Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: IQnuRzURauv+qU4qAqdl6nNgG/8PWlNIByQ4e9Cf8BM=
Subject key identifier: A2:D9:E1:2D:96:8D:20:73:40:B5:B3:39:6C:11:FD:FF:BC:7C:0E:FE
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 20812E4E67BFF0FC1E1ED182A3F5C07C04024CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: AE
Signing time: Sun 26 Apr 2026 22:51:24 +0000
Manifest this update: Sun 26 Apr 2026 22:46:24 +0000
Manifest next update: Tue 28 Apr 2026 01:26:24 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: tFKjoadts6suewaLeXrJFmnUmlXvtwkqDO5RaLqZx84=)
2: AS216299.asa (hash: b6JHD36Kgpu0jmLLR3t1azNloUQb5AtsPrRoc08q6FE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 01:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:81:2e:4e:67:bf:f0:fc:1e:1e:d1:82:a3:f5:c0:7c:04:02:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Apr 26 22:46:24 2026 GMT
Not After : Apr 28 01:26:24 2026 GMT
Subject: CN=A2D9E12D968D207340B5B3396C11FDFFBC7C0EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:7b:31:7c:fd:f8:a8:df:e0:25:63:40:fa:
87:db:5f:24:48:04:ae:92:de:da:6f:0a:cd:98:fb:
20:a7:dd:9e:76:77:40:17:c5:90:cc:ad:19:5c:86:
9d:74:f3:a9:65:6d:d1:82:94:e4:44:9d:d2:e8:1b:
b7:c9:0d:88:74:98:4d:78:4b:72:9c:ec:bc:8a:b7:
99:1a:8d:96:43:a9:87:34:8f:3f:96:25:69:db:b2:
6e:7a:c0:fa:44:e1:12:b6:34:6a:b4:67:6d:eb:f6:
af:8c:a0:fc:e2:d0:18:2e:f8:30:08:fe:f6:75:05:
3d:81:1a:46:e3:94:fa:82:31:ae:6c:88:16:8c:5f:
02:d9:cf:2a:a2:b3:53:3c:4b:b8:a5:b5:44:12:79:
2c:53:c4:2c:02:55:61:33:a4:b7:68:66:5f:70:75:
4f:38:ed:05:3b:1d:a5:19:bc:c1:f5:95:4e:09:aa:
7e:1b:56:62:ae:51:6f:e4:c7:d6:17:fb:02:91:37:
1c:0c:ad:38:7c:a1:ad:e6:03:12:47:d9:55:40:21:
b0:9e:0f:09:ac:72:e8:b1:bc:16:dc:86:2f:f8:f3:
f6:39:83:3d:d5:90:c0:e4:29:91:02:8f:27:0d:b4:
2a:13:6b:47:ee:5b:1d:82:b9:ef:eb:ce:37:4a:88:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D9:E1:2D:96:8D:20:73:40:B5:B3:39:6C:11:FD:FF:BC:7C:0E:FE
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:14:2f:55:a0:71:ca:53:1c:da:14:f0:36:66:67:a9:4a:f5:
f8:76:61:cb:a9:54:19:fb:8d:86:d0:21:9f:73:22:e2:9e:c8:
d8:66:91:73:39:81:31:be:0c:6a:5d:34:82:83:d9:1f:b5:cc:
e0:5d:32:04:25:36:42:ab:26:7a:b8:63:8d:9e:27:da:32:f9:
94:22:f1:9d:de:0d:62:25:5d:3b:25:7b:2a:17:27:1e:40:af:
ba:8b:71:e0:48:1f:56:0f:97:1e:c0:bd:32:e4:b4:2b:d7:d6:
69:69:e2:be:9c:4e:a3:aa:66:0d:30:e2:44:27:9d:e8:94:70:
ef:41:67:b1:b8:b2:e0:26:99:98:7f:6b:70:3f:9f:46:6b:40:
bb:13:f3:6a:a3:24:92:74:20:89:94:e3:05:c7:35:d7:80:56:
53:77:db:3a:28:24:71:f3:37:e2:f5:51:7f:48:43:11:36:ff:
9e:ad:0b:f7:86:10:f7:53:9e:5e:6b:3e:9a:ff:b8:17:65:be:
06:80:5d:55:80:64:09:e4:cd:59:1c:c6:9a:39:1a:ac:06:c6:
43:6d:bf:84:86:9b:63:96:ef:6b:94:43:8f:f8:cb:81:2a:2c:
75:37:3e:0f:82:02:6e:a0:f6:26:e0:e0:77:d4:58:5d:7e:99:
06:58:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:09 2026 by rpki-client