Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: 2MrcCPjprcxsW5N00B9aU32+/jLelvpB70jyPg/9+WY=
Subject key identifier: 38:6F:8E:43:D6:7F:91:BD:57:E5:36:36:26:93:FC:28:3A:1C:A6:C3
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 5943225DD4C1CAF6B33956166348F3AC44EABFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 83
Signing time: Wed 25 Mar 2026 11:18:15 +0000
Manifest this update: Wed 25 Mar 2026 11:13:15 +0000
Manifest next update: Thu 26 Mar 2026 12:47:15 +0000
Files and hashes: 1: AS216299.asa (hash: b6JHD36Kgpu0jmLLR3t1azNloUQb5AtsPrRoc08q6FE=)
2: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: +52Z+I1EvYXKT7HvgZyofbKR+IGcfj9e4ehMI77ui20=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:43:22:5d:d4:c1:ca:f6:b3:39:56:16:63:48:f3:ac:44:ea:bf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Mar 25 11:13:15 2026 GMT
Not After : Mar 26 12:47:15 2026 GMT
Subject: CN=386F8E43D67F91BD57E536362693FC283A1CA6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:85:9f:ca:bc:13:ec:d8:bf:0b:54:01:16:
bb:07:5c:d6:48:37:83:be:02:ae:14:68:a5:14:b7:
24:49:b8:76:1b:3d:b5:d6:e9:3d:ec:47:05:78:a0:
56:06:af:05:28:71:db:fa:fb:87:79:2e:c2:04:6a:
ff:1e:19:fa:6b:4f:8f:8e:b3:d9:dc:c7:a8:59:dc:
a7:a2:f9:0f:b5:09:63:fb:41:fc:d7:6c:20:f4:14:
c6:d3:8c:9b:39:eb:4b:55:2b:c4:17:f5:31:69:21:
ad:50:66:65:f2:04:21:bd:36:96:87:62:7c:42:ea:
d6:b7:d6:a4:8b:e6:61:19:29:04:3e:dd:bf:1d:40:
16:8b:0a:31:74:5a:7f:dc:f3:bf:33:a4:26:61:12:
b2:d0:cc:6a:b6:b8:4c:bc:76:07:cc:86:b4:65:19:
ce:a8:3a:d7:89:ee:8c:93:0d:9e:b7:4c:4f:e0:9c:
9c:f0:7e:0e:d3:b7:4a:7f:67:86:aa:39:6c:8c:2c:
c6:92:34:17:28:16:3d:29:40:2c:c5:a3:0d:be:16:
33:f2:c0:16:19:9c:b7:67:d5:b4:ab:75:dc:4d:c7:
6b:da:c1:16:46:8e:2d:fa:42:93:2b:18:aa:5a:0a:
a1:0d:d4:95:e5:cc:61:6b:6c:c3:63:0c:1d:88:c5:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:8E:43:D6:7F:91:BD:57:E5:36:36:26:93:FC:28:3A:1C:A6:C3
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ef:77:44:da:68:a3:05:81:23:55:06:96:92:84:4a:61:6f:
86:ab:31:1f:21:ba:4d:90:ef:c9:eb:a4:57:f6:f9:dc:7d:e2:
a7:2a:66:7b:ad:92:8f:d3:3d:53:2a:f8:a5:cb:8e:4e:a4:75:
a7:8b:62:51:54:8f:c5:05:09:75:39:d4:91:f0:03:bd:6f:30:
60:7a:8e:83:6f:6d:4c:c0:7e:3b:76:25:a3:8b:53:c5:4f:0e:
42:c5:a2:87:d8:1d:5c:ad:a8:d0:8d:97:ed:48:ca:3c:2f:d3:
87:d2:97:e5:62:75:ae:ba:b5:79:1f:8b:89:4b:3f:77:32:2c:
64:89:41:f0:cf:df:99:f3:02:e2:30:78:eb:56:30:5a:be:d8:
7a:90:98:dd:27:ee:d8:a2:2e:ab:e9:f4:ac:1e:53:42:70:e4:
a9:2a:6a:3c:db:ea:b6:14:11:ec:e8:49:8d:bc:c1:00:db:fd:
39:4c:b7:03:76:9d:13:31:36:ff:18:78:bf:26:9d:16:0b:b7:
09:a1:50:c6:e3:c7:f1:05:3f:b4:3e:a2:5d:7a:c2:65:f0:4a:
78:2f:19:f0:fa:d4:37:c3:09:c7:aa:26:08:4a:d8:ea:d4:d3:
89:47:c9:3a:3b:ff:5b:ee:77:c0:9d:52:84:b0:6a:37:20:6d:
2d:39:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:48 2026 by rpki-client