Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: +juaSvw6ouajJWRe4O9zdNbCX5LdMjMFi0SzQkImFr4=
Subject key identifier: AD:85:0C:66:B0:E2:84:84:9C:FC:AB:71:AE:E5:3B:D6:F5:FF:F5:62
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 2FEBA9BB467C10F81654E815F6F284D6DB2C9602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 02D2
Signing time: Fri 17 Apr 2026 16:57:49 +0000
Manifest this update: Fri 17 Apr 2026 16:52:49 +0000
Manifest next update: Sun 19 Apr 2026 07:33:49 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 4nqolOQRKj3+z34kBjsW/OwCzx8+ymEwaWLmu5aYO0w=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:eb:a9:bb:46:7c:10:f8:16:54:e8:15:f6:f2:84:d6:db:2c:96:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Apr 17 16:52:49 2026 GMT
Not After : Apr 19 07:33:49 2026 GMT
Subject: CN=AD850C66B0E284849CFCAB71AEE53BD6F5FFF562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:77:4c:e3:95:f9:38:19:45:7d:2d:0b:e3:
f6:64:c9:c4:ca:ba:36:b2:82:ed:74:19:c1:85:ed:
3f:9b:4f:37:82:51:df:62:33:6e:69:e4:aa:5a:d1:
9d:8b:17:74:81:c1:06:c5:73:3d:cf:ca:86:22:e9:
30:e0:a3:98:4c:15:fb:aa:80:17:5d:cb:cc:8a:cd:
b0:70:72:80:1c:86:17:21:d5:c3:2e:75:eb:f3:60:
76:c5:b7:67:24:09:2d:d2:25:f3:39:09:fb:e4:1c:
a8:65:db:42:ff:49:b4:74:27:90:57:fb:19:13:0f:
bd:dd:1f:cc:55:b4:55:8e:98:23:64:06:cf:8e:52:
24:92:7d:a6:df:5c:aa:db:52:a9:46:97:0f:fe:26:
4d:11:8a:64:94:5f:11:26:bb:58:83:08:a3:ed:ef:
be:80:91:71:72:f1:2c:71:a9:bc:43:c3:b5:36:07:
d5:e2:11:27:0f:7d:a7:c5:37:0b:c9:6f:36:63:ba:
47:04:a3:b5:7e:46:61:c8:ca:8c:42:10:0f:58:ab:
3f:a1:ea:2d:a5:5b:92:1c:29:1a:14:28:5d:b3:12:
60:65:58:7d:f5:84:21:a4:07:82:08:68:49:a6:af:
d3:4c:c7:14:bc:8f:8e:de:95:25:59:74:90:c0:1a:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:0C:66:B0:E2:84:84:9C:FC:AB:71:AE:E5:3B:D6:F5:FF:F5:62
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8f:07:a3:74:fb:91:7c:b0:c0:0e:ad:af:07:cb:a5:50:55:
76:f3:ee:dd:3d:3a:64:d1:ce:8b:19:2a:56:13:a2:db:87:7a:
54:90:86:df:6e:62:5e:d7:02:91:4a:75:85:fc:f1:99:d3:ad:
a4:31:0d:b2:6c:6f:6b:98:5a:e2:c6:43:87:0e:ad:f9:06:23:
8d:0a:8e:de:f9:7e:c5:19:a0:37:8c:bc:a0:9d:64:7f:c8:8b:
51:ad:ed:b2:1c:60:d7:55:92:18:c9:f7:fc:ce:1f:d2:88:0f:
6c:3f:e1:4a:55:79:45:8f:26:ab:40:97:b2:49:d7:4a:29:fd:
ae:a4:1a:1b:e9:80:df:49:98:32:9d:af:d9:05:0c:71:5e:b1:
39:d9:0d:19:d1:24:e2:94:77:92:15:58:8c:b5:14:49:0c:a4:
f3:81:59:a4:35:81:e2:07:bc:fb:53:9a:28:5f:5e:47:35:a3:
74:7e:94:eb:03:2e:94:9d:16:7f:2a:f3:47:56:3e:40:80:bf:
d7:cb:77:cd:83:f6:a8:be:86:14:52:a1:5a:4c:13:cc:14:c5:
c4:c5:28:ca:9b:06:c4:d6:29:f3:a6:dc:70:cb:51:9a:53:ff:
0d:4c:4e:9e:5c:49:68:55:ca:85:af:06:06:10:f4:fa:d0:c1:
70:4b:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:06:24 2026 by rpki-client