Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: RIBFzhKbJ4aNkwTEuu84XNE7x4EyYswEu3bdVEkwWn4=
Subject key identifier: 82:53:90:39:5A:18:FC:75:95:26:CA:80:D4:88:28:7E:39:76:E2:4A
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 15B362F9072CA1A9D8DAB349FE5DA62D1BF09512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 01A9
Signing time: Tue 27 Oct 2026 09:55:07 +0000
Manifest this update: Tue 27 Oct 2026 09:50:07 +0000
Manifest next update: Wed 28 Oct 2026 11:05:07 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: SJSw+P8Pf7xN3YT/0QH+y3lfqL2xljQrsmJfQdcdNF8=)
2: AS216299.asa (hash: 90KTaZo6LkHZqsms2xoiDT822/KRSoS7HJkIrzohGFw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b3:62:f9:07:2c:a1:a9:d8:da:b3:49:fe:5d:a6:2d:1b:f0:95:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Oct 27 09:50:07 2026 GMT
Not After : Oct 28 11:05:07 2026 GMT
Subject: CN=825390395A18FC759526CA80D488287E3976E24A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:9c:5a:c1:ed:e4:7b:ad:bd:9a:6f:0c:18:
4c:41:db:4a:a8:19:0b:a0:92:2c:9c:ae:46:6e:e1:
fe:c0:84:a7:e4:df:43:40:7c:36:88:29:1d:d8:56:
b6:42:3c:e5:7d:55:a4:95:c9:1c:7e:e0:01:c6:fc:
8d:2d:e6:28:8b:f8:6f:33:06:11:53:d1:fa:c9:14:
dc:2e:57:c3:0f:1f:75:01:31:4e:2f:50:bf:d9:3b:
2f:6a:8c:84:a7:d5:9c:34:b3:dd:e0:91:91:d6:eb:
9a:18:48:e4:45:17:da:de:3d:ff:2c:42:ca:e3:63:
73:be:91:d1:2e:ac:94:bb:53:d0:b1:af:01:62:9f:
b5:f1:7a:a2:ee:b5:bf:4a:18:0f:bd:30:8e:35:c4:
49:0b:0b:b4:39:ba:d2:54:52:0e:59:0a:2a:2f:ce:
9d:b6:3c:05:76:cd:79:27:25:53:5a:94:06:be:ce:
18:d6:fe:7e:1d:4d:38:2b:a2:b0:7f:94:af:e8:cb:
da:e7:bd:80:47:1d:ae:c1:4d:08:48:d1:7a:49:ee:
c2:6a:03:ac:85:78:a5:d5:2e:dd:fe:54:e4:19:39:
61:bf:3a:06:59:ee:13:10:0d:b2:1d:33:7c:1c:1f:
59:f9:1c:a3:6d:89:b5:33:10:3d:d5:5a:a5:b2:12:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:53:90:39:5A:18:FC:75:95:26:CA:80:D4:88:28:7E:39:76:E2:4A
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ba:3d:0f:10:3b:be:b7:d2:30:4e:1d:b3:78:dc:6b:1f:e2:
37:37:d0:ec:59:61:9a:8f:e5:2e:93:7e:bc:07:4a:f8:b5:37:
25:67:39:12:9b:1d:29:56:f1:05:3e:1f:85:31:de:77:37:eb:
75:c8:56:45:50:9a:2d:c7:41:89:ad:01:2b:3f:58:e5:a2:41:
b0:cc:f7:27:0a:29:aa:e5:6d:d0:45:05:19:5c:5a:ba:50:88:
bb:87:65:54:be:a4:61:cd:79:e6:3c:7d:b2:49:59:0e:90:0c:
81:dc:a6:41:1e:c7:2f:89:08:03:fe:b8:5f:62:21:ca:13:78:
e5:7a:74:60:b0:8e:12:9f:5f:7f:c1:ee:f2:e0:77:4a:4e:7d:
cb:a9:60:4f:76:9a:cb:ab:49:63:d1:aa:b6:9e:bf:36:e0:4f:
b8:1a:e3:1f:75:09:ab:8d:22:24:ba:d8:a1:1e:27:79:c1:55:
8d:3f:33:e5:f3:28:02:10:6c:6b:45:ae:b7:a6:30:cc:26:a6:
76:1a:6a:34:ea:ed:93:79:8d:01:fc:16:ef:27:df:97:d3:69:
1b:ac:d1:67:1e:12:d6:4d:69:96:ed:5d:5b:82:1b:35:e5:64:
4e:5e:5f:59:e1:4e:79:95:32:b5:c7:d6:27:42:1d:57:d1:e6:
12:44:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:32:35 2026 by rpki-client