Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: eJ9p9I6L+JmtoRNYEqrDoS3GRdTu7czeJgcpofRG44U=
Subject key identifier: 09:F7:44:5A:9D:2E:54:0F:07:F7:47:4B:0A:31:4B:C7:73:CD:FC:7E
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 13312D64FDB310F05B3D546D98DFDB929939A1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 017D
Signing time: Wed 23 Sep 2026 14:46:42 +0000
Manifest this update: Wed 23 Sep 2026 14:41:42 +0000
Manifest next update: Thu 24 Sep 2026 18:40:42 +0000
Files and hashes: 1: AS216299.asa (hash: 90KTaZo6LkHZqsms2xoiDT822/KRSoS7HJkIrzohGFw=)
2: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: F3cRA68UZ3uN2E63FuKGI9ooBEZWxXB9xro3YVyfNzQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:31:2d:64:fd:b3:10:f0:5b:3d:54:6d:98:df:db:92:99:39:a1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Sep 23 14:41:42 2026 GMT
Not After : Sep 24 18:40:42 2026 GMT
Subject: CN=09F7445A9D2E540F07F7474B0A314BC773CDFC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:e5:09:5f:1e:4c:24:af:94:d7:1f:ae:c5:
23:25:8b:6f:8c:a3:0a:5e:51:23:94:f1:e1:f7:4a:
05:69:44:f7:15:d1:2e:01:54:a3:f4:7c:5b:fd:b8:
ec:b1:ad:6b:1c:96:1d:fd:a6:6a:f8:01:de:3a:30:
a8:f7:6c:3f:ed:8f:1b:28:b9:3a:44:32:06:5b:47:
f7:66:4e:9e:2e:e7:1d:35:83:51:e2:c7:70:63:76:
45:8b:25:12:af:3d:ab:5d:1f:ad:d8:4f:a3:2d:1d:
b4:17:11:56:0e:0a:87:96:e9:d2:99:3d:9f:7c:a2:
71:20:0b:b9:70:f4:82:34:10:65:ed:73:26:dd:cb:
55:40:25:30:13:55:d1:fc:6d:36:57:61:35:1d:ac:
2d:7e:5d:e6:eb:4c:8b:6a:09:53:5f:1c:13:a7:5e:
6f:1e:80:fc:91:0e:33:b9:0a:7b:e5:a0:9c:9d:c1:
d8:4d:c5:8b:03:30:16:24:aa:2f:a3:7a:41:78:ad:
53:6e:09:4e:3b:ce:47:cf:e1:e8:76:86:79:c1:1d:
b0:6c:72:d6:a1:8f:c9:9e:03:4a:40:d1:f2:32:52:
5f:2d:7d:bd:75:22:64:a2:ee:70:cb:2b:2e:b3:0b:
f0:e2:55:d3:1d:4f:5e:d0:18:d9:60:9f:be:01:c3:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:44:5A:9D:2E:54:0F:07:F7:47:4B:0A:31:4B:C7:73:CD:FC:7E
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:47:d3:2f:53:64:4e:6c:9f:a9:c6:b6:b4:e7:b2:3d:da:
8a:79:a6:78:aa:ca:e2:b9:a9:aa:97:fa:fc:04:b1:72:00:f8:
b1:d0:b8:55:1c:0c:94:7d:0f:c9:ee:70:4e:fd:db:3a:a6:cf:
d2:e5:28:3a:9b:dd:6d:86:d4:3c:80:40:7f:95:22:9d:c8:ba:
1f:2d:da:95:d6:0f:7d:dc:76:34:ec:47:f6:c8:d3:28:9d:6f:
1d:86:8f:fa:00:a4:82:a8:58:c4:e9:76:c5:47:2a:0e:89:ad:
14:9e:63:57:4c:27:03:d5:0a:65:df:88:1b:5f:fc:ba:c4:9f:
05:cb:d3:f8:0c:f9:c1:6b:52:ff:40:21:a4:a9:06:fe:bb:77:
77:a9:a2:28:22:1d:b4:e8:9b:65:31:52:56:1b:5a:82:81:bd:
30:dd:5c:89:4b:d3:33:f3:5d:af:26:b0:7a:e2:af:40:f7:be:
fa:24:da:18:1f:67:99:b6:88:1d:38:07:5d:f8:65:a9:54:10:
32:35:43:2f:2b:ce:a9:78:e2:0e:df:97:de:38:ac:09:c0:06:
40:59:89:73:e6:dd:38:86:e1:15:29:eb:d0:66:97:5e:e6:a6:
dc:c5:c9:f7:ab:2a:ec:af:c9:6e:7b:18:66:03:50:1c:fd:0e:
d8:87:0a:23
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEzEtZP2zEPBbPVRtmN/bkpk5obwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh
YWVjNDk0ZjAeFw0yNjA5MjMxNDQxNDJaFw0yNjA5MjQxODQwNDJaMDMxMTAvBgNV
BAMTKDA5Rjc0NDVBOUQyRTU0MEYwN0Y3NDc0QjBBMzE0QkM3NzNDREZDN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQuUJXx5MJK+U1x+uxSMli2+M
owpeUSOU8eH3SgVpRPcV0S4BVKP0fFv9uOyxrWsclh39pmr4Ad46MKj3bD/tjxso
uTpEMgZbR/dmTp4u5x01g1Hix3BjdkWLJRKvPatdH63YT6MtHbQXEVYOCoeW6dKZ
PZ98onEgC7lw9II0EGXtcybdy1VAJTATVdH8bTZXYTUdrC1+XebrTItqCVNfHBOn
Xm8egPyRDjO5CnvloJydwdhNxYsDMBYkqi+jekF4rVNuCU47zkfP4eh2hnnBHbBs
ctahj8meA0pA0fIyUl8tfb11ImSi7nDLKy6zC/DiVdMdT17QGNlgn74BwzsjAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUCfdEWp0uVA8H90dLCjFLx3PN/H4wHwYDVR0j
BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy
c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC
REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATG5H0y9TZE5sn6nGtrTn
sj3ainmmeKrK4rmpqpf6/ASxcgD4sdC4VRwMlH0Pye5wTv3bOqbP0uUoOpvdbYbU
PIBAf5Uinci6Hy3aldYPfdx2NOxH9sjTKJ1vHYaP+gCkgqhYxOl2xUcqDomtFJ5j
V0wnA9UKZd+IG1/8usSfBcvT+Az5wWtS/0AhpKkG/rt3d6miKCIdtOibZTFSVhta
goG9MN1ciUvTM/NdryaweuKvQPe++iTaGB9nmbaIHTgHXfhlqVQQMjVDLyvOqXji
Dt+X3jisCcAGQFmJc+bdOIbhFSnr0GaXXuam3MXJ96sq7K/JbnsYZgNQHP0O2IcK
Iw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:51 2026 by rpki-client