Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: W2CpQ3Hm3VhxDGiwM2T5dA3UadBoB9sUEmCAtfSSc08=
Subject key identifier: 7B:EE:6F:DA:E7:E8:01:7A:82:B9:36:3E:B7:75:35:E2:5C:D6:50:CA
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 343FF7E6EAB9646E7FC9FB0544B89F830093AD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0280
Signing time: Sun 01 Mar 2026 13:57:33 +0000
Manifest this update: Sun 01 Mar 2026 13:52:33 +0000
Manifest next update: Tue 03 Mar 2026 02:15:33 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: kUGpX/KclNWXK0htmjimw+wKqGKN/z8bVMdaH34zFOI=)
2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3f:f7:e6:ea:b9:64:6e:7f:c9:fb:05:44:b8:9f:83:00:93:ad:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Mar 1 13:52:33 2026 GMT
Not After : Mar 3 02:15:33 2026 GMT
Subject: CN=7BEE6FDAE7E8017A82B9363EB77535E25CD650CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:3c:f4:fa:e3:af:f3:3d:65:4e:63:64:3c:
16:f6:ad:08:76:0d:aa:99:d0:f7:83:dc:f5:aa:f9:
29:df:03:65:16:2a:45:77:cd:81:e3:05:fd:25:fa:
a9:34:5d:e9:aa:36:73:09:54:67:5c:34:f4:30:dd:
f3:fb:14:4d:b0:aa:4d:54:f4:36:be:ae:9a:02:a0:
c3:09:2d:10:72:5e:11:f1:8f:f2:d5:1c:cd:86:a1:
46:fb:ed:a9:8b:a5:2a:ab:73:e0:4f:16:50:d2:58:
96:42:c1:2a:fc:11:c5:7d:20:cf:9f:a9:41:e9:d2:
77:51:cb:ac:bc:c3:f4:e7:09:7a:93:81:b4:d6:32:
e3:e1:99:e4:ba:00:27:ca:14:af:d1:97:81:e5:74:
57:a6:73:72:c6:fd:4f:68:0c:b7:83:14:22:db:82:
40:f0:25:f6:01:e2:97:29:4a:7b:fd:72:39:eb:8b:
5b:02:58:f0:70:7b:75:8b:b4:86:40:fd:dd:d9:d6:
4b:0e:eb:c8:08:be:e0:96:93:43:68:25:7f:ee:c2:
07:01:1c:4e:04:db:ba:10:7b:36:df:79:a8:45:5d:
85:73:4b:6f:05:2f:0c:63:71:26:f9:b0:5a:16:01:
31:e1:12:0d:0a:09:4d:bc:b2:54:86:70:72:f9:e5:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:6F:DA:E7:E8:01:7A:82:B9:36:3E:B7:75:35:E2:5C:D6:50:CA
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:0b:ef:89:bb:f4:26:e4:9a:3f:0f:b5:49:50:f7:4e:48:
e7:27:58:35:45:c5:4c:3b:29:77:68:18:d6:3e:b3:3b:8b:98:
9d:37:41:1b:25:2f:ef:73:4f:b8:04:7e:2e:8a:8b:c5:b7:52:
ff:fd:1f:52:a3:6d:19:b2:75:9a:b9:96:9a:9c:b4:51:ff:94:
e4:01:af:90:c0:6b:fb:33:cd:a0:4b:dd:8a:34:9a:af:c5:0d:
90:e2:b9:d9:b6:79:6d:05:f0:7f:70:e0:72:2e:1b:f8:19:57:
45:1a:7f:23:06:45:06:28:11:1c:8a:e5:67:7d:93:d7:17:38:
4d:24:ef:6a:a6:e8:7b:cf:b8:5b:f4:e0:65:e7:da:8f:f1:32:
0c:6a:61:29:9b:0a:a5:4a:35:9a:34:b2:75:b8:76:67:ef:ff:
65:09:e0:25:a5:5f:c8:81:0d:92:5b:20:cc:dd:b4:73:9b:b6:
b8:57:13:e4:cc:f8:01:42:01:67:b6:35:23:5d:f8:8f:f1:34:
a7:20:92:17:2a:dd:dc:bc:4b:45:a9:2f:33:40:26:60:62:6c:
0e:60:f3:1d:51:1f:1d:a2:ae:a1:62:69:b2:80:3d:0a:06:a4:
22:fa:cb:0f:1a:cd:3c:b3:d2:e7:75:ba:5c:a5:56:e4:36:df:
bd:f5:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:21:07 2026 by rpki-client