Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: B+haMzkvB3e+napg55L634OWxU5hSi6MMEvzl9qhJnQ=
Subject key identifier: 9C:D4:C0:F2:AA:FB:C6:50:3A:1D:E5:87:40:EC:DE:BB:A5:0F:78:E4
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 119A1E4399D55B71B53B17792137267C520D84DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 0141
Signing time: Wed 25 Mar 2026 21:01:45 +0000
Manifest this update: Wed 25 Mar 2026 20:56:45 +0000
Manifest next update: Thu 26 Mar 2026 22:41:45 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: vHijXGNAkY0EVn4gohUVRYkQuwtUhzhRGXrJvrhK/zg=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9a:1e:43:99:d5:5b:71:b5:3b:17:79:21:37:26:7c:52:0d:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Mar 25 20:56:45 2026 GMT
Not After : Mar 26 22:41:45 2026 GMT
Subject: CN=9CD4C0F2AAFBC6503A1DE58740ECDEBBA50F78E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:84:d9:dd:74:47:23:ce:b3:30:83:55:17:
12:fe:1b:fc:bf:9e:1e:12:8a:1a:c3:3f:96:91:58:
eb:07:63:97:c2:07:3a:e9:f7:c1:ed:0e:1d:6f:54:
b7:76:1a:9a:49:66:ae:ea:77:52:26:a5:8f:cb:6e:
70:26:05:0b:2b:2b:9d:4a:de:cd:2b:79:8a:2f:fb:
e5:cd:90:e5:3b:8b:9b:bb:cf:3e:12:55:be:33:bd:
ea:7f:ee:75:55:f2:2b:3e:c6:b4:af:39:94:e1:15:
88:5c:75:a9:0b:52:27:9c:57:ac:03:54:aa:e3:49:
27:71:a4:c5:ef:8b:6f:57:2e:77:b0:8a:ec:b3:e7:
09:69:c5:1e:cb:8e:31:91:7a:c1:41:cb:0d:9e:64:
ce:f7:a0:67:b3:16:04:c3:78:99:06:ee:eb:a2:8a:
76:7e:48:47:73:a9:cf:f0:73:96:19:65:28:24:2f:
73:fb:b2:89:aa:82:ae:67:8c:58:1a:2d:18:17:5e:
4a:d7:ed:d2:a3:9c:dd:d1:e1:c1:b0:7e:6a:0b:62:
88:03:ee:e8:5d:d9:9d:94:23:3d:b6:64:a5:47:b0:
44:bf:cf:ed:d5:a6:1d:cf:17:c2:32:65:25:7f:7e:
a0:ad:68:b2:93:67:04:02:27:c5:6e:53:0d:8d:1d:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:C0:F2:AA:FB:C6:50:3A:1D:E5:87:40:EC:DE:BB:A5:0F:78:E4
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:c1:51:03:cc:14:6d:23:64:63:6d:88:6c:14:95:71:87:
8b:2c:2d:07:b3:c1:59:0a:21:3b:e2:22:a9:5d:81:73:43:ea:
c9:93:37:91:61:5e:fc:40:51:91:dd:e6:bb:00:95:2a:56:85:
4d:6f:92:fd:e2:1f:c4:d5:62:f1:c9:34:2b:d2:f0:53:e9:4a:
a4:65:31:43:37:c3:98:d1:a9:25:88:57:00:10:bf:41:f5:3c:
be:44:06:2b:13:da:55:c0:d1:79:31:b6:cc:ef:b3:83:ca:28:
79:2f:06:5b:e2:cb:d7:ae:c7:fb:4c:1d:25:4e:ee:90:17:aa:
6a:7c:a3:01:12:29:b3:34:6a:4d:cd:00:45:1f:cf:48:a1:e3:
c1:be:ce:42:80:c8:3c:b2:f8:f8:d6:1f:b4:62:87:ed:04:57:
a3:1d:94:18:cc:9e:1f:50:da:99:27:a3:78:77:9b:c0:70:16:
5e:09:16:66:7d:b1:99:18:7a:c5:6c:df:a2:40:45:bf:b0:e4:
41:90:03:31:bb:b8:97:46:cd:64:80:ea:26:d5:be:a4:ee:d3:
14:17:47:24:ca:61:e1:45:c4:9a:97:c0:3b:62:90:07:21:ea:
6f:24:51:d1:7a:27:91:d3:b4:e4:4c:26:e5:8b:19:4b:c7:1a:
0d:d2:ae:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:29 2026 by rpki-client