Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
File: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft (raw, json)
Hash identifier: P7PQlNz/g+ZFpzpzgbqph6oyQAiPB/h4+dylluUb714=
Subject key identifier: 3A:F7:FB:7B:33:51:65:62:52:56:64:EE:CD:3C:D1:6E:FC:A6:DB:CA
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 03D9241447C257D78F71D38929F33A85C8B8CD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
Manifest number: 0111
Signing time: Sat 18 Apr 2026 16:26:41 +0000
Manifest this update: Sat 18 Apr 2026 16:21:41 +0000
Manifest next update: Sun 19 Apr 2026 19:22:41 +0000
Files and hashes: 1: AS22773.roa (hash: xKAnLfNKj4WvvERZEeSL1oPfLB5T+WeGICCaK3DJS4I=)
2: AS834.roa (hash: MQbpkmttNeDJM/ZW/2IOchXMe3NF9sQ1VmdfdV7Q58I=)
3: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl (hash: dS3sD4ydYQthEUvcJWb9bt8nsD/aUzmbLy2b3Ex0Ovs=)
4: AS11426.roa (hash: QoJp39oD8IlrC+55sf9pU7tKSUjmscFCpWvJTqGfbAM=)
5: AS42689.roa (hash: kwlmfcXyVOBI1+ZcCrXoz2SHftfQVRDllPtBRfMglyY=)
6: AS6762.roa (hash: Vu+D6JbdLJtN4Ee+MwonYxkQCs/xr0NFEVCWKd40/a0=)
7: AS18046.roa (hash: VpmANte7Bi37Q5riEMTy8brveOi7EUtQsEx5DJuASGM=)
8: AS203054.roa (hash: Fd/rHYEseOg5059B+hSx9oFHFGdIatiS9Rb1gDDe62s=)
9: AS5650.roa (hash: bxbjLrBijnytMR4nVGQbScnmEV/ZJIktD51pSUBSvA4=)
10: AS812.roa (hash: zA57qcCPz1Pt09TdlnMO+GKenNotdwFnSlnVFuU1Vz8=)
11: AS397373.roa (hash: r+qw0cVYugjHnw1tgvUhWJcPsIoXy8bAD7TEtQYDIsQ=)
12: AS8881.roa (hash: HPSWUYcly9koQ7aezylK6IEGQ3lumWJSmByAjilqIic=)
13: AS6079.roa (hash: DGJHW90tEq7dZlZkHKoW+evT+/RQ3D7/+5qY6j4P0LQ=)
14: AS215294.roa (hash: VvAiV+abd+ReUgjBjgGnGfiRXW5nZvS6P/Ha8hlUR5w=)
15: AS213607.roa (hash: BBZmTHkX/TuFdr29cTFthZmS2BW/5qZeQ1xKol6JrsA=)
16: AS215152.roa (hash: 6LScDx7kF3NGnXxTdZzKdup6DYJqX3CdCSHZzimuZsM=)
17: AS215935.roa (hash: J/OeWUFsvxXv8FLznTTFyQA0niwajEGqY9IDDNzOUaQ=)
18: AS5511.roa (hash: 9Lpz3vWambDfir2U9nMHvILjWJfJ4pN38Uiol2iAa8c=)
19: AS49915.roa (hash: SujYnOIzovlNLxuZUPyjczGbrROeJTekzPrbFZqzxwA=)
20: AS203048.roa (hash: V+gEv7PALF9eo0RlLdnSpauY3LpRpugDwvsfUYLvi2s=)
21: AS214025.roa (hash: izGyAX9SrpYP8l1LF/aXpFD+jrfGA595favEyW04Mho=)
22: AS2856.roa (hash: bzi4fBIiC8oZyaFV/XK2JSHPRUDV8oR1+3ILhGGgfDA=)
23: AS7029.roa (hash: wkUsCOPjvO7McHsjxBjs++SB/soSU85PnQmns6pZ5cA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:d9:24:14:47:c2:57:d7:8f:71:d3:89:29:f3:3a:85:c8:b8:cd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 18 16:21:41 2026 GMT
Not After : Apr 19 19:22:41 2026 GMT
Subject: CN=3AF7FB7B33516562525664EECD3CD16EFCA6DBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:32:3d:23:97:7d:ee:ee:26:dc:fe:83:15:
cd:3c:cf:86:fd:7d:66:72:9e:e8:90:d6:dc:9a:cf:
b2:01:7a:e4:71:59:43:87:c1:5c:77:b5:e1:f5:ac:
d0:a9:c3:01:9e:a2:d4:0a:4f:e4:2e:58:4a:f0:7a:
84:d6:67:3b:b6:15:cc:40:8f:d2:10:8c:37:df:0f:
25:35:43:a4:58:b2:e4:b6:d6:e2:eb:fa:f1:6c:cd:
6d:d6:95:30:2d:a3:76:d8:06:e4:78:4c:31:67:90:
70:24:e6:dc:8c:0c:d8:64:2e:22:a4:7c:65:53:82:
7c:f8:b9:2e:ce:45:77:76:18:e2:e1:05:4e:81:25:
ac:80:cb:a3:8b:b2:5f:ed:9d:25:38:b0:9f:66:80:
af:4b:3c:98:86:0a:40:2d:3c:87:75:97:0d:f9:45:
24:1e:ce:b6:31:1a:e9:4a:fd:8f:76:84:0d:9f:1e:
37:2e:64:ae:cc:1f:3b:10:5a:b4:03:f6:0a:ad:ba:
6e:f3:02:b2:81:90:22:ee:8c:d4:64:d6:a4:58:f9:
68:e2:5d:86:cf:8c:27:37:1a:4b:fb:af:b7:b0:0c:
da:5a:f9:4a:61:b7:65:b1:67:75:ef:07:7d:e0:3f:
bf:f9:f7:9b:81:9c:e1:36:bf:02:2c:5a:08:12:13:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:FB:7B:33:51:65:62:52:56:64:EE:CD:3C:D1:6E:FC:A6:DB:CA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:eb:67:7e:ac:e2:f0:63:b7:6e:18:e6:7b:31:d3:01:1e:41:
ad:20:54:43:4c:c8:5e:c8:c0:f6:75:75:9d:7b:c4:20:96:2e:
9a:e6:9e:0a:67:cd:65:07:98:e1:00:33:cb:67:b0:82:9e:e5:
e4:78:2c:6e:74:db:88:e6:48:df:90:4b:5e:34:52:90:50:30:
4a:2a:94:a6:12:94:2d:d0:ab:4e:c1:80:68:a6:8b:0b:58:92:
01:c7:ac:c1:a7:e2:00:1d:6c:8f:7a:69:4e:32:07:99:02:03:
dc:d8:5d:00:6a:fb:6f:67:8f:27:dd:90:fd:62:aa:bc:b8:fc:
ab:0f:84:67:1d:04:7d:fb:8f:d8:bb:b1:14:88:69:89:e3:5c:
cc:b9:8b:cc:68:7f:7a:e7:55:51:fe:27:df:42:59:10:e2:b7:
5a:bb:f4:7f:90:fb:31:04:7f:18:9b:2c:c7:e2:c5:48:2e:bd:
57:1b:7b:08:2b:24:56:6f:26:70:e7:0e:62:32:c9:ed:b1:4c:
5b:5b:aa:96:52:e2:2d:44:92:6e:ab:85:7c:72:37:25:f2:34:
ed:54:27:c3:b5:ca:68:55:12:60:18:d2:3b:7f:61:1f:a2:a6:
c0:12:7e:3b:28:90:c1:5f:ed:b8:bb:41:97:aa:84:6d:11:96:
ca:d0:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:06:01 2026 by rpki-client