Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: 86n7l6rtSzF2mhutiq71s4QHnQeyV5toTDGtKIfnFF4=
Subject key identifier: BF:C1:20:2E:EF:42:40:28:42:E9:A2:68:20:F3:F9:45:01:B4:54:5F
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 282BB2AC6E1546DF53849361F24D044F669B249B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 02B1
Signing time: Sat 28 Mar 2026 22:52:35 +0000
Manifest this update: Sat 28 Mar 2026 22:47:35 +0000
Manifest next update: Mon 30 Mar 2026 11:43:35 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: PlbNyW86uYCpIIDVat5rj3MO4PtGAZEfaqh708OOAxA=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:2b:b2:ac:6e:15:46:df:53:84:93:61:f2:4d:04:4f:66:9b:24:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Mar 28 22:47:35 2026 GMT
Not After : Mar 30 11:43:35 2026 GMT
Subject: CN=BFC1202EEF42402842E9A26820F3F94501B4545F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:d4:1b:65:0f:9e:89:08:19:2f:25:38:70:
d7:c8:2f:b7:36:97:55:01:13:80:63:f7:c3:7f:7e:
bb:90:78:37:3b:b1:e6:8a:fb:de:f8:d9:f4:e2:f5:
6d:23:0a:78:61:ed:5a:04:fb:cb:6a:8e:bf:30:ac:
ca:5c:c0:09:8b:16:92:f0:66:c7:1f:12:06:c8:b8:
cd:3d:52:26:dc:26:4e:50:0c:ae:df:4a:d7:eb:58:
a7:52:27:9e:f3:52:cc:3a:74:e3:85:4d:ec:f0:de:
77:87:4a:be:4d:ae:5b:5c:53:c4:29:1c:73:7b:36:
8c:c0:fb:a7:63:b9:1e:7a:32:a5:d0:e3:3d:95:c8:
c5:fd:02:ab:1e:eb:3d:1f:33:29:8d:a1:b7:4d:ba:
8c:05:b8:25:d3:4d:ad:75:c0:0b:d5:02:61:5a:7d:
86:1d:5f:c5:1a:99:3f:80:ca:5c:37:12:62:98:f6:
7d:7f:c3:8c:cc:4f:ae:03:e9:8b:5b:f3:72:1b:64:
b7:a1:61:b5:4f:cd:f6:e2:87:d9:0a:fa:c1:34:6e:
dd:d1:e9:23:6e:4d:69:45:32:19:8d:78:1b:54:b1:
f8:21:32:c1:01:2c:3d:05:d6:4b:cd:b7:ff:62:99:
76:23:42:fd:57:4e:48:80:f2:f0:20:93:a9:73:59:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:20:2E:EF:42:40:28:42:E9:A2:68:20:F3:F9:45:01:B4:54:5F
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c3:ba:42:22:e0:aa:18:ab:0d:8e:22:de:b8:a8:97:93:11:
a7:47:5f:4b:7d:fc:d6:3d:7e:fd:bc:4c:69:59:ce:96:68:67:
df:42:25:29:38:96:90:1f:bc:62:4c:6d:85:9d:7d:38:99:5c:
91:ed:fc:2d:d6:46:76:a1:ed:db:58:cd:00:02:34:1a:8f:93:
80:9d:73:8e:e0:90:84:3b:ac:0b:20:36:d4:a7:a7:1d:25:3f:
cd:6b:e2:dc:36:db:2d:c2:82:2a:3f:69:5f:11:04:c5:fd:af:
18:46:f2:f3:f1:a5:f6:9c:30:77:cd:45:81:62:70:1f:22:4c:
ad:e7:ce:73:1a:80:90:5e:b9:c7:9d:27:0d:03:1a:c6:ab:e7:
2d:ab:45:35:ef:b8:48:13:6f:f7:91:ab:9f:92:4e:b0:97:1d:
ce:de:84:01:c1:b8:55:c4:6b:ce:31:ef:34:b3:fe:36:82:4d:
a6:25:6e:6a:0a:71:46:4b:03:33:92:a4:9b:64:65:2e:9b:74:
c1:77:15:95:eb:93:44:ee:c3:af:80:94:88:00:70:82:c4:5d:
27:00:46:38:32:45:64:72:97:a1:e3:04:6e:8f:d7:4e:64:91:
8f:4d:34:f8:f5:3c:f0:05:02:6f:e9:49:ff:21:08:07:17:92:
4d:4d:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client