Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier: j8e5yXMwAX1JYXVHM9lAeDvZMi/pYL8+t3dr0UAB3mU=
Subject key identifier: FE:A7:04:94:32:E3:DC:7E:18:4A:78:89:1D:80:EC:47:A4:C4:FA:3A
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial: 78B63289224FA2522C3CF7751368B236AE4FDAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number: 02AA
Signing time: Wed 25 Mar 2026 22:55:47 +0000
Manifest this update: Wed 25 Mar 2026 22:50:47 +0000
Manifest next update: Fri 27 Mar 2026 13:21:47 +0000
Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: ymTZJ6/VG+/FdGCQ2S69f1gSUc+ZigsggBL2ChO9eeE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b6:32:89:22:4f:a2:52:2c:3c:f7:75:13:68:b2:36:ae:4f:da:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
Validity
Not Before: Mar 25 22:50:47 2026 GMT
Not After : Mar 27 13:21:47 2026 GMT
Subject: CN=FEA7049432E3DC7E184A78891D80EC47A4C4FA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:d6:01:ee:a0:dc:dc:9d:1b:bd:2e:ac:1a:
bd:44:b6:91:f6:c9:9e:96:d8:13:be:36:bd:c1:be:
69:1c:4f:d7:4d:03:5a:ce:f0:59:21:4d:19:8d:ce:
08:7a:14:06:aa:be:7b:3b:a0:69:00:05:ee:dd:aa:
18:d4:f9:1a:70:db:25:18:bb:8f:31:c8:f2:c2:f9:
e1:9f:39:3b:1f:2f:f6:b0:3e:2e:1a:a9:e5:15:8f:
e7:a3:2f:64:2d:c9:64:75:32:27:bb:f5:15:65:4d:
97:70:a4:7b:a7:63:4a:50:9a:50:40:6e:32:7d:e8:
f4:d3:c0:ea:2a:7f:c6:f0:fc:71:18:57:e8:97:27:
85:f8:50:50:2f:e8:db:55:29:a5:24:c1:84:09:9b:
d1:86:87:d5:cb:23:03:3c:ea:40:18:cc:de:a2:45:
e2:f0:b5:fc:f0:1d:9a:7f:38:20:70:50:f6:ce:17:
ad:31:1a:6f:f3:8a:b0:40:69:38:a2:5a:bf:19:cd:
13:cd:9d:63:f2:40:08:8e:6e:b1:b3:ac:d9:ac:50:
75:75:47:aa:1c:f3:ef:12:e3:6e:53:d8:ab:ce:b3:
bd:3c:18:10:e1:58:4f:87:fb:6d:ee:02:ce:33:7e:
00:21:de:cd:ce:77:6d:6d:41:c9:cf:4b:11:c1:e5:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:04:94:32:E3:DC:7E:18:4A:78:89:1D:80:EC:47:A4:C4:FA:3A
X509v3 Authority Key Identifier:
keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:de:5e:91:07:47:be:ee:88:28:fd:ab:15:d2:82:78:0b:d0:
92:ef:d5:ac:b7:59:7a:3c:ed:48:4b:d5:86:18:db:79:1f:fa:
8c:21:d8:c9:f6:9e:5f:21:25:b2:e1:d4:52:c6:2a:23:ce:74:
21:6a:54:76:c0:42:80:4d:3c:db:ec:41:f2:49:a6:70:80:d3:
60:87:b0:e6:f4:b4:9b:a1:6e:bb:39:81:d6:b6:e1:36:d9:49:
a7:a0:69:8e:d7:dc:14:ed:0f:d8:a6:47:5f:7a:c3:bc:cb:58:
0f:6a:55:f8:5a:e3:29:57:99:a9:4c:a1:fe:13:3d:da:01:82:
15:3d:9f:b0:f2:5d:8b:bb:bc:a7:62:79:ff:39:34:80:1a:db:
11:a6:71:23:48:54:17:51:48:b4:6f:d3:1b:97:52:31:62:33:
ef:22:79:2b:a2:f8:d0:8a:23:f0:d2:7d:f5:17:13:a5:ed:e6:
5e:87:f6:76:f8:4d:42:c3:08:21:c3:b8:c0:5f:bf:0d:58:7c:
ab:cb:3f:1c:f7:7c:02:a0:fa:16:8a:66:7e:7d:b5:d2:97:fd:
24:06:45:4f:e0:92:14:9d:bd:dc:b0:5c:66:4b:ab:f9:20:1b:
c4:4e:43:27:e1:0e:25:cb:b1:ba:7e:05:66:a4:a3:43:df:7b:
51:c1:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:10 2026 by rpki-client