Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
File: 0DD4CFA21D83ABD8B565498180680D141A81960F.mft (raw, json)
Hash identifier: zrV+CnKQiM2wjKAOv4zo7O0N2nuqwzdUyzs1XSt++X4=
Subject key identifier: 58:8B:CA:EB:A2:DD:D1:32:7E:61:AD:64:D9:91:F4:88:16:75:F1:17
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 22F48218439F49DC2115CD5D367C05FF44E7E1AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
Manifest number: 01E0
Signing time: Thu 23 Jul 2026 19:24:26 +0000
Manifest this update: Thu 23 Jul 2026 19:19:26 +0000
Manifest next update: Fri 24 Jul 2026 23:07:26 +0000
Files and hashes: 1: 0DD4CFA21D83ABD8B565498180680D141A81960F.crl (hash: 0K4deu/guzGQL58AzGj78vt7tWmu31su/OB/RLNJyV8=)
2: 3231322e362e34382e302f32342d3234203d3e20343031373833.roa (hash: xMLOXyY+BsMcBRRtKTQRzQvqncsTWn47VROaOw/TU2U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f4:82:18:43:9f:49:dc:21:15:cd:5d:36:7c:05:ff:44:e7:e1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Jul 23 19:19:26 2026 GMT
Not After : Jul 24 23:07:26 2026 GMT
Subject: CN=588BCAEBA2DDD1327E61AD64D991F4881675F117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:a0:f7:e1:0b:ce:f2:15:da:8f:f6:98:92:
b9:40:63:2c:7c:76:50:43:be:d9:f7:e7:71:68:ef:
35:41:3d:e9:43:22:9d:ac:f8:70:21:d5:f0:68:54:
02:b6:5d:54:87:a7:e7:44:c1:0f:d9:b7:04:25:f8:
56:35:58:4d:41:41:63:19:02:3f:54:df:e0:81:4e:
7d:4f:ec:62:40:43:f3:f2:38:2b:a2:cb:04:e0:04:
8a:1c:33:19:a2:b0:9d:8f:76:80:d4:28:aa:4d:6c:
4b:1c:15:3c:a0:44:76:c7:e9:01:bb:5f:1c:9a:92:
aa:b3:a6:80:c0:45:61:3e:6d:60:8e:21:ca:c2:a9:
60:a8:b7:77:c0:8f:5f:6c:24:a3:44:45:12:c3:d7:
7b:2a:ee:2f:96:b2:fe:24:e4:5c:2d:0b:be:ff:62:
be:f4:a3:3a:88:70:ec:4e:7f:64:bb:c9:24:17:18:
72:23:0e:1d:34:83:bc:7c:4a:33:98:e5:0c:97:ca:
ef:8b:83:a7:f8:9e:f0:52:52:b0:7f:a7:21:33:da:
92:b4:8d:09:b1:02:a9:81:1f:72:52:06:f1:45:03:
b9:0b:1d:42:7d:b4:3d:ee:d6:6c:0b:f2:bd:61:28:
84:7b:7a:1b:58:25:fe:61:22:d3:42:11:be:8c:53:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8B:CA:EB:A2:DD:D1:32:7E:61:AD:64:D9:91:F4:88:16:75:F1:17
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9e:e0:77:b4:39:60:57:a2:6f:48:66:9f:87:e7:9a:fd:fa:
24:10:d1:fe:7a:61:82:72:c1:c7:bb:75:3d:9a:f8:0e:b1:da:
b9:41:20:c4:3e:f0:fc:87:85:a7:d0:ef:3f:f2:f0:29:0a:69:
17:ca:d5:8c:71:41:bf:0d:76:39:3a:98:05:07:a7:0f:f0:d4:
23:0b:1d:bf:5a:e0:33:6a:6a:fc:d4:5b:a3:5b:12:bf:76:0a:
18:0d:5f:75:63:99:a3:91:54:c4:40:b1:f0:20:78:9b:f7:8f:
d9:b7:ea:0a:9e:71:b8:d5:b0:88:d6:92:ff:b8:0d:62:09:37:
68:32:55:49:e8:e6:8b:4b:e6:37:79:40:5f:cf:cb:4b:ea:6c:
2b:f9:c0:98:cd:eb:27:8b:00:2b:77:02:67:a1:44:8d:a9:5d:
a9:de:6b:50:a6:d6:80:b8:30:a0:e1:5b:1f:d6:5c:6c:f2:cb:
ba:62:0f:a0:39:de:c4:cf:f5:27:43:2a:1b:d7:31:25:55:8e:
49:d2:17:1d:e4:d1:20:b1:17:e1:2f:55:9e:9e:cc:67:86:97:
21:aa:83:fe:3e:5b:61:10:2f:9d:cd:11:a4:46:53:e9:28:ba:
6f:0d:0d:28:c6:fb:f9:1e:2c:24:a9:8e:6d:71:9b:45:a0:af:
b1:13:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:27 2026 by rpki-client