Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
File: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft (raw, json)
Hash identifier: FdnELGu5FKIubD1jHmNIaL4iuMnYhlXY6vXJ54E2i4g=
Subject key identifier: 71:07:08:79:9A:B4:B5:A2:BC:92:06:C6:E2:D6:66:E0:5E:DD:F0:64
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 738F8F29E9E399149293E15C676B53427CB85CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 03:41:05 +0000
Manifest this update: Fri 17 Apr 2026 03:36:05 +0000
Manifest next update: Sat 18 Apr 2026 05:57:05 +0000
Files and hashes: 1: AS215152.roa (hash: MQ0DFFMVBArG32ujRzeVNVp2JuEn8fpjvgyGElqamw0=)
2: AS6079.roa (hash: DGJHW90tEq7dZlZkHKoW+evT+/RQ3D7/+5qY6j4P0LQ=)
3: 0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl (hash: pI7L7DUfllWgkjSr4zPMuY29ix7zosbDTY9THo+DuT4=)
4: AS7029.roa (hash: wkUsCOPjvO7McHsjxBjs++SB/soSU85PnQmns6pZ5cA=)
5: AS2856.roa (hash: bzi4fBIiC8oZyaFV/XK2JSHPRUDV8oR1+3ILhGGgfDA=)
6: AS42689.roa (hash: kwlmfcXyVOBI1+ZcCrXoz2SHftfQVRDllPtBRfMglyY=)
7: AS22773.roa (hash: xKAnLfNKj4WvvERZEeSL1oPfLB5T+WeGICCaK3DJS4I=)
8: AS49915.roa (hash: SujYnOIzovlNLxuZUPyjczGbrROeJTekzPrbFZqzxwA=)
9: AS214025.roa (hash: izGyAX9SrpYP8l1LF/aXpFD+jrfGA595favEyW04Mho=)
10: AS6762.roa (hash: Vu+D6JbdLJtN4Ee+MwonYxkQCs/xr0NFEVCWKd40/a0=)
11: AS8881.roa (hash: HPSWUYcly9koQ7aezylK6IEGQ3lumWJSmByAjilqIic=)
12: AS834.roa (hash: qWE5BWNwKEdkPDDijiXBIxe5eh+30eXMQhKz/XzKTC4=)
13: AS18046.roa (hash: VpmANte7Bi37Q5riEMTy8brveOi7EUtQsEx5DJuASGM=)
14: AS5511.roa (hash: 9Lpz3vWambDfir2U9nMHvILjWJfJ4pN38Uiol2iAa8c=)
15: AS397373.roa (hash: r+qw0cVYugjHnw1tgvUhWJcPsIoXy8bAD7TEtQYDIsQ=)
16: AS5650.roa (hash: bxbjLrBijnytMR4nVGQbScnmEV/ZJIktD51pSUBSvA4=)
17: AS203048.roa (hash: wpsxR57KlqETDN0+kDHv5HNr/l8EN/layvbYgSoUOw8=)
18: AS11426.roa (hash: QoJp39oD8IlrC+55sf9pU7tKSUjmscFCpWvJTqGfbAM=)
19: AS213607.roa (hash: BBZmTHkX/TuFdr29cTFthZmS2BW/5qZeQ1xKol6JrsA=)
20: AS812.roa (hash: zA57qcCPz1Pt09TdlnMO+GKenNotdwFnSlnVFuU1Vz8=)
21: AS215935.roa (hash: J/OeWUFsvxXv8FLznTTFyQA0niwajEGqY9IDDNzOUaQ=)
22: AS215294.roa (hash: 3mWQzJlrcRuhhgcAOigA6p4QKm11DUxhU3jNV8CejHg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:8f:8f:29:e9:e3:99:14:92:93:e1:5c:67:6b:53:42:7c:b8:5c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Apr 17 03:36:05 2026 GMT
Not After : Apr 18 05:57:05 2026 GMT
Subject: CN=710708799AB4B5A2BC9206C6E2D666E05EDDF064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:63:fb:8a:ac:31:b4:14:aa:23:39:60:18:
52:e1:8a:a7:c6:a4:a4:7d:1e:1c:0c:78:75:db:39:
61:43:0c:77:d2:58:a2:a3:c9:78:ad:60:9b:bc:99:
ba:f5:df:62:0b:7a:b3:9b:b0:5a:ac:be:97:f8:af:
04:bd:6e:7d:79:76:ad:80:5f:76:74:73:cc:81:c1:
89:ff:79:0b:3d:59:33:3d:4b:a7:71:38:e2:e7:f0:
33:6c:f1:a7:35:65:5e:6f:f9:37:6e:4b:c8:dc:05:
75:ba:75:11:d3:89:77:8b:18:9b:7f:0c:ab:de:66:
33:c4:ea:8d:7d:6f:61:da:7c:ab:41:98:4c:d5:03:
83:24:b5:d8:9d:95:1f:86:fe:61:e3:00:ed:b9:3d:
7e:a4:e9:d3:f6:9b:af:82:d2:41:91:03:87:f4:96:
b8:83:4e:67:6c:ac:24:f2:fb:23:0f:cd:a8:8d:67:
44:d5:35:cc:c6:3b:bd:71:bc:99:2d:bc:3a:0d:9c:
14:c1:98:c4:55:1b:27:58:a3:77:24:70:91:d0:76:
e1:fe:f3:00:b8:4a:9a:30:13:6d:3b:3c:d5:58:97:
77:af:12:d9:25:99:71:8e:20:95:b1:7a:80:30:43:
a4:5e:fd:3d:ea:20:a1:56:3e:12:12:e8:b6:4b:94:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:07:08:79:9A:B4:B5:A2:BC:92:06:C6:E2:D6:66:E0:5E:DD:F0:64
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:fb:10:66:28:16:0a:01:39:fd:1a:c2:db:38:1a:f3:f2:
ee:e5:13:05:b5:cf:2c:3f:b7:86:9d:b7:65:2d:82:f5:f2:df:
63:ee:93:75:ec:1d:51:3c:a5:78:50:00:97:93:f1:46:1d:9c:
e4:e0:37:8a:94:7c:dd:e7:09:33:f0:ca:71:d2:f9:0c:29:5e:
f3:9c:c1:c0:d2:e7:e9:0f:21:b4:43:db:db:ac:bf:7f:bc:12:
c4:4b:c1:f5:71:9f:a3:79:32:e7:a1:15:a1:ff:d1:07:66:e8:
14:bf:65:a6:a8:25:f9:f2:df:cb:68:1e:bb:fc:30:c7:28:61:
e7:79:4d:cb:05:b4:f3:e1:80:ec:e6:ce:75:50:ab:ad:22:f8:
ff:74:c9:f2:24:2c:6f:f8:3d:77:63:c6:21:df:13:8c:3e:b2:
8e:e1:b1:59:f6:bb:21:9c:a5:e6:41:f3:ae:95:43:87:5f:84:
39:82:96:2a:e6:fd:ef:28:43:e1:73:27:20:a7:51:36:d8:a7:
26:81:32:fc:bb:de:00:aa:29:0a:9b:d6:1a:eb:b4:49:df:2b:
27:d9:e9:a9:64:3d:c5:96:ec:40:59:51:57:0d:2d:63:d5:63:
76:96:5c:e5:a4:22:4d:10:f7:31:52:13:57:8b:68:50:22:35:
fe:d4:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:09 2026 by rpki-client