Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: FVEPgiQcFZonA/TUtA8K4Cwaq+XFg5HUV8jgg91u11k=
Subject key identifier: 2C:B4:9C:41:BE:96:17:8C:8B:50:D7:10:AF:1C:AD:3B:EA:A2:39:11
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 51F176BFE19D9C9844FCFC32EE2D2F38B6FD8403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 03F0
Signing time: Sun 27 Sep 2026 05:20:24 +0000
Manifest this update: Sun 27 Sep 2026 05:15:24 +0000
Manifest next update: Mon 28 Sep 2026 17:29:24 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: atU+AzTGcgPHTgQUgTm3za6IuqLfqi8azW2CTcjUg5o=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f1:76:bf:e1:9d:9c:98:44:fc:fc:32:ee:2d:2f:38:b6:fd:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Sep 27 05:15:24 2026 GMT
Not After : Sep 28 17:29:24 2026 GMT
Subject: CN=2CB49C41BE96178C8B50D710AF1CAD3BEAA23911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:12:4a:bb:42:2c:4e:a8:90:71:90:85:90:
ba:2a:9e:76:de:92:06:f5:a5:5b:22:d8:7c:8e:0f:
6e:7c:45:6b:d8:76:da:69:32:8e:fb:16:63:d7:7a:
ca:92:22:02:95:15:3f:a5:2e:f8:c5:3d:91:58:c8:
25:cb:71:5a:b6:2e:6f:ad:17:03:e8:79:44:95:f6:
12:cf:b2:28:4e:2f:f9:34:1e:51:2a:9d:0e:6a:9b:
69:ae:d0:23:5c:26:f3:34:ad:52:17:ac:f0:58:48:
af:d4:eb:5b:90:c6:8c:73:09:64:47:7f:8b:a3:bd:
98:4b:5b:23:33:4b:9d:a5:51:f0:f5:65:f4:44:b9:
6c:2c:89:3e:aa:7a:4f:6a:2f:fb:58:55:25:62:2b:
34:6a:1e:7e:50:fc:bd:db:e0:20:e4:be:51:cb:0a:
aa:fb:01:27:e7:45:52:11:c4:0e:92:fe:d6:19:46:
79:91:da:de:d8:22:35:f7:2d:eb:2d:3d:40:95:5b:
98:e8:7b:f6:0c:27:62:a0:99:00:ae:67:74:fd:12:
e7:7c:97:52:1c:9e:db:13:67:91:99:28:c7:04:38:
04:74:bf:43:95:5a:de:8f:9f:c6:cb:84:f0:b0:95:
09:22:82:a9:44:76:76:ea:cd:f4:51:05:b4:07:7e:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B4:9C:41:BE:96:17:8C:8B:50:D7:10:AF:1C:AD:3B:EA:A2:39:11
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:ab:33:f9:34:c5:d7:d8:d6:03:8b:3e:b8:c7:da:dd:df:
99:e8:22:c3:0b:8e:d7:f9:c0:73:4b:db:10:8e:72:d3:9f:54:
dd:8a:07:6b:02:d8:14:8a:e6:7e:c2:58:72:21:24:c6:97:21:
a9:13:1b:89:a6:b2:de:08:ac:bb:ea:a4:48:ee:77:10:49:9d:
72:b3:56:3c:0e:bd:0b:07:5b:17:89:e1:b0:a5:80:6d:81:e9:
4f:e8:5e:d8:b9:1b:cd:1a:b4:6b:8d:34:a9:37:14:6b:cf:78:
48:1e:28:d0:64:9f:8c:35:44:f9:b6:57:44:cc:2c:9b:cf:02:
a5:4a:11:b7:d6:a5:b8:9c:06:38:1f:de:e3:b1:54:fd:1e:cb:
7d:d9:8e:cc:e8:c6:c3:3c:10:b1:b9:66:ef:6f:97:eb:ea:56:
87:8d:48:13:b7:49:0d:50:ac:93:95:d0:e5:c6:fe:28:88:23:
45:57:78:a9:72:82:51:57:f4:2c:66:bb:69:b4:8d:f6:5d:73:
c2:05:4e:e8:07:88:fa:79:5e:b6:ba:df:53:f6:da:0a:f6:df:
20:13:3b:8f:a4:53:1e:47:c8:8f:e0:83:ad:03:a4:55:3d:45:
61:45:9b:6a:85:3a:62:dd:78:a4:f9:5e:46:8f:69:bd:02:8f:
cc:12:59:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:58:13 2026 by rpki-client