
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: 9mptvtooSyz+vlUcRin6F865b/LokVmwHqHyiiCK5DY=
Subject key identifier: 2A:A5:C2:3F:44:3B:6F:E5:8E:20:00:DD:64:8C:BA:B2:00:4F:78:6F
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 0380E250EE9C23DB4F27B16D437D4CEE8902E1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 037F
Signing time: Thu 23 Jul 2026 07:56:48 +0000
Manifest this update: Thu 23 Jul 2026 07:51:48 +0000
Manifest next update: Fri 24 Jul 2026 22:54:48 +0000
Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: LAqMurOACKOcTDfVrSWYzLQrgHLkSYWwYzwSy/RN1e8=)
2: AS214701.asa (hash: UOIf3+bA1bWgRwKrencsqF4C+G5oZw6BMPcTVaDJzos=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:80:e2:50:ee:9c:23:db:4f:27:b1:6d:43:7d:4c:ee:89:02:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Jul 23 07:51:48 2026 GMT
Not After : Jul 24 22:54:48 2026 GMT
Subject: CN=2AA5C23F443B6FE58E2000DD648CBAB2004F786F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:cd:d8:a4:80:2e:ec:68:74:4e:d6:c7:b6:
cf:cd:07:40:d4:ed:75:81:b3:9c:36:37:0d:86:f1:
82:fa:24:3f:72:38:47:40:ca:cf:ef:34:b5:a4:17:
af:10:e6:e9:d6:0f:2c:7f:3d:34:da:b7:5d:7e:20:
3f:55:0a:d6:38:16:9c:41:c5:78:75:57:0d:cc:f8:
0a:ba:0e:14:98:7b:5e:4d:f6:e9:df:1e:cd:e8:e8:
a3:fc:8a:41:f7:83:64:42:72:14:a1:a5:d4:0a:ec:
4c:a0:54:36:1e:62:07:1d:ce:c7:b1:dc:26:37:c9:
08:b4:a7:05:5b:4e:4a:95:0b:1e:24:0a:52:34:f8:
d3:fe:c7:54:de:66:a2:4f:5a:44:60:6d:88:aa:62:
42:1d:29:da:17:c4:0f:2d:de:29:b7:b4:76:94:74:
f2:b0:b4:e2:a8:38:4c:8a:ca:30:31:63:cb:8c:8d:
50:3e:cb:1d:04:f8:5c:46:2a:76:c6:32:b7:d1:12:
b3:ba:af:d0:7b:92:a4:12:a2:02:bf:61:02:7e:30:
63:ee:e0:7d:c1:0b:8c:c7:f7:8d:63:f2:49:91:c1:
75:3e:3a:f4:6e:d2:95:0f:19:ed:54:18:40:2a:26:
0c:c7:17:6b:73:ad:cd:c4:f5:09:26:91:b7:cc:ef:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A5:C2:3F:44:3B:6F:E5:8E:20:00:DD:64:8C:BA:B2:00:4F:78:6F
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:3b:91:5a:f6:e6:6a:5e:f2:ae:a0:95:21:b0:21:44:1b:b2:
9c:e1:a3:97:de:73:5c:3c:1c:4c:06:f2:40:b5:77:57:c7:5e:
e3:ea:81:ac:43:ea:43:bb:7f:2c:63:e4:9a:c0:56:3c:b3:18:
65:8f:99:1b:89:4f:9a:62:b0:d2:5c:d1:01:3d:56:78:78:e4:
ef:9e:c5:db:1e:5c:43:6e:cc:1e:b6:2b:fb:4f:48:a7:26:87:
18:c3:e5:67:39:89:28:9c:80:20:42:0f:4d:19:b7:3a:67:e0:
1e:3e:94:f2:ba:31:2d:f5:a4:f2:cd:29:a5:80:f3:bb:24:d9:
2c:bd:88:44:cc:c2:4b:de:ce:9b:bc:71:fc:f9:5f:e4:d5:2b:
30:58:16:ff:a9:41:3e:0b:04:a5:4a:10:35:38:5b:91:6f:74:
28:2b:d8:79:27:69:d2:87:c6:2c:cd:56:a8:95:a4:98:d5:d1:
31:1e:b9:2a:3a:82:ee:1e:8b:7d:bf:6a:89:12:94:0d:f7:ba:
3b:3b:22:ca:dc:0c:a0:a5:80:a2:96:2c:b2:b7:db:d8:8a:13:
16:68:33:ee:ac:68:da:17:59:af:d9:f8:1b:f4:9c:68:b2:63:
57:89:3c:e4:f6:79:01:32:66:42:e5:ca:d8:97:c6:d4:e6:82:
b8:b0:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:48 2026 by rpki-client