Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: K34CcPvkVqlTtYkg0+AENuO3PFjhMKYgvbecEKkWvwU=
Subject key identifier: 9C:04:62:ED:9A:CD:FA:13:1F:FC:ED:B2:15:DD:EA:E5:5B:45:78:62
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 7C340DF524A5C3C7F6353992ABEFCE3406B1C5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 016A
Signing time: Thu 10 Sep 2026 00:00:06 +0000
Manifest this update: Wed 09 Sep 2026 23:55:06 +0000
Manifest next update: Fri 11 Sep 2026 03:24:06 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: dAq2DTjYeRDu7IVX/adyvsu/va/ymUYx3l5FGE6D8FU=)
2: AS216299.asa (hash: I866WwaCMkBkfDG0RdBvujZmrBd6yGQBEMDG+oFbDlQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:34:0d:f5:24:a5:c3:c7:f6:35:39:92:ab:ef:ce:34:06:b1:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Sep 9 23:55:06 2026 GMT
Not After : Sep 11 03:24:06 2026 GMT
Subject: CN=9C0462ED9ACDFA131FFCEDB215DDEAE55B457862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:1e:43:7a:60:d9:c9:df:ec:51:38:90:7a:
20:42:3c:8d:e8:ff:68:5c:1f:f4:90:14:4a:4a:26:
b8:48:c2:27:b7:e5:8f:ad:ff:89:97:4f:1e:a3:b7:
7b:82:59:f0:6e:ed:20:9d:78:82:1e:b7:0c:f4:d6:
2e:47:99:dc:fb:ba:f0:bd:0f:8e:a9:f5:90:17:56:
95:6c:3f:9d:c2:0c:c6:2d:9b:9c:8f:79:cf:ea:bd:
fe:b8:89:ab:8e:51:a6:40:71:0f:72:f7:37:21:44:
ab:22:06:ac:4e:30:bd:3e:51:cc:3d:31:d9:47:f5:
0d:ed:3a:96:af:80:0b:84:1e:aa:23:09:06:58:de:
83:df:0a:e0:6c:fa:91:b2:86:cd:fd:35:85:c7:46:
0b:52:33:10:7a:bc:85:3a:8e:bc:bf:f1:e0:d0:f1:
9d:13:b4:10:1c:d3:16:22:e4:92:4d:48:a3:d4:b6:
35:8f:aa:50:3f:cd:9e:1c:e4:4b:f8:f2:76:72:1e:
82:cb:60:96:39:1f:7e:b8:cc:1d:91:87:a5:a7:3a:
78:31:24:a9:f6:f2:19:4d:d4:cd:b2:87:16:6d:d5:
29:28:d4:e5:f8:d3:79:db:77:cc:cb:d8:8e:74:9a:
ae:91:bb:d4:66:06:b0:c2:2f:8f:9c:8f:e6:26:53:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:62:ED:9A:CD:FA:13:1F:FC:ED:B2:15:DD:EA:E5:5B:45:78:62
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:cb:aa:9d:49:91:14:c7:2d:40:e1:31:96:d7:9d:5e:6c:
35:dc:5b:25:6b:44:24:14:ad:31:bd:44:6f:12:16:db:f4:a6:
46:ee:5d:e6:bf:f7:9a:f1:c2:0c:3a:c9:0c:67:c5:ff:6f:c5:
7b:cd:3e:03:e7:48:fa:e0:0e:41:af:8f:8b:be:c1:22:47:73:
9b:6a:91:6d:d9:51:cd:ea:77:a4:f8:b6:95:d6:2a:9e:ed:97:
b5:e5:7c:98:00:9b:8d:f8:e4:2e:90:a9:a1:00:b6:7d:a4:b4:
40:62:c5:f4:b4:cb:7c:f8:f2:50:b4:88:17:0d:97:65:3d:a8:
83:6e:3a:e5:4d:c2:4b:a5:b0:ce:c8:4b:bc:cf:05:07:cc:27:
db:55:d6:62:79:d0:90:ca:4c:9a:68:73:77:0c:cb:b1:57:d6:
8d:2d:d2:6f:74:30:e6:80:fb:3a:18:1b:a6:35:fb:56:98:77:
02:9b:2d:6f:34:4d:36:e0:ed:f0:9a:f7:cd:84:ff:24:1f:0c:
28:0b:a1:fb:8f:19:52:0d:1b:93:02:49:a1:3c:e8:d7:43:de:
75:c9:8a:7c:07:cc:33:03:b0:2e:60:07:39:ca:e9:98:ac:6d:
ea:8f:fe:4a:98:39:40:63:56:dd:63:10:34:d3:df:95:41:12:
2c:8a:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:48:42 2026 by rpki-client