Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: clH29Tbe3+3Xh3C5M/so782xb/ITq2+RKLYEQWvKC/c=
Subject key identifier: 4C:17:62:F9:AB:BC:D2:FB:87:30:20:BD:72:AB:ED:E3:C6:1C:DC:91
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 66E5DB62DA824C34468F575FF49616DF2E123EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 0129
Signing time: Thu 23 Jul 2026 12:32:06 +0000
Manifest this update: Thu 23 Jul 2026 12:27:06 +0000
Manifest next update: Fri 24 Jul 2026 15:06:06 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: YhsNXD/nzArXLWpZObaIOyp1adNEqBq40Btu/nghtAQ=)
2: AS216299.asa (hash: I866WwaCMkBkfDG0RdBvujZmrBd6yGQBEMDG+oFbDlQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e5:db:62:da:82:4c:34:46:8f:57:5f:f4:96:16:df:2e:12:3e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Jul 23 12:27:06 2026 GMT
Not After : Jul 24 15:06:06 2026 GMT
Subject: CN=4C1762F9ABBCD2FB873020BD72ABEDE3C61CDC91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:e0:03:13:7d:18:6d:76:37:30:c8:07:73:
93:fe:f6:0f:4f:9e:4c:c0:2a:36:1d:16:21:8c:36:
e1:b6:8c:c1:cb:d6:68:5d:77:cf:5c:cd:65:9b:df:
21:d6:f8:3b:27:e8:24:ca:41:19:18:e4:8b:90:55:
a0:7b:69:9d:d0:d0:e6:67:db:50:c4:de:6c:8b:f7:
0d:5c:8a:fe:fe:30:21:37:bf:75:d6:8f:7f:0b:7a:
67:6a:2f:d7:69:fe:99:f5:d4:8b:cb:eb:52:e8:20:
72:70:53:8e:06:79:85:17:d8:a9:32:4f:73:0d:7b:
ec:29:d4:c4:8b:3e:c1:d7:21:ae:cd:45:79:92:ce:
e5:0f:31:6d:82:3e:02:c8:2c:4c:e9:46:3a:03:66:
8a:aa:cb:b6:55:cd:cd:e5:47:9a:e8:4f:c0:19:42:
ed:f5:c3:31:a6:f1:31:8c:74:38:a0:2c:da:f1:d4:
8e:b5:d4:dc:1b:9c:a7:95:04:02:e0:d3:ee:99:17:
03:7c:a1:b4:0b:32:58:70:b1:0e:93:83:a1:9f:d7:
89:f2:d5:c4:25:8a:61:f9:9e:44:00:39:e7:70:2a:
34:3b:01:f1:e0:b1:d4:9f:20:1b:e7:71:77:a1:9e:
d9:29:d5:38:57:d0:9c:5c:cc:1c:fb:04:c5:3b:f3:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:62:F9:AB:BC:D2:FB:87:30:20:BD:72:AB:ED:E3:C6:1C:DC:91
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:17:e8:1f:33:13:31:d4:42:8f:a9:54:ee:55:cb:e8:24:8a:
b1:13:26:4d:4a:01:97:6d:1a:53:7c:34:a4:06:98:61:0b:1e:
e8:50:ca:32:8c:0b:16:22:60:c5:06:89:01:62:d1:bb:93:61:
7c:df:21:6b:c9:bc:1b:11:76:2c:a8:52:5b:49:58:8e:14:f5:
56:6f:91:53:72:ac:49:67:12:2d:f5:9d:31:9b:62:ed:d2:7b:
de:fc:a0:55:73:68:6c:4d:cf:e8:ef:59:04:4b:03:ea:73:b9:
49:85:c4:59:dd:82:6f:4f:5e:cb:18:d8:52:c1:df:6b:32:86:
e1:2c:b9:a1:b7:6b:3a:26:95:aa:6b:ec:56:00:ee:3a:95:d4:
fe:a2:ec:b7:15:68:32:d4:60:99:c6:99:ce:9a:89:c0:1e:cc:
b5:48:cb:bb:43:53:32:0c:13:04:d2:13:d8:47:c0:0b:b7:14:
ac:2e:a2:21:62:f5:d8:c3:58:35:88:33:94:86:a6:b2:9a:e7:
9d:b0:85:0f:d1:ac:c8:81:8f:f1:f6:0a:80:4e:63:40:00:b4:
57:65:92:3f:01:26:e5:cb:9f:ef:00:0c:06:5d:25:43:18:64:
a4:bd:9b:d8:37:38:6f:8b:08:3b:ac:6b:0a:f5:a4:b4:33:82:
12:f9:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:15 2026 by rpki-client