
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.mft
File: 20D9075327CD4C82769464B63E2399758DE0CF50.mft (raw, json)
Hash identifier: fIiUQUbnj2PDreV2QKfLkYLeVWYTi9suXZXl++8fgxk=
Subject key identifier: AD:5B:73:AD:0F:FD:33:67:A8:42:90:A0:E0:AC:49:57:DF:CC:10:61
Authority key identifier: 20:D9:07:53:27:CD:4C:82:76:94:64:B6:3E:23:99:75:8D:E0:CF:50
Certificate issuer: /CN=20d9075327cd4c82769464b63e2399758de0cf50
Certificate serial: 26EE049BA3196C0A53D6BC09EDC305565EB79FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INkHUyfNTIJ2lGS2PiOZdY3gz1A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.mft
Manifest number: 1F
Signing time: Thu 15 Jan 2026 14:15:02 +0000
Manifest this update: Thu 15 Jan 2026 14:10:02 +0000
Manifest next update: Fri 16 Jan 2026 14:21:02 +0000
Files and hashes: 1: 20D9075327CD4C82769464B63E2399758DE0CF50.crl (hash: Ceol81Nhso4YUNwjKq+WcappxS2kLijxc4HCdoP2I4k=)
2: AS214223.asa (hash: YNUlhwP3NAw3XnZ5SvA18oWMQcytI8vssQdkgkKD2Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ee:04:9b:a3:19:6c:0a:53:d6:bc:09:ed:c3:05:56:5e:b7:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d9075327cd4c82769464b63e2399758de0cf50
Validity
Not Before: Jan 15 14:10:02 2026 GMT
Not After : Jan 16 14:21:02 2026 GMT
Subject: CN=AD5B73AD0FFD3367A84290A0E0AC4957DFCC1061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:c6:ca:e8:e1:d3:18:b8:b9:19:c0:d1:bf:
29:8d:83:50:93:8c:66:cc:2b:cb:90:96:c6:74:40:
fa:8a:0e:39:ca:ef:a8:0d:e6:d0:f2:73:40:5b:74:
52:9d:5f:10:91:de:9d:cb:00:b5:20:44:92:b0:8e:
ea:3a:0b:9d:d8:da:60:cf:15:6e:83:d6:84:73:b2:
9a:db:43:81:d7:28:44:b6:a1:e0:72:d2:95:03:e2:
2e:88:98:39:8f:ee:1e:e5:ce:57:5e:51:ac:a2:be:
05:c9:a3:ff:83:10:1b:fb:4b:d1:ac:0d:69:9c:f4:
a2:d4:6b:af:a2:0f:33:1b:da:1b:9c:31:b1:de:2e:
66:81:c4:a1:99:59:62:82:b1:7e:a7:a6:67:4d:ed:
c2:54:54:3b:60:56:b1:84:74:29:ca:f9:a8:da:64:
a5:bc:3b:67:14:6f:33:27:4b:a7:5f:37:86:0b:74:
fd:18:5c:65:a8:7f:04:e0:92:08:cd:5e:96:e8:92:
f7:a1:4c:70:88:33:14:12:f6:71:79:8b:b5:94:5a:
aa:c1:f2:a1:0e:1f:3c:62:c2:30:36:6a:fd:a4:99:
82:c4:3c:b7:18:c6:c6:26:7b:9e:04:dd:98:0a:b6:
1c:19:80:7a:fe:e2:e1:ea:38:ea:ba:d7:7f:f3:bd:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:73:AD:0F:FD:33:67:A8:42:90:A0:E0:AC:49:57:DF:CC:10:61
X509v3 Authority Key Identifier:
keyid:20:D9:07:53:27:CD:4C:82:76:94:64:B6:3E:23:99:75:8D:E0:CF:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INkHUyfNTIJ2lGS2PiOZdY3gz1A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/0/20D9075327CD4C82769464B63E2399758DE0CF50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:63:e0:78:71:d2:51:0c:a0:d9:37:00:ac:25:4c:98:8f:79:
9f:a6:88:ec:8e:73:b8:1a:cd:98:8c:53:e8:92:3c:65:e4:bb:
33:80:bf:0a:65:46:56:f0:ee:3d:84:d2:20:68:06:14:af:3c:
3e:b8:3d:d5:70:26:a6:72:02:b0:b9:86:ee:2d:60:7f:85:5b:
db:bb:35:29:02:d4:ae:3d:9d:2b:6b:b9:d2:b6:b5:12:b8:f9:
6f:8d:95:8d:85:32:4d:00:e9:c0:41:6f:34:77:3d:c5:0a:71:
1e:2b:77:f7:64:9b:b9:7a:06:41:e1:e4:25:11:d8:73:bd:32:
bf:e1:86:17:a1:f1:6f:c8:87:4a:a6:b5:39:2a:c5:77:de:93:
b3:0e:f8:8f:17:e5:4b:53:6f:14:12:df:87:3b:6a:84:12:fd:
bd:dc:40:81:bb:e6:e8:71:dc:7f:af:0e:66:64:8e:c9:ac:14:
15:97:08:75:17:17:29:a2:60:3e:78:05:38:0b:6f:30:99:25:
ca:42:02:59:6f:76:95:2f:78:14:56:89:1f:e7:c8:ff:13:1f:
a3:2d:8d:19:f6:a5:a6:6e:77:57:f0:62:be:20:f9:79:e2:d8:
93:88:d5:b2:59:29:87:89:d1:27:37:57:ff:90:17:b3:53:a3:
70:ae:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 02:27:51 2026 by rpki-client