Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: zT4CsXAupuih7XKox2dhxqkvR7DL04PLDm+iaE0OWaA=
Subject key identifier: 69:7C:8A:A7:2C:94:DD:C4:5F:E3:65:47:BB:72:1B:83:DF:05:A4:FB
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 27642A24F243AD292438B109ACE6FF36E65CEC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 012D
Signing time: Sun 26 Jul 2026 10:56:35 +0000
Manifest this update: Sun 26 Jul 2026 10:51:35 +0000
Manifest next update: Mon 27 Jul 2026 12:49:35 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: MfsKXoy3s5GMe8FwzImv5xkDVHmz5EO0kk15BIOsIsY=)
2: AS216299.asa (hash: I866WwaCMkBkfDG0RdBvujZmrBd6yGQBEMDG+oFbDlQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:64:2a:24:f2:43:ad:29:24:38:b1:09:ac:e6:ff:36:e6:5c:ec:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Jul 26 10:51:35 2026 GMT
Not After : Jul 27 12:49:35 2026 GMT
Subject: CN=697C8AA72C94DDC45FE36547BB721B83DF05A4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:21:b7:4b:7c:fc:6f:00:9f:e2:6e:d0:7a:
77:69:31:fb:98:db:a8:02:9a:39:d8:e1:a1:ae:de:
50:a2:54:06:0c:34:37:2e:f3:ea:ec:91:89:00:6b:
12:9d:f4:0c:7b:9b:f9:44:63:56:8c:b3:40:47:4c:
1a:ed:5c:b3:05:bd:61:6e:bc:df:d7:db:7c:f8:f0:
97:3d:4d:17:67:7c:a0:24:23:a5:80:91:14:b2:6b:
6d:c8:d9:f4:41:a7:e9:c5:b9:d5:e1:2e:68:44:45:
d7:0d:4a:2d:60:23:a4:a2:44:bb:fd:ff:97:b0:f5:
fa:c3:35:ff:38:bd:49:e3:33:32:a2:d9:4e:49:4a:
47:d2:b8:eb:0b:81:37:27:e1:d6:bb:e5:eb:50:0d:
d9:4d:ee:b2:82:12:cd:d9:0d:dd:bb:23:6d:32:22:
59:5d:b7:dc:37:89:c2:e7:9e:50:9e:b7:6f:e9:7b:
e1:2a:ca:b1:af:47:80:54:11:ae:4e:71:40:69:0b:
de:fb:bc:fa:22:86:58:d0:a1:a9:2a:82:f5:95:76:
b9:3b:f2:df:4d:7f:0b:2a:f2:b6:b3:85:cc:a2:a5:
c0:8b:b5:a5:a1:56:5c:15:1f:4a:a5:49:95:9b:2c:
0d:d9:ad:48:83:a7:db:e8:88:b4:86:b4:0a:90:98:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:8A:A7:2C:94:DD:C4:5F:E3:65:47:BB:72:1B:83:DF:05:A4:FB
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8a:e6:2e:6f:a8:ff:7c:cd:8d:c1:93:32:58:e7:d3:f9:65:
c1:49:32:7a:a2:cf:97:99:51:5f:d4:9f:56:ef:28:91:40:36:
da:48:63:ee:57:4c:0f:87:a9:e9:c3:91:6b:c7:2e:7d:f4:3c:
76:d2:c3:a1:1d:1e:83:82:6a:f5:f3:f8:30:56:f6:be:47:94:
d7:e4:9e:e8:2d:64:a1:07:be:29:87:81:e1:21:5c:65:e9:e5:
25:23:4e:de:54:c4:ae:6b:6a:4b:c3:19:cc:ce:44:1e:f3:17:
70:d3:c2:93:9b:a9:61:15:4b:aa:b2:d8:c7:7b:50:aa:3b:5d:
70:e1:f6:48:fb:dd:a8:a6:61:bd:60:26:1b:56:15:e0:88:5e:
02:99:f1:d1:ac:54:47:ef:57:0a:8b:54:cb:a0:79:12:37:13:
ef:60:6a:f8:86:31:42:66:33:2b:b7:38:cf:ae:15:67:71:b1:
60:ea:1b:65:b9:83:8f:49:c1:d8:2f:7d:5c:36:7b:52:c3:75:
2a:21:9e:cb:f8:4a:c8:b7:40:65:71:fe:3d:b6:a2:15:01:51:
20:84:9a:21:73:e9:24:62:4c:28:00:5a:d6:12:6c:78:01:cb:
6f:b6:f4:43:10:5c:1e:0f:66:2d:cd:13:20:79:bb:e8:4b:3a:
30:51:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:40:43 2026 by rpki-client