Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: ZVV4iW7Xs08Pr4g4HIJTLIBDe12qxP54CNbf1XZB9QU=
Subject key identifier: F1:A5:E2:FB:E5:F5:8F:BE:6F:07:8A:F5:2A:C3:73:7E:59:A5:38:62
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 1B76841D554E2326D0E6D65561C13060A289F2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: C8
Signing time: Wed 23 Sep 2026 17:18:42 +0000
Manifest this update: Wed 23 Sep 2026 17:13:42 +0000
Manifest next update: Fri 25 Sep 2026 17:18:42 +0000
Files and hashes: 1: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: wq3FGQbUA9qh11239SFcWRIahCxVJDWr5mAGNj0LKaA=)
2: AS205848.asa (hash: IikDWCRBwwK8sSNZmwImnmeMmSBFyeMb5C9qOOloZyw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:76:84:1d:55:4e:23:26:d0:e6:d6:55:61:c1:30:60:a2:89:f2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Sep 23 17:13:42 2026 GMT
Not After : Sep 25 17:18:42 2026 GMT
Subject: CN=F1A5E2FBE5F58FBE6F078AF52AC3737E59A53862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:86:ee:1f:37:89:7a:f4:bd:3e:eb:0a:9e:
2f:b1:1f:8b:42:70:b2:ed:60:5f:33:03:af:ed:1e:
72:d7:3e:53:3a:9a:50:45:a3:db:3b:8e:49:b9:d5:
1b:a2:88:66:06:09:37:ca:99:c0:6d:25:65:89:bd:
08:d7:c4:ca:f6:5e:fc:97:ef:c2:e4:50:c4:7a:50:
f4:85:9b:28:dd:b8:38:83:4a:fb:57:0b:a7:a5:87:
70:09:5d:dc:58:65:a5:91:4c:47:f5:ac:14:78:d7:
8c:f9:f7:5c:4e:8c:03:2f:99:9b:76:7c:35:89:74:
62:ae:73:13:64:50:ad:3a:4d:7c:08:cb:a7:d6:f8:
fc:99:f2:a8:cc:b4:4e:57:fc:de:fc:65:7a:f6:e7:
d4:12:f1:67:91:f1:c3:92:bf:b6:22:3e:90:27:a6:
75:c1:e4:2f:e8:71:af:42:99:b0:bf:92:a9:00:32:
b6:e7:a9:62:ab:3f:c8:49:3c:ab:78:9f:d0:cd:3e:
a6:7d:df:81:95:06:fa:7e:29:8b:ec:a4:fc:49:7d:
81:14:32:9a:e6:8e:12:c9:45:7b:7e:8f:5a:6e:8f:
14:95:c3:b3:f0:db:b4:19:8f:57:be:83:c0:69:0d:
8f:b9:60:2f:6a:dc:e6:db:ae:d3:4b:0d:2c:8d:47:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A5:E2:FB:E5:F5:8F:BE:6F:07:8A:F5:2A:C3:73:7E:59:A5:38:62
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:75:0b:66:43:cb:d3:5c:03:ce:d4:88:ad:d4:55:df:13:
e2:37:ea:25:df:b5:b8:f5:75:d0:a6:7c:80:89:f1:b3:a2:26:
94:28:2a:b7:ad:ea:71:1a:1b:a9:5a:4a:67:01:e2:98:18:03:
43:5c:30:3d:08:99:72:5b:50:81:cc:b4:2b:22:2d:90:cc:f6:
fd:85:ab:20:1a:a2:83:10:c9:db:53:da:0a:9b:e9:ac:2e:2e:
f4:d2:9e:f9:a7:06:3c:29:51:4a:7b:00:bd:50:c6:44:4a:a4:
94:b0:5d:1e:b4:94:1f:45:80:e8:a3:7f:78:83:6e:33:fd:49:
17:ce:14:a4:d4:db:33:df:5b:45:3c:31:f8:79:90:e4:38:7e:
89:c9:80:77:78:27:73:c2:e7:23:ad:2b:6b:5f:9c:aa:9b:d1:
ad:14:bd:bb:ec:2d:f0:e3:34:ce:09:e4:80:98:ed:bc:08:d6:
31:d3:43:ea:2a:53:55:10:e7:a7:d1:bb:b3:4b:d3:47:a2:0d:
46:dd:4e:ca:99:4c:bf:ca:30:3a:71:2a:a5:11:13:89:8e:cd:
db:d5:db:93:d2:35:78:44:18:14:a3:d1:79:0f:2a:d5:fa:e8:
68:8f:47:21:66:88:a8:6a:73:2f:c9:03:41:5c:42:80:ae:58:
b3:49:d1:4a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUG3aEHVVOIybQ5tZVYcEwYKKJ8tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRkYTdjNGM2YTk4NWM0NjVlNjZiZmRlNGMzZTExYmQw
Y2ZlMDhmZjAeFw0yNjA5MjMxNzEzNDJaFw0yNjA5MjUxNzE4NDJaMDMxMTAvBgNV
BAMTKEYxQTVFMkZCRTVGNThGQkU2RjA3OEFGNTJBQzM3MzdFNTlBNTM4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJIbuHzeJevS9PusKni+xH4tC
cLLtYF8zA6/tHnLXPlM6mlBFo9s7jkm51RuiiGYGCTfKmcBtJWWJvQjXxMr2XvyX
78LkUMR6UPSFmyjduDiDSvtXC6elh3AJXdxYZaWRTEf1rBR414z591xOjAMvmZt2
fDWJdGKucxNkUK06TXwIy6fW+PyZ8qjMtE5X/N78ZXr259QS8WeR8cOSv7YiPpAn
pnXB5C/oca9CmbC/kqkAMrbnqWKrP8hJPKt4n9DNPqZ934GVBvp+KYvspPxJfYEU
MprmjhLJRXt+j1pujxSVw7Pw27QZj1e+g8BpDY+5YC9q3ObbrtNLDSyNR7+fAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU8aXi++X1j75vB4r1KsNzflmlOGIwHwYDVR0j
BBgwFoAU3dp8TGqYXEZeZr/eTD4RvQz+CP8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj
MDQ4LzAvREREQTdDNEM2QTk4NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkcDhUR3FZWEVaZVpyX2VURDRSdlF6
LUNQOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hNTllOGMyZi1l
NTkwLTRhNGYtODQ2My04MzE3YzJhMWMwNDgvMC9ERERBN0M0QzZBOTg1QzQ2NUU2
NkJGREU0QzNFMTFCRDBDRkUwOEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArh91C2ZDy9NcA87UiK3U
Vd8T4jfqJd+1uPV10KZ8gInxs6ImlCgqt63qcRobqVpKZwHimBgDQ1wwPQiZcltQ
gcy0KyItkMz2/YWrIBqigxDJ21PaCpvprC4u9NKe+acGPClRSnsAvVDGREqklLBd
HrSUH0WA6KN/eINuM/1JF84UpNTbM99bRTwx+HmQ5Dh+icmAd3gnc8LnI60ra1+c
qpvRrRS9u+wt8OM0zgnkgJjtvAjWMdND6ipTVRDnp9G7s0vTR6INRt1OyplMv8ow
OnEqpRETiY7N29Xbk9I1eEQYFKPReQ8q1froaI9HIWaIqGpzL8kDQVxCgK5Ys0nR
Sg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:07 2026 by rpki-client