Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: a56nZGznsRgtQe5sptNQV5Sb41HfrF4EKnlRgiiiwNI=
Subject key identifier: A1:E9:00:27:82:E5:B4:F8:DA:C4:5A:B4:6D:8D:43:BE:14:90:AD:0B
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 55871AF7870BD8130A01534A7597EF8EEF2AB876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0337
Signing time: Sat 13 Jun 2026 10:31:42 +0000
Manifest this update: Sat 13 Jun 2026 10:26:42 +0000
Manifest next update: Sun 14 Jun 2026 23:19:42 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 3/tcL5N5LqWHArN7gPA73YZEy2g6JhofXLR7a6EjPFo=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:87:1a:f7:87:0b:d8:13:0a:01:53:4a:75:97:ef:8e:ef:2a:b8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Jun 13 10:26:42 2026 GMT
Not After : Jun 14 23:19:42 2026 GMT
Subject: CN=A1E9002782E5B4F8DAC45AB46D8D43BE1490AD0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:64:b2:fb:11:33:ee:93:db:59:ad:ef:44:
00:d3:77:1a:2f:ef:fe:4a:7d:78:0b:b6:09:58:37:
ea:35:35:b0:20:9f:f5:60:a5:78:9e:be:62:63:3f:
6c:0f:03:50:4e:7a:1d:7d:2f:ba:29:61:21:49:06:
b3:48:0f:92:16:c7:61:7a:b7:01:56:40:44:63:14:
c3:7d:fe:f1:88:86:4c:75:ab:84:ce:84:66:e7:26:
ce:60:84:d7:14:c6:09:c5:e1:f3:16:6c:dd:75:e2:
74:ee:18:3c:1d:90:25:8d:74:8e:2c:34:c3:7b:be:
88:ac:13:d7:76:1b:19:d1:00:91:45:11:15:48:ac:
a5:e8:40:ad:d1:64:3c:ac:a9:66:8e:a9:83:99:73:
a2:f5:b6:44:92:37:50:75:73:30:e9:c6:a5:aa:88:
f6:72:99:89:a3:f3:fc:df:83:91:10:70:e9:7a:86:
75:34:7f:cd:a0:e5:9b:19:07:b6:4b:40:b2:f3:d4:
67:56:46:ef:2d:33:13:69:2f:65:11:37:a3:0a:67:
63:33:3d:1b:6d:88:4c:04:b5:38:62:f7:13:36:08:
97:e7:66:d8:1b:db:cc:31:ce:71:c6:38:29:2b:8a:
56:68:e6:59:0a:b8:0a:78:55:8d:e4:62:8e:f9:f9:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E9:00:27:82:E5:B4:F8:DA:C4:5A:B4:6D:8D:43:BE:14:90:AD:0B
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:13:ed:e3:f2:9c:59:6a:54:2e:ab:01:fb:74:7a:72:83:0c:
fe:4e:88:44:b6:c5:99:ba:ce:d2:bf:d0:9b:0a:d7:bd:a2:88:
87:59:4e:83:86:49:59:d9:be:0f:ca:94:3e:47:21:71:88:bc:
00:19:8a:ca:d7:b3:aa:1d:4e:2d:2e:31:68:5e:11:67:5d:a4:
bd:8a:eb:df:68:7a:4f:0f:25:ce:21:19:fc:d7:c4:e5:72:72:
df:4c:d3:c5:54:59:1a:93:63:6a:d0:c6:21:65:d6:67:26:7d:
5a:c5:24:ff:da:e7:7d:48:90:50:7e:22:7a:5b:14:dc:2a:d8:
be:fa:5f:4d:43:e1:ed:34:e5:88:b9:48:2b:2d:10:30:33:34:
2b:02:ab:1f:18:0f:36:66:d8:d9:7d:ca:82:29:ad:4b:e4:9e:
ae:1c:03:b6:30:8c:c5:dd:b7:5b:3a:7c:2b:18:a4:f0:55:fb:
8c:54:6b:d6:fb:84:2e:61:1b:77:4a:9a:90:c5:a6:a4:a8:7a:
9a:18:17:45:d4:fd:24:d6:65:04:8e:9c:96:c7:67:63:e3:fd:
3d:91:ac:dc:88:46:6a:45:11:c4:d9:4e:0e:9d:4a:88:e0:db:
2c:e0:bf:3a:9c:2b:b1:e9:be:f5:0a:05:2d:98:28:78:5b:f9:
1c:0b:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:08 2026 by rpki-client