Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: q+QDHbV7148gcq+bbQmR4uP89saEBunr4CYfr0O7+GY=
Subject key identifier: 3F:57:E7:40:1A:72:5F:02:34:F8:AC:07:67:A0:08:05:35:23:D6:AA
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 1845747A910BD71F1EB549A76D02A7773607BCD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 017A
Signing time: Mon 21 Sep 2026 10:56:41 +0000
Manifest this update: Mon 21 Sep 2026 10:51:41 +0000
Manifest next update: Tue 22 Sep 2026 11:59:41 +0000
Files and hashes: 1: AS216299.asa (hash: 90KTaZo6LkHZqsms2xoiDT822/KRSoS7HJkIrzohGFw=)
2: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: Y8a3UjKKQ9S5b7NfIHMeeMZOP9dB5oK5347EE2sX3N4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:45:74:7a:91:0b:d7:1f:1e:b5:49:a7:6d:02:a7:77:36:07:bc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Sep 21 10:51:41 2026 GMT
Not After : Sep 22 11:59:41 2026 GMT
Subject: CN=3F57E7401A725F0234F8AC0767A008053523D6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bf:20:fc:17:c2:e1:c4:bc:94:c8:a3:7c:e9:
7c:5b:77:a0:f3:49:a3:85:c0:cf:b4:bd:51:2f:f1:
fc:6c:47:32:64:fa:49:1a:40:a1:2a:34:46:61:7f:
1b:75:8e:64:43:b3:2e:7f:ff:ea:cf:4c:74:7b:1f:
dc:ac:14:72:be:56:7c:8c:f3:64:da:fa:09:5a:90:
1c:07:55:40:b1:cb:2b:79:a9:4a:fc:cc:7a:49:7a:
ed:22:37:3b:43:11:f0:53:bb:f5:73:f3:66:45:1e:
f3:d1:d1:3f:72:bc:1e:d4:d1:5d:6a:5e:8e:19:62:
a8:4e:77:f5:6b:95:a0:c4:e0:81:d1:d7:f1:8c:38:
19:58:b7:63:af:6d:bd:f6:d9:d8:cf:0e:6d:50:2a:
6b:06:1c:72:7b:ba:b0:fc:58:40:0a:a7:d2:3f:03:
8c:8f:0c:86:a8:46:7f:6d:59:40:2f:97:ee:a9:35:
0c:83:5c:a7:8a:9d:48:b3:69:70:65:67:70:d9:b6:
32:29:c6:7f:da:b0:dc:4f:1d:23:cb:1f:04:98:57:
c9:9a:00:a3:a5:91:64:99:55:bf:ff:fc:3d:45:ec:
29:75:3d:04:83:85:1e:9a:d3:db:fb:79:98:4f:3a:
f1:91:97:c1:c0:bb:9a:aa:ba:c1:b6:53:9d:fa:d6:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:57:E7:40:1A:72:5F:02:34:F8:AC:07:67:A0:08:05:35:23:D6:AA
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2e:04:48:54:9f:15:53:5e:13:33:30:7f:c9:8f:4b:52:db:
23:ae:e6:4d:89:e6:5a:f7:0a:dd:5b:3e:58:ad:d3:ea:0a:ad:
4a:a4:32:8a:b1:5d:81:bf:2f:55:6d:9e:90:95:25:6d:5b:d9:
46:a5:ed:ed:6e:3d:c1:cf:27:c6:27:8d:a6:18:ff:30:cc:5d:
e8:0e:0f:be:6e:f8:a7:13:25:65:02:62:27:c2:ac:b0:42:52:
ac:36:50:61:dd:a9:4d:c4:73:fa:6a:86:ff:7b:5f:a2:ad:45:
07:47:0c:3a:94:cf:d2:b1:48:71:ab:be:4e:2d:f0:c9:48:98:
9b:f5:6c:0c:eb:d8:20:1c:3a:2c:b8:05:73:74:7d:e9:4b:19:
40:c6:fe:73:37:71:98:1d:29:dd:b4:41:c4:f1:ca:b4:6e:a2:
6a:df:79:07:55:ed:d7:df:d0:61:23:97:ce:51:93:c8:bc:0f:
48:c9:99:57:12:cc:3e:02:73:b8:5c:4d:87:4e:6c:70:40:98:
d2:0f:d0:e5:01:00:17:4f:27:3c:c6:60:63:d1:58:8a:1a:b4:
db:5d:ec:fe:b1:78:54:44:6f:45:e0:a2:bf:d3:b4:a1:33:6c:
60:a3:c1:ce:80:2a:a5:5a:51:25:d4:f0:68:e3:ad:7c:ae:72:
da:f1:84:e8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGEV0epEL1x8etUmnbQKndzYHvNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh
YWVjNDk0ZjAeFw0yNjA5MjExMDUxNDFaFw0yNjA5MjIxMTU5NDFaMDMxMTAvBgNV
BAMTKDNGNTdFNzQwMUE3MjVGMDIzNEY4QUMwNzY3QTAwODA1MzUyM0Q2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPvyD8F8LhxLyUyKN86Xxbd6Dz
SaOFwM+0vVEv8fxsRzJk+kkaQKEqNEZhfxt1jmRDsy5//+rPTHR7H9ysFHK+VnyM
82Ta+glakBwHVUCxyyt5qUr8zHpJeu0iNztDEfBTu/Vz82ZFHvPR0T9yvB7U0V1q
Xo4ZYqhOd/VrlaDE4IHR1/GMOBlYt2Ovbb322djPDm1QKmsGHHJ7urD8WEAKp9I/
A4yPDIaoRn9tWUAvl+6pNQyDXKeKnUizaXBlZ3DZtjIpxn/asNxPHSPLHwSYV8ma
AKOlkWSZVb///D1F7Cl1PQSDhR6a09v7eZhPOvGRl8HAu5qqusG2U5361tGxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUP1fnQBpyXwI0+KwHZ6AIBTUj1qowHwYDVR0j
BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1
ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy
c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05
NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC
REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS4ESFSfFVNeEzMwf8mP
S1LbI67mTYnmWvcK3Vs+WK3T6gqtSqQyirFdgb8vVW2ekJUlbVvZRqXt7W49wc8n
xieNphj/MMxd6A4Pvm74pxMlZQJiJ8KssEJSrDZQYd2pTcRz+mqG/3tfoq1FB0cM
OpTP0rFIcau+Ti3wyUiYm/VsDOvYIBw6LLgFc3R96UsZQMb+czdxmB0p3bRBxPHK
tG6iat95B1Xt19/QYSOXzlGTyLwPSMmZVxLMPgJzuFxNh05scECY0g/Q5QEAF08n
PMZgY9FYihq0213s/rF4VERvReCiv9O0oTNsYKPBzoAqpVpRJdTwaOOtfK5y2vGE
6A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:56:54 2026 by rpki-client