Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: cwALDaaW3afHxY0WCnkvsgJ9xywIuezCitgvv+oTTDs=
Subject key identifier: D6:E4:4D:3C:BE:50:19:34:4C:31:5E:74:BF:03:E1:7C:7A:19:04:87
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 79D7F11F6299FE9EBFCBDA8574AAFCBDBCE27C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0421
Signing time: Sun 25 Oct 2026 18:23:28 +0000
Manifest this update: Sun 25 Oct 2026 18:18:28 +0000
Manifest next update: Tue 27 Oct 2026 09:21:28 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: EVsI68DGWAA4Ln2FnkNeZKhHlosewd/Yj2vJgUaWt7Q=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d7:f1:1f:62:99:fe:9e:bf:cb:da:85:74:aa:fc:bd:bc:e2:7c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Oct 25 18:18:28 2026 GMT
Not After : Oct 27 09:21:28 2026 GMT
Subject: CN=D6E44D3CBE5019344C315E74BF03E17C7A190487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:7a:56:94:9e:66:a5:2e:e8:af:a1:03:96:
c5:81:9a:95:18:86:6d:b9:69:5a:a9:8e:2a:8a:a0:
01:6e:e8:d2:4b:09:91:f7:99:b7:59:82:31:eb:d8:
de:51:b5:92:24:9d:83:64:76:42:f1:5e:ff:f9:96:
2f:40:5a:20:60:bf:89:66:7c:34:74:2c:0d:45:8e:
46:8b:7e:90:e5:ea:b6:0e:c9:b4:d7:e6:ab:6a:55:
43:4f:94:5b:8e:80:db:42:bf:cf:b1:e0:9d:bc:c5:
dc:f4:db:5a:cd:26:5d:64:61:a7:7e:de:78:59:1c:
a7:1a:3a:f0:76:bc:e6:e8:b9:46:e6:76:fc:9a:27:
98:c8:c1:0c:c9:4b:2c:b4:bf:2d:46:27:cc:20:25:
53:0a:71:e1:a4:89:a3:54:76:0e:92:4e:c3:43:18:
0f:d4:f9:4b:75:64:e2:4c:c1:6d:ea:ab:f7:bc:35:
b7:e8:27:a2:e9:90:9f:37:ee:54:b2:e6:a8:39:c0:
9a:02:da:27:4e:e5:2d:7a:bc:34:07:14:8c:f2:ce:
9e:40:0a:84:01:12:a2:07:95:ef:e8:56:fa:55:2b:
66:a7:f2:81:19:b8:96:d8:8b:39:e9:d4:8f:b4:c4:
c4:a3:a4:fd:62:af:62:7f:a1:36:ed:09:16:49:ec:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:4D:3C:BE:50:19:34:4C:31:5E:74:BF:03:E1:7C:7A:19:04:87
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a1:0f:46:ae:a4:c3:5d:e4:52:8d:f2:02:4f:71:1b:af:67:
86:bf:5f:c5:a0:41:8d:3f:6b:47:29:62:68:88:44:af:6a:3a:
77:44:f0:80:9e:25:a1:ec:ff:3e:96:6b:c1:57:d3:61:68:2b:
1a:1d:9a:23:3d:e4:41:1f:0f:02:20:22:4b:c5:5b:1e:76:3b:
b8:4a:6b:24:bb:14:8c:1b:a2:45:8d:1e:3a:27:93:38:8e:d8:
d4:15:51:ec:a0:1e:eb:f6:bd:12:ab:05:da:99:4f:de:f5:fb:
55:33:20:e7:39:5a:ce:f2:4a:48:3f:94:97:27:12:42:a5:c3:
cc:f3:8c:97:23:b9:03:75:9a:3f:e7:ce:39:31:75:b5:ed:4c:
0f:3c:c1:26:5b:46:a4:73:2f:4c:e2:69:5e:f0:ae:f5:37:2f:
21:93:cd:dd:17:9a:82:8d:ac:a3:60:13:b1:80:db:dd:7d:be:
ed:d7:76:f5:bf:55:11:b6:cd:04:67:66:99:49:69:8a:fe:96:
f3:32:1f:2e:3e:5a:a3:aa:89:27:c2:d6:32:60:eb:b6:c3:50:
40:d9:51:e5:3b:77:1b:22:0f:e5:1e:55:28:17:42:f8:3a:8e:
fc:5e:aa:50:fe:75:6d:73:58:16:a9:92:1c:fa:5c:4a:a7:1a:
bb:66:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:32 2026 by rpki-client