Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: EAqURQqtqhhpNL4YceKJQKG+TLF0H8ayCqZ4R2Sz6FE=
Subject key identifier: C8:2D:F4:31:F7:59:76:5D:29:9D:76:31:DC:EB:A4:C8:11:79:DC:8E
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 5E13099BA5E8B5B23B160366026306D506625CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 0422
Signing time: Mon 26 Oct 2026 09:24:12 +0000
Manifest this update: Mon 26 Oct 2026 09:19:12 +0000
Manifest next update: Tue 27 Oct 2026 21:54:12 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: T0TBuwEPNHD7HVBdvnnO2f1YAO9Vq+Vd+QuZGndwwII=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:13:09:9b:a5:e8:b5:b2:3b:16:03:66:02:63:06:d5:06:62:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Oct 26 09:19:12 2026 GMT
Not After : Oct 27 21:54:12 2026 GMT
Subject: CN=C82DF431F759765D299D7631DCEBA4C81179DC8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:37:5c:61:c6:26:2c:92:46:13:c7:04:f5:
02:a2:00:97:5e:19:0e:be:6c:71:5c:27:b9:94:11:
8a:cf:ea:d1:14:8f:27:9d:03:b6:ea:5b:13:5e:40:
31:0f:ae:fc:ea:15:2d:89:b8:d1:ab:41:d4:e7:c1:
24:1b:50:62:6b:73:2a:c2:5e:dc:b4:9b:4c:45:9f:
90:07:23:17:c3:70:f9:f4:61:67:1f:8b:f5:07:98:
c0:b7:08:75:5f:f0:06:2b:23:4a:0a:e5:23:83:c9:
df:93:f7:d0:9d:90:45:1e:16:96:a5:c2:eb:01:84:
c9:4f:5a:9a:16:81:49:3f:df:4e:02:e6:39:6c:a5:
18:a1:8a:2e:37:b3:fc:87:f8:0e:ad:4c:22:e6:b2:
1a:6c:bf:25:7b:b3:c2:37:69:68:ec:6b:e0:42:d9:
07:b4:fa:56:ed:3f:cd:f2:7a:52:9d:be:25:ea:c3:
47:45:cb:b0:e3:ec:dd:9c:c3:f0:fd:8f:2e:7e:43:
09:a2:07:41:c3:e5:56:43:cd:f6:f1:75:ca:73:5b:
d2:60:77:2f:b1:b3:68:98:5a:89:d7:d2:04:c3:73:
72:17:f0:7f:d5:05:77:9c:fc:58:d1:8c:f9:39:9a:
ff:f7:e4:b1:a8:28:23:b1:d0:93:04:45:fc:e3:03:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:F4:31:F7:59:76:5D:29:9D:76:31:DC:EB:A4:C8:11:79:DC:8E
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:69:6f:4d:72:fa:0d:49:ff:c3:1d:78:c0:dc:b9:c9:5d:24:
20:1a:ce:f8:5f:3c:01:d0:00:88:1e:12:03:0e:12:57:d1:a9:
cd:09:77:25:3a:f0:99:24:50:67:c7:6c:f1:4d:2e:20:3c:83:
46:f1:47:0a:e6:f3:95:17:f9:98:9b:5b:45:56:cf:c2:ee:a9:
ec:80:94:be:71:a3:ef:49:8d:1a:ed:32:f5:28:16:94:55:4d:
da:af:75:9c:44:07:d9:6f:78:e5:3e:18:13:1b:3d:e3:ed:34:
60:ad:eb:81:3d:ab:78:0e:87:61:05:a2:61:36:aa:71:1a:27:
d0:6d:57:23:7b:1b:06:a8:6f:93:2d:e5:72:30:4a:8e:63:20:
bd:18:e9:ba:19:39:b7:c0:a9:3c:47:20:7b:7e:1c:e2:9c:b0:
ac:23:f7:de:48:e5:54:23:5a:3b:21:a6:f2:7d:c3:89:f3:69:
52:04:c0:9d:e4:39:3b:8f:7c:73:8c:0f:c4:fe:bd:b1:b5:18:
8f:16:c1:e1:22:3b:5d:5b:1a:55:14:3c:6c:4c:e1:fc:a1:69:
b4:44:06:fe:bc:ca:14:ec:f4:d9:f6:ec:cb:c7:1c:2d:3f:19:
c1:85:79:20:2b:78:5d:ae:e5:89:09:d7:ec:e1:cc:42:57:0e:
d5:ac:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:57:49 2026 by rpki-client