Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: E55zPLWiUKH+Op6OwhK0ewg2Ya7T1zldq2aaGu5RpKY=
Subject key identifier: 98:94:E5:0E:0E:7E:7D:5D:E7:DC:5F:15:4B:5F:BB:70:DA:17:EA:53
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 5A8AB68397955412B3D3066F4227D158268A99AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: F5
Signing time: Wed 17 Jun 2026 00:00:34 +0000
Manifest this update: Tue 16 Jun 2026 23:55:34 +0000
Manifest next update: Thu 18 Jun 2026 00:42:34 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: Tzcf0Jrh1zU0HTJ0jcdHLdbwMf4agNto7yTXub/AVc0=)
2: AS216299.asa (hash: C6Imincuk4Y+ypRr+IT2cX74N/IZmTVY/cXjeA1NPfA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8a:b6:83:97:95:54:12:b3:d3:06:6f:42:27:d1:58:26:8a:99:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Jun 16 23:55:34 2026 GMT
Not After : Jun 18 00:42:34 2026 GMT
Subject: CN=9894E50E0E7E7D5DE7DC5F154B5FBB70DA17EA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:e9:2b:98:03:dd:19:56:14:fc:2d:06:55:
5d:3d:72:25:23:d2:f1:a7:0d:d3:1c:96:a5:e0:9d:
59:76:a1:f2:e8:49:75:53:3c:ea:ab:db:89:49:21:
c5:d8:37:96:0a:e5:a9:48:7d:c5:e6:fd:57:df:5a:
90:b7:7e:8a:20:37:89:fe:9f:4c:95:1e:d2:bd:1c:
51:d2:bb:06:de:5e:bf:2e:03:b3:f1:0a:b3:2f:ed:
ca:de:2b:2d:dd:01:fa:30:2e:bb:96:f2:2a:bc:b0:
c7:4f:55:04:0e:7d:c4:3b:ff:de:fd:d2:a0:c7:38:
2c:e1:4d:0b:22:03:9a:cb:f0:09:0a:30:5e:d5:6a:
81:ea:b9:55:b5:2b:3e:e6:f9:90:4f:8f:bf:07:72:
29:3c:63:cf:71:06:ad:8f:b2:ad:70:98:26:28:49:
57:f3:2c:57:23:6e:12:73:3c:b8:64:16:fc:70:08:
ac:a6:33:2b:5f:e7:86:aa:53:b8:51:14:b6:ee:ee:
f7:d7:65:ca:12:49:68:b2:09:c7:ac:d3:dd:82:ea:
3e:02:9e:81:03:9a:9b:f0:26:0e:ee:30:e8:2a:d1:
5a:5e:14:94:7d:58:1d:1e:9c:4e:4c:57:27:b2:75:
8b:81:c4:ce:cd:7a:34:67:e8:47:b4:35:29:7f:91:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:94:E5:0E:0E:7E:7D:5D:E7:DC:5F:15:4B:5F:BB:70:DA:17:EA:53
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ef:e9:9b:9c:e9:59:4f:06:22:c1:17:78:42:be:c9:84:d4:
74:5c:65:d4:06:24:fc:b6:90:fb:26:27:a9:81:5f:79:1f:06:
1c:97:d5:cf:11:58:6d:57:39:6f:4c:d2:b2:30:10:74:05:c1:
be:34:f6:52:49:76:57:98:9e:80:71:4f:97:51:de:17:8b:2b:
3e:28:88:24:e7:20:a9:7b:77:16:79:b8:e0:4b:f9:89:0c:32:
fd:d5:fc:d6:11:97:6e:f3:d9:9b:07:be:be:06:0c:38:f1:8c:
82:ef:81:59:ff:e7:0e:c1:fd:62:3e:59:88:8a:b8:9d:c6:91:
cf:74:13:98:90:e2:f0:0a:63:8c:f9:47:48:61:70:e5:b5:ef:
69:92:c6:86:17:31:58:60:61:cb:08:cb:71:f3:c0:11:3f:93:
b8:8d:15:5d:27:fc:9e:a9:f2:51:3a:31:01:4a:fc:00:45:cc:
4b:1a:fc:f6:57:8e:4d:97:89:10:77:0e:aa:ec:d4:0c:ef:1e:
b3:0e:d0:cc:e4:84:2d:09:8c:43:5d:de:a9:6a:ce:e2:47:e6:
63:a4:ec:30:0f:af:0b:7a:2b:63:62:d9:ea:1b:f3:f2:c3:9e:
28:e6:1e:42:85:f8:ec:03:a6:3b:35:33:73:8d:f4:46:a1:41:
e1:3e:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:13:08 2026 by rpki-client