Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: CWN81qqqwFiGKlROzm3b4jGnvCtMkIqxcgiOkGuAByI=
Subject key identifier: 3A:C5:E9:C4:92:3F:C1:1A:2C:AB:BE:89:E9:E1:6A:AB:D7:70:C3:06
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 017B186FEBB703106CC1B500A943758B735829CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 70
Signing time: Thu 12 Mar 2026 01:50:25 +0000
Manifest this update: Thu 12 Mar 2026 01:45:25 +0000
Manifest next update: Fri 13 Mar 2026 05:01:25 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: gJ3aIO5jbkZvV4mh5boO3Uea0CmEc3xRZ6zIclnXano=)
2: AS216299.asa (hash: TlHOSdqQ2ADDKDRCcQpRrFP1hU0fvdwNU4f2fTdJveQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7b:18:6f:eb:b7:03:10:6c:c1:b5:00:a9:43:75:8b:73:58:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Mar 12 01:45:25 2026 GMT
Not After : Mar 13 05:01:25 2026 GMT
Subject: CN=3AC5E9C4923FC11A2CABBE89E9E16AABD770C306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:10:25:3b:6d:1d:36:f3:8a:dd:f7:7d:75:
05:d2:24:ac:55:98:a1:87:cc:da:a1:7f:e9:e7:45:
88:73:42:d8:d5:61:08:49:77:56:4e:2e:b0:86:09:
9e:bc:f4:64:85:1d:c2:01:63:65:5f:9d:ae:8b:0d:
73:3c:67:b5:d1:36:fd:92:2a:ee:35:46:9b:a9:09:
27:8a:16:79:14:1d:8a:be:fd:9b:44:0a:3b:82:bc:
36:5f:c8:8b:3e:a7:87:04:07:eb:c8:9e:76:a5:20:
e3:ef:8d:ac:a4:e6:9b:22:c6:ee:df:bb:c3:b6:77:
fb:85:b8:5b:bf:bc:35:eb:9e:1f:6a:eb:cd:b4:a9:
38:a0:ae:e8:e8:8a:1a:21:5b:7b:e1:90:85:a8:46:
27:59:f9:22:c0:59:1f:8c:49:0c:0f:af:6d:49:35:
5c:69:d2:83:98:2b:f1:ea:ce:10:b2:18:fe:ee:06:
93:52:30:f2:99:bd:80:cf:c1:19:08:ca:31:88:b0:
6f:96:8a:b8:ae:bf:07:5d:4a:e5:f4:93:b2:14:05:
be:e4:5c:a0:e8:9c:2f:4c:09:4f:29:67:0a:8e:ff:
49:d7:85:41:45:f6:8b:4b:94:cb:48:63:52:90:83:
5c:24:3b:19:98:0c:ee:61:91:5f:8d:d7:03:d9:8d:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:E9:C4:92:3F:C1:1A:2C:AB:BE:89:E9:E1:6A:AB:D7:70:C3:06
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:80:20:e0:bc:54:a5:f8:5b:de:e9:c3:01:d2:94:ca:da:ef:
c5:66:0a:16:63:14:ab:5d:7e:ae:bd:59:a9:8e:14:a0:65:47:
32:84:f8:3e:41:f6:47:78:79:2e:b1:a4:0e:d2:43:34:59:9a:
cd:28:9e:ef:c1:10:45:25:c8:0a:f7:69:83:42:d8:08:39:52:
db:1d:4c:33:0e:4f:5c:3f:e0:9d:a5:c4:8a:08:31:1f:01:fe:
16:28:58:69:f0:e6:74:c2:59:8f:4b:d5:6a:9a:60:f6:86:5d:
21:11:fa:5c:ff:f0:45:1a:54:c5:86:39:b9:1a:af:33:06:35:
64:76:0c:bc:1a:c7:f9:78:7d:87:50:48:08:a7:df:b9:52:73:
ee:dc:f9:86:3b:a2:a9:59:c8:69:80:70:8a:0b:0a:7e:b9:4b:
4d:94:3b:7a:ca:91:ad:0d:d3:d7:54:e4:c3:82:7a:d4:06:24:
be:0d:91:6d:3c:41:74:05:ee:cb:22:23:91:f3:2f:15:93:58:
50:de:ee:ed:fa:f2:e7:27:cf:4b:54:8c:c6:78:c9:d0:27:b2:
a6:0d:f3:ce:cd:7c:ca:3c:42:d1:a4:ad:9b:24:eb:cb:45:39:
a2:c8:2e:44:e8:dd:45:f7:20:88:96:18:19:5c:52:33:f5:39:
0e:bc:25:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:38:49 2026 by rpki-client