Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: HFJoohCLXzPARftgTlCX0q1JssKIFTavkX8lQx7ztZ8=
Subject key identifier: E2:68:EF:DE:82:EB:92:4E:54:D0:21:FD:DA:DD:EB:56:26:7B:2A:17
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 109D2F9A1EA75EB1B6A505CD4559D14F9D87D1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 03B6
Signing time: Mon 24 Aug 2026 07:57:06 +0000
Manifest this update: Mon 24 Aug 2026 07:52:06 +0000
Manifest next update: Tue 25 Aug 2026 20:01:06 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: GHMJ74+MEYVFRQgZorloqa8N111hHy7HVQtvw5spxsU=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 14:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9d:2f:9a:1e:a7:5e:b1:b6:a5:05:cd:45:59:d1:4f:9d:87:d1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Aug 24 07:52:06 2026 GMT
Not After : Aug 25 20:01:06 2026 GMT
Subject: CN=E268EFDE82EB924E54D021FDDADDEB56267B2A17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2d:ab:e5:b0:e2:64:3e:1a:51:0e:2e:14:25:
33:27:1b:d9:a5:ca:12:2e:e3:ba:74:14:2f:51:dc:
fd:80:bd:6c:2d:bd:df:3f:75:69:a7:24:45:73:42:
8c:4d:58:7f:ae:b9:20:ff:82:cb:7a:84:6e:0e:3e:
34:ca:ee:45:6f:1a:a9:96:41:1b:b9:8b:36:34:fe:
62:e1:30:77:73:bd:be:a9:79:ef:0d:23:25:a3:95:
8b:7d:ff:83:4b:af:80:de:78:40:02:ba:b7:f3:60:
a2:ea:4e:ee:ff:cf:e1:bf:e8:27:3d:87:18:94:d0:
02:39:ed:81:d8:e6:96:f3:ad:2e:e8:c7:de:e9:5a:
e5:33:9b:d7:17:b1:e3:21:67:af:34:5c:ae:c2:25:
76:18:a4:a4:f5:6b:d3:66:17:3a:47:2a:87:cd:4a:
20:a7:7f:d4:8e:f9:f9:f5:89:ee:79:b3:70:05:e0:
01:ec:c2:c4:db:d1:5a:10:a1:f2:e5:a2:01:90:35:
10:51:21:96:57:e7:f5:91:ae:fa:44:ad:06:ef:ed:
2a:3e:2b:09:1c:28:be:fc:2b:29:8f:e4:c1:7f:93:
76:d1:cb:9e:ed:bc:84:38:f3:4b:fc:93:bd:f7:8e:
3e:06:51:06:11:63:6b:80:51:d0:76:57:5b:58:49:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:EF:DE:82:EB:92:4E:54:D0:21:FD:DA:DD:EB:56:26:7B:2A:17
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:70:a0:28:a5:20:64:89:5a:c3:60:ec:20:de:cb:cb:4d:6a:
4a:d0:33:6a:d9:33:4a:7f:47:1b:4f:ca:05:1e:c6:10:22:13:
0c:19:2a:3e:d0:fe:a1:2c:d6:17:b6:03:57:86:b8:d2:aa:9c:
d0:83:47:b5:89:19:16:25:ff:42:47:4e:aa:d2:f9:5c:b9:c1:
3a:96:86:0e:ac:92:7d:e1:1b:4e:a3:f4:c9:72:33:c4:e6:d9:
ee:08:c4:b2:6f:89:1d:a6:ce:38:1f:6f:f4:04:b7:ad:49:6b:
97:e9:fe:6a:02:0d:55:7b:2c:bf:05:52:0d:aa:17:76:de:63:
22:80:77:71:4d:f5:e5:34:56:bd:9e:5c:b2:f5:42:c2:c5:1c:
0b:01:f4:20:51:28:b6:ee:86:c2:f6:04:fd:b6:6d:ec:bb:e4:
d0:9b:c1:8d:62:e3:ea:61:2b:13:d9:da:8f:8f:56:fa:9d:58:
50:da:48:96:f8:e7:64:4e:56:a3:02:ff:73:35:c3:17:ab:64:
d2:4c:79:4b:d8:e8:0e:80:fa:c0:01:c0:60:56:6f:d0:bf:05:
3b:85:23:2b:fe:fa:cf:a2:a9:da:a2:c3:e8:a1:9d:b8:91:45:
ec:10:fe:f3:a7:94:33:49:ae:a9:ef:5a:3f:05:99:8a:36:bc:
88:cd:55:32
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEJ0vmh6nXrG2pQXNRVnRT52H0cowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz
NDcwNTRmZDAeFw0yNjA4MjQwNzUyMDZaFw0yNjA4MjUyMDAxMDZaMDMxMTAvBgNV
BAMTKEUyNjhFRkRFODJFQjkyNEU1NEQwMjFGRERBRERFQjU2MjY3QjJBMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLavlsOJkPhpRDi4UJTMnG9ml
yhIu47p0FC9R3P2AvWwtvd8/dWmnJEVzQoxNWH+uuSD/gst6hG4OPjTK7kVvGqmW
QRu5izY0/mLhMHdzvb6pee8NIyWjlYt9/4NLr4DeeEACurfzYKLqTu7/z+G/6Cc9
hxiU0AI57YHY5pbzrS7ox97pWuUzm9cXseMhZ680XK7CJXYYpKT1a9NmFzpHKofN
SiCnf9SO+fn1ie55s3AF4AHswsTb0VoQofLlogGQNRBRIZZX5/WRrvpErQbv7So+
KwkcKL78KymP5MF/k3bRy57tvIQ480v8k733jj4GUQYRY2uAUdB2V1tYSeb/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU4mjv3oLrkk5U0CH92t3rViZ7KhcwHwYDVR0j
BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS
d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l
YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG
NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXCgKKUgZIlaw2DsIN7L
y01qStAzatkzSn9HG0/KBR7GECITDBkqPtD+oSzWF7YDV4a40qqc0INHtYkZFiX/
QkdOqtL5XLnBOpaGDqySfeEbTqP0yXIzxObZ7gjEsm+JHabOOB9v9AS3rUlrl+n+
agINVXssvwVSDaoXdt5jIoB3cU315TRWvZ5csvVCwsUcCwH0IFEotu6GwvYE/bZt
7Lvk0JvBjWLj6mErE9naj49W+p1YUNpIlvjnZE5WowL/czXDF6tk0kx5S9joDoD6
wAHAYFZv0L8FO4UjK/76z6Kp2qLD6KGduJFF7BD+86eUM0muqe9aPwWZija8iM1V
Mg==
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:51:54 2026 by rpki-client