Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: vw9lK3XdOAYoaSDHpTS0Y2TL2277oeGr5axYaYVIhMo=
Subject key identifier: 0A:2F:F6:D7:52:C4:83:7C:88:C5:82:8F:C2:A7:2C:10:C7:01:D8:F1
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 264DEAD0AD011572FD28B18ADB48DE2BF5810E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0388
Signing time: Tue 28 Jul 2026 13:22:43 +0000
Manifest this update: Tue 28 Jul 2026 13:17:43 +0000
Manifest next update: Thu 30 Jul 2026 04:24:43 +0000
Files and hashes: 1: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: v65K03Ov6I18UTJSPsS7VZF7/miyvL9LUJ1OSZ1AE+0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4d:ea:d0:ad:01:15:72:fd:28:b1:8a:db:48:de:2b:f5:81:0e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Jul 28 13:17:43 2026 GMT
Not After : Jul 30 04:24:43 2026 GMT
Subject: CN=0A2FF6D752C4837C88C5828FC2A72C10C701D8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:4b:5a:5a:88:ee:3d:d8:51:5f:ee:f5:33:
ba:e5:37:c4:4e:6c:a7:fe:a2:35:62:d3:cc:fd:87:
61:87:b8:c8:91:f8:09:3d:81:c2:b3:a8:c4:cb:46:
48:d2:64:e9:14:4f:22:a0:1a:30:a6:c0:de:3d:80:
7b:ca:17:1e:f7:32:48:17:26:e5:d5:8b:eb:e3:50:
82:ee:93:58:4f:3d:6c:8e:ee:81:19:d9:2c:18:cf:
15:f4:19:a0:b1:b3:e9:d0:4b:59:d1:7c:50:90:65:
df:df:90:26:c5:51:dc:e3:15:c8:cf:27:72:5f:fb:
0a:76:ff:4c:8a:78:3e:9e:87:8c:91:a7:40:d2:85:
1b:68:86:39:b4:3e:f8:92:a4:dc:04:6f:1b:74:86:
d1:eb:5a:e9:53:8c:90:f0:6c:e4:0b:fc:65:0c:79:
d0:46:5d:f1:a6:a9:9f:e1:0c:6a:81:85:27:99:9f:
24:c7:eb:91:dc:f8:ac:dc:45:61:e0:3d:95:38:a2:
4f:f6:6e:bc:fb:9b:45:1f:09:34:51:d3:e9:d7:27:
92:38:04:60:11:16:a1:52:39:a4:71:96:29:02:e1:
f4:97:8b:ae:e8:b0:71:c5:79:66:ff:2f:80:02:f9:
43:13:ee:a6:8f:e0:1e:34:bb:67:42:df:05:8c:e7:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2F:F6:D7:52:C4:83:7C:88:C5:82:8F:C2:A7:2C:10:C7:01:D8:F1
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:50:94:69:2f:bb:2b:96:8b:83:7c:41:c6:63:df:2b:91:
94:8c:e6:95:8b:94:d3:53:54:09:0b:7f:16:9c:60:67:13:90:
8e:54:b7:c6:6c:8a:41:26:1a:e3:05:b3:45:e9:14:e4:70:10:
1a:2b:bb:4a:3d:4e:3b:7e:7f:d3:9e:66:a0:54:3c:ed:21:92:
32:4e:c1:e3:d3:72:1c:7c:02:83:3b:fb:b5:bf:b7:05:58:54:
c4:36:3c:bc:ea:f5:02:c4:85:af:45:bc:60:4e:b4:6a:19:10:
48:a1:d0:04:9f:8c:fe:60:c6:0a:0f:af:a0:41:6d:f7:4e:9c:
e4:b5:06:a5:e0:9a:14:5b:f2:5a:2f:b8:a8:a9:5a:6c:6e:82:
21:15:e0:a2:c2:a4:25:9c:78:68:20:63:18:00:39:e1:2c:b4:
1b:1e:a8:b3:ec:48:cf:42:78:3e:5d:b7:3b:a1:28:c1:38:99:
d1:fa:ff:53:e9:84:10:b1:6c:7f:aa:c8:94:82:12:c9:26:52:
a4:f1:8b:9e:ba:26:cd:2a:76:3f:e6:fc:38:b5:18:d1:a5:aa:
63:62:22:26:19:1d:99:5e:4e:d5:2d:cc:14:e7:06:7f:5b:32:
78:3d:0c:ca:be:68:d1:2d:48:a6:b7:1d:11:95:27:f3:51:ef:
4a:13:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:10 2026 by rpki-client