:63:51:13:6c:67:55:47:42:d2:
cd:30:ac:da:a2:98:4c:d1:c4:c0:8d:72:d8:5d:f9:65:0e:5f:
a0:fe:cd:26:8c:f8:5a:7f:b9:b9:34:07:51:eb:b3:4c:bc:8f:
f1:9a:1b:81:33:3d:e2:19:7a:e1:f2:1d:51:25:bb:a8:a8:c8:
fd:28:8b:13:34:f2:63:e5:f4:bc:f4:cb:93:be:93:6f:54:bc:
45:33:bd:e9:f3:13:bb:e2:99:d6:e6:55:dc:c4:9b:33:92:36:
76:13:bc:d2:a4:86:87:89:fd:90:3f:2c:ca:91:57:8d:9f:97:
7f:b5:e1:24:df:44:9b:e5:2c:54:e8:97:98:53:5b:00:10:ae:
7e:02:bd:de
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFxHsQ1taPYfXOJ+RvfGA9Cl/7nkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGRkNGNmYTIxZDgzYWJkOGI1NjU0OTgxODA2ODBkMTQx
YTgxOTYwZjAeFw0yNjA1MTIyMTMwMTJaFw0yNjA1MTMyMzA5MTJaMDMxMTAvBgNV
BAMTKDE4OTk5N0ExOEMxQzkxRjEyNjgzQkJBMTM1REI0OEMzNkEwODlBOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMjU72pqiw8tU0QpN9FulaPVG
lIwC6nQBH0QbikyfWgm+1mkO5ZEFkdRnt803pBBmbph34li3h1cALLSbpVF07qy1
pvkdKBhhuaNUQTAU0Ym9szpLm0cRpY49wzQh9rPHhfV5P6kcpeBnZSc29dMQp//a
Iup+l6h6uFIZq2sC0dIrOCKvOtae3/XSZJSKVFlaX3g2EuyCxnfmzijVRUJ3mAT5
wGc/z89Pf33DTywXZQNleCLK1K1lkZ7Zva+uSUd0mfJMmVWMLVqSIyuWQSxwqlLM
sCypqxT8xF4Lr7DyvMUtYZM4Ha2T2EF+VfR0bsv3eS6J3BMtfppu1zzd48gBAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGJmXoYwckfEmg7uhNdtIw2oImpAwHwYDVR0j
BBgwFoAUDdTPoh2Dq9i1ZUmBgGgNFBqBlg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjEyNTMxYzgtYjI0OC00NDMxLWExOGUtNGU2ZGM4ZDZi
NmU4LzAvMERENENGQTIxRDgzQUJEOEI1NjU0OTgxODA2ODBEMTQxQTgxOTYwRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RkVFBvaDJEcTlpMVpVbUJnR2dORkJx
QmxnOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMTI1MzFjOC1i
MjQ4LTQ0MzEtYTE4ZS00ZTZkYzhkNmI2ZTgvMC8wREQ0Q0ZBMjFEODNBQkQ4QjU2
NTQ5ODE4MDY4MEQxNDFBODE5NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWqzAzBCa2y5kmoH9ap3
OvuQ+MA76mL8sE2e9Df8+CCZHLKDUTnCpHxQkMi/UhHwDVn06bVsJclNTq8HhHsK
ERVw0FcqQBOkglWiFRwqhA6y8q47TCr7sJrY+Rnel9Ipnb8RkSTIw8z4ttCh+HMX
+/ebdj2KY1ETbGdVR0LSzTCs2qKYTNHEwI1y2F35ZQ5foP7NJoz4Wn+5uTQHUeuz
TLyP8ZobgTM94hl64fIdUSW7qKjI/SiLEzTyY+X0vPTLk76Tb1S8RTO96fMTu+KZ
1uZV3MSbM5I2dhO80qSGh4n9kD8sypFXjZ+Xf7XhJN9Em+UsVOiXmFNbABCufgK9
3g==
-----END CERTIFICATE-----
Generated at Wed May 13 05:30:43 2026 by rpki-client