Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
File: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft (raw, json)
Hash identifier: wqCn63qf3kq78Xoh9D6a8koj/ZYvVG346UlawAslflo=
Subject key identifier: 49:76:3C:10:11:1D:3B:5A:C3:63:9D:66:4C:ED:19:0A:F2:57:14:BD
Authority key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
Certificate issuer: /CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Certificate serial: 05212845C18481E85E20EEA5893719E34A20569C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
Manifest number: 9E
Signing time: Wed 22 Jul 2026 22:43:07 +0000
Manifest this update: Wed 22 Jul 2026 22:38:07 +0000
Manifest next update: Fri 24 Jul 2026 22:43:07 +0000
Files and hashes: 1: AS205848.asa (hash: RQF3LRWfhi4ThAqwiOqIQhEXzfuBwp4KojFsAWNe1XE=)
2: DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl (hash: UM0swfJsSvIp+6zWpx2xnqYawhbg5sScQO3+1Dcwt5g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:21:28:45:c1:84:81:e8:5e:20:ee:a5:89:37:19:e3:4a:20:56:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff
Validity
Not Before: Jul 22 22:38:07 2026 GMT
Not After : Jul 24 22:43:07 2026 GMT
Subject: CN=49763C10111D3B5AC3639D664CED190AF25714BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:aa:a0:57:cc:fe:d9:c6:db:97:89:fc:a7:
27:cf:00:d2:35:d4:93:ff:c6:86:99:6f:38:dc:cd:
f2:97:d9:1e:6f:bb:5f:d1:7f:df:58:13:3d:8e:47:
46:76:55:99:67:45:f8:44:39:e2:b0:8c:76:d0:7e:
43:11:76:c6:c3:8b:44:e4:d5:42:f1:89:6a:b4:01:
16:eb:46:20:f4:75:86:b5:06:6d:89:2d:fe:4b:6d:
4d:fb:ae:3d:2c:55:25:39:5a:d2:d5:53:15:16:75:
51:dc:de:b1:c3:47:e8:b3:dc:2e:30:ac:d3:33:08:
96:e6:80:e5:8d:51:91:85:24:a3:d6:7d:ce:75:58:
14:bd:b2:48:94:f4:a0:a8:19:da:a2:0c:4b:a7:c7:
5d:e9:72:6b:4f:e8:72:ec:80:10:9c:71:77:42:c2:
53:06:17:91:40:a9:f7:67:fd:ff:62:fd:71:a1:6a:
c5:75:30:6a:e4:e5:59:fe:37:a2:e4:29:fd:91:92:
2a:e5:b7:0f:69:60:56:0d:43:fd:3c:ce:15:9b:65:
b6:c3:4f:aa:48:c9:fe:d2:8e:26:1c:29:1a:42:d1:
55:3e:aa:a4:ea:d3:2a:b9:43:0c:0c:7b:5b:3a:7e:
68:97:e8:98:36:d3:c9:63:f0:20:65:fc:b3:94:2d:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:3C:10:11:1D:3B:5A:C3:63:9D:66:4C:ED:19:0A:F2:57:14:BD
X509v3 Authority Key Identifier:
keyid:DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:ea:98:e6:d7:b0:d8:af:a4:dc:1d:62:15:a2:34:71:0d:
66:1e:c2:de:6a:21:bf:a3:82:f9:c5:64:2a:98:12:18:00:43:
07:16:c7:2b:3e:da:29:5f:d0:41:c6:f2:b4:ec:2f:8f:09:25:
6a:0f:2e:da:59:a3:2a:e9:2c:d5:e6:54:6b:1c:f3:0e:6a:54:
4b:f3:61:ac:16:8c:cd:97:20:59:bc:be:49:e8:2f:d2:97:35:
c4:c6:49:b9:5b:eb:80:3d:89:3b:87:6b:b7:0e:51:ec:11:66:
91:d0:e6:11:bd:f1:fe:9d:e8:c6:c2:60:f4:cb:2f:0b:4a:29:
c0:d2:4c:64:4f:28:0c:90:db:72:ea:60:46:02:57:1c:4d:4f:
bc:89:75:b5:29:96:a0:2b:c4:d4:e8:85:56:0d:c5:33:f2:6f:
aa:b1:24:31:03:ab:e2:b1:36:71:57:d7:85:84:b3:9a:59:64:
e7:ef:0c:fa:a5:9c:ed:e0:82:cb:70:4b:af:b2:11:02:09:17:
de:82:ee:28:4f:a4:cf:c4:a5:d8:c4:da:54:05:19:22:2f:0e:
a6:29:88:bb:2a:ae:88:9a:e5:28:a7:a5:2a:da:96:08:18:88:
0e:2c:e2:ab:2a:8d:fe:26:87:ad:de:e7:6e:16:1d:ff:96:7e:
ba:7f:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:49 2026 by rpki-client