Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: QPGD3xG/q6yMPzXLD6FbcYglqhq4pY2dRc2QAkdJDYc=
Subject key identifier: 79:41:5D:DA:F2:B8:1E:94:02:88:AC:5B:CC:B5:54:3C:E1:7A:BE:0B
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 592E68AF86EEF5C5242E8A7986CC0147CBEA8FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: EE
Signing time: Thu 11 Jun 2026 13:15:09 +0000
Manifest this update: Thu 11 Jun 2026 13:10:09 +0000
Manifest next update: Fri 12 Jun 2026 17:03:09 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: jtPXnmZ7hqZOz/Z1wSDY8NGOsdJ3B1R6ZdsxjoyFreA=)
2: AS216299.asa (hash: C6Imincuk4Y+ypRr+IT2cX74N/IZmTVY/cXjeA1NPfA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2e:68:af:86:ee:f5:c5:24:2e:8a:79:86:cc:01:47:cb:ea:8f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Jun 11 13:10:09 2026 GMT
Not After : Jun 12 17:03:09 2026 GMT
Subject: CN=79415DDAF2B81E940288AC5BCCB5543CE17ABE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:71:1b:5e:6f:00:fc:ef:d2:61:ba:88:8b:
ff:41:d5:d7:3e:1a:e0:83:5f:dc:32:0d:a5:14:b5:
7f:70:8a:b2:e7:ab:5e:bf:3f:1c:a2:c3:96:33:a8:
22:28:f9:1e:cc:ff:d3:b1:a2:c7:3b:39:07:b6:36:
26:78:a0:7f:19:c6:2c:89:f0:30:02:99:64:54:5f:
12:d1:ab:69:94:f9:39:56:78:03:d5:42:69:a2:85:
31:ee:bf:c1:6d:43:ff:3f:82:ec:d5:d5:e2:97:8d:
b9:ab:ca:30:01:9b:35:73:3a:d0:69:ad:cf:b5:75:
56:7b:93:0f:33:ce:f2:ef:ea:fe:e3:1b:5e:3a:46:
8c:98:8f:ff:f7:08:3e:f6:f5:61:66:83:be:7e:12:
95:d0:2d:76:2e:35:21:77:ce:36:98:54:55:04:3c:
09:ab:5e:5c:a7:01:67:98:9c:2e:16:30:c9:90:93:
a5:ad:a1:7b:7c:48:77:c6:84:56:5b:5a:55:68:43:
c2:9c:68:8d:2f:81:ff:89:b2:5c:ba:9e:66:c9:82:
04:a5:ee:85:b9:aa:d3:20:f8:fc:f7:53:d5:27:07:
e4:53:83:ca:6e:2b:e2:04:3d:5e:1b:09:69:ad:e2:
fe:f8:52:de:07:f9:8a:5a:0a:9b:4f:8a:0e:25:b8:
71:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:5D:DA:F2:B8:1E:94:02:88:AC:5B:CC:B5:54:3C:E1:7A:BE:0B
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6e:b2:9b:81:de:88:6d:2b:82:68:e2:9a:b7:14:b8:98:e2:
c3:b8:ad:57:e9:7b:16:bf:4d:e1:8f:84:8c:37:8b:94:1d:41:
10:82:52:57:03:46:94:5b:74:77:67:29:8f:30:12:e8:c0:6e:
19:f6:de:49:b3:5e:dd:10:ea:63:08:aa:ce:57:d7:b9:e2:09:
f8:17:48:0e:cd:d4:d6:8d:b6:24:53:44:a3:59:ba:22:ab:4a:
c1:bd:b9:5e:72:c1:f5:87:6a:c7:c1:34:ee:50:d4:0c:d4:44:
b9:8c:ef:92:83:05:f5:ed:7d:d8:74:62:2e:bb:d6:8a:d5:03:
8f:48:25:ba:7c:29:ab:c6:d4:a2:9c:80:3f:0b:d3:21:6b:a9:
82:a3:6d:b8:0f:8a:37:95:41:6a:85:aa:ae:96:ff:74:df:7e:
1b:86:f3:dc:ac:c1:9a:1f:bf:89:d9:78:6a:f9:24:99:98:be:
41:50:69:b6:a9:07:e2:93:6b:bb:85:09:86:5c:68:75:0c:57:
c4:84:20:3a:e2:7a:02:f9:80:8f:e5:98:dd:98:52:bd:57:79:
de:5a:36:93:15:f7:a3:8a:8a:4b:a2:ee:ff:24:75:e4:c8:06:
d3:ea:13:1b:fe:57:0c:69:f8:88:63:d3:71:c9:fd:b3:80:06:
4f:38:21:e4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUWS5or4bu9cUkLop5hswBR8vqj8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh
YWVjNDk0ZjAeFw0yNjA2MTExMzEwMDlaFw0yNjA2MTIxNzAzMDlaMDMxMTAvBgNV
BAMTKDc5NDE1RERBRjJCODFFOTQwMjg4QUM1QkNDQjU1NDNDRTE3QUJFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXHEbXm8A/O/SYbqIi/9B1dc+
GuCDX9wyDaUUtX9wirLnq16/Pxyiw5YzqCIo+R7M/9Oxosc7OQe2NiZ4oH8ZxiyJ
8DACmWRUXxLRq2mU+TlWeAPVQmmihTHuv8FtQ/8/guzV1eKXjbmryjABmzVzOtBp
rc+1dVZ7kw8zzvLv6v7jG146RoyYj//3CD729WFmg75+EpXQLXYuNSF3zjaYVFUE
PAmrXlynAWeYnC4WMMmQk6WtoXt8SHfGhFZbWlVoQ8KcaI0vgf+Jsly6nmbJggSl
7oW5qtMg+Pz3U9UnB+RTg8puK+IEPV4bCWmt4v74Ut4H+YpaCptPig4luHGvAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeUFd2vK4HpQCiKxbzLVUPOF6vgswHwYDVR0j
BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy
c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC
REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm6ym4HeiG0rgmjimrcU
uJjiw7itV+l7Fr9N4Y+EjDeLlB1BEIJSVwNGlFt0d2cpjzAS6MBuGfbeSbNe3RDq
YwiqzlfXueIJ+BdIDs3U1o22JFNEo1m6IqtKwb25XnLB9Ydqx8E07lDUDNREuYzv
koMF9e192HRiLrvWitUDj0glunwpq8bUopyAPwvTIWupgqNtuA+KN5VBaoWqrpb/
dN9+G4bz3KzBmh+/idl4avkkmZi+QVBptqkH4pNru4UJhlxodQxXxIQgOuJ6AvmA
j+WY3ZhSvVd53lo2kxX3o4qKS6Lu/yR15MgG0+oTG/5XDGn4iGPTccn9s4AGTzgh
5A==
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:30:57 2026 by rpki-client