Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: PgBd+YpFWmofVRRIAWdK3BxSgzfPAIotaBFoGqcIV9c=
Subject key identifier: 24:95:06:7C:36:84:0F:81:A1:75:00:89:D8:8A:4C:FC:B6:5C:EF:68
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 3E73B5458E2A22A8CE56D6C2D912AADD1DA656CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: C4
Signing time: Tue 12 May 2026 08:11:59 +0000
Manifest this update: Tue 12 May 2026 08:06:59 +0000
Manifest next update: Wed 13 May 2026 08:26:59 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: dgA2e1ubrEfp6sAAJhT5q2Q6luqAC7ZwOY0mva4QgzA=)
2: AS216299.asa (hash: H4Qu4l8mRx2zV2knf8zZL5l+1k0edrUS+Xr2dverTdc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 08:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:73:b5:45:8e:2a:22:a8:ce:56:d6:c2:d9:12:aa:dd:1d:a6:56:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: May 12 08:06:59 2026 GMT
Not After : May 13 08:26:59 2026 GMT
Subject: CN=2495067C36840F81A1750089D88A4CFCB65CEF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:b4:75:5f:44:30:5b:09:b1:e3:85:ea:91:
b3:cd:35:72:34:19:bf:e1:52:fa:88:87:26:04:e1:
ec:cd:cb:e5:84:7c:50:99:15:18:77:76:4c:4e:32:
08:cb:1d:66:c3:97:81:e3:6d:d7:ba:b5:8c:4b:b7:
1a:ff:36:d1:3d:6e:f3:25:f8:34:7d:c4:1b:19:fc:
cb:22:25:a0:09:ae:89:4c:4a:b6:71:79:51:4d:37:
e8:50:9e:f9:06:4f:5d:32:16:2f:9c:8c:af:fe:b0:
72:a6:ae:95:ff:91:eb:41:cb:74:4c:34:2f:93:31:
48:9b:4f:22:9a:2e:b1:01:a9:fc:ed:ec:5c:da:2c:
2f:c0:3a:6b:a5:cc:18:e5:af:17:1c:8b:f1:2d:6c:
92:38:f3:06:47:4a:9d:c9:c8:f3:c5:3c:6b:73:43:
7d:52:28:54:e4:6b:38:47:ea:69:6a:24:50:db:db:
fd:13:9f:bd:b2:f7:29:fd:f2:c9:68:d0:e5:6c:d5:
48:99:87:6b:14:63:a1:0a:82:df:36:fc:47:24:2c:
d9:59:6c:42:c6:1d:0a:65:2e:4d:0e:13:4f:fb:99:
47:43:da:57:1b:58:b8:fa:a2:5f:2d:ff:8f:ff:b7:
94:b3:9c:43:e5:d5:18:a3:69:74:a6:66:76:8e:35:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:06:7C:36:84:0F:81:A1:75:00:89:D8:8A:4C:FC:B6:5C:EF:68
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:b2:86:60:c6:bc:be:41:3a:ce:85:21:73:f1:10:e3:66:
a9:c3:da:e5:14:06:c3:d4:71:f5:85:9a:a3:c3:59:63:cb:26:
73:29:69:44:c2:7d:bd:65:f1:50:54:67:50:69:0a:90:78:36:
86:51:2b:59:b4:82:c6:14:14:1f:3b:6c:04:a3:d2:8b:46:23:
59:b7:a0:b9:ae:a6:c4:85:f7:d3:27:55:d0:5e:d5:65:4c:12:
d6:4d:70:2e:4e:cb:47:eb:5f:50:56:5e:f6:8d:3d:59:2f:25:
f6:c3:2d:88:ed:8c:19:70:04:0a:57:e5:53:32:57:6a:f7:3e:
55:00:25:7a:00:b5:1e:bf:43:76:3b:d4:d6:61:8a:64:ef:9d:
81:9b:d5:98:25:20:4d:7e:7f:ba:7d:54:1b:d3:fd:ae:37:86:
9a:15:01:2b:99:2d:f6:3d:3c:7f:1a:4c:c0:4a:9c:83:3d:d1:
e7:c1:e2:ca:1d:b0:b2:9a:3b:88:9b:a4:4f:b5:2e:1a:18:a7:
a8:2d:3b:09:d3:1e:4d:24:0d:1e:7c:92:3d:63:d3:05:e7:ec:
6e:bf:49:78:1a:01:75:25:9f:26:3b:98:04:28:e9:e0:a6:20:
37:e9:f2:01:6c:64:ef:43:f3:c7:79:4b:3f:b2:bd:60:39:f7:
32:83:2c:8e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPnO1RY4qIqjOVtbC2RKq3R2mVsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh
YWVjNDk0ZjAeFw0yNjA1MTIwODA2NTlaFw0yNjA1MTMwODI2NTlaMDMxMTAvBgNV
BAMTKDI0OTUwNjdDMzY4NDBGODFBMTc1MDA4OUQ4OEE0Q0ZDQjY1Q0VGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsv7R1X0QwWwmx44XqkbPNNXI0
Gb/hUvqIhyYE4ezNy+WEfFCZFRh3dkxOMgjLHWbDl4Hjbde6tYxLtxr/NtE9bvMl
+DR9xBsZ/MsiJaAJrolMSrZxeVFNN+hQnvkGT10yFi+cjK/+sHKmrpX/ketBy3RM
NC+TMUibTyKaLrEBqfzt7FzaLC/AOmulzBjlrxcci/EtbJI48wZHSp3JyPPFPGtz
Q31SKFTkazhH6mlqJFDb2/0Tn72y9yn98slo0OVs1UiZh2sUY6EKgt82/EckLNlZ
bELGHQplLk0OE0/7mUdD2lcbWLj6ol8t/4//t5SznEPl1RijaXSmZnaONUptAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUJJUGfDaED4GhdQCJ2IpM/LZc72gwHwYDVR0j
BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy
c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC
REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAiyhmDGvL5BOs6FIXPx
EONmqcPa5RQGw9Rx9YWao8NZY8smcylpRMJ9vWXxUFRnUGkKkHg2hlErWbSCxhQU
HztsBKPSi0YjWbegua6mxIX30ydV0F7VZUwS1k1wLk7LR+tfUFZe9o09WS8l9sMt
iO2MGXAEClflUzJXavc+VQAlegC1Hr9DdjvU1mGKZO+dgZvVmCUgTX5/un1UG9P9
rjeGmhUBK5kt9j08fxpMwEqcgz3R58Hiyh2wspo7iJukT7UuGhinqC07CdMeTSQN
HnySPWPTBefsbr9JeBoBdSWfJjuYBCjp4KYgN+nyAWxk70Pzx3lLP7K9YDn3MoMs
jg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:28:05 2026 by rpki-client