Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: 8hD0aW1Uc6jbRhVSBafysBJB2DGOgw0fl2q8Gww1V2E=
Subject key identifier: 88:02:2E:CB:25:E9:86:6B:47:98:D7:2C:D6:5A:2B:63:3E:3D:80:92
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 0A6351A3931CD2442643E3F11B8CBCF71F8E5C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: 62
Signing time: Sun 01 Mar 2026 06:58:24 +0000
Manifest this update: Sun 01 Mar 2026 06:53:24 +0000
Manifest next update: Mon 02 Mar 2026 10:01:24 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: SXwaE9PJxfLr8xTgNUQLhDg5U8QWRDfbcgSiPo6Ue1E=)
2: AS216299.asa (hash: TlHOSdqQ2ADDKDRCcQpRrFP1hU0fvdwNU4f2fTdJveQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:63:51:a3:93:1c:d2:44:26:43:e3:f1:1b:8c:bc:f7:1f:8e:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Mar 1 06:53:24 2026 GMT
Not After : Mar 2 10:01:24 2026 GMT
Subject: CN=88022ECB25E9866B4798D72CD65A2B633E3D8092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:2a:bc:8f:db:22:ab:6c:fa:b3:78:0e:47:
4f:07:7d:85:24:d4:a6:69:17:de:9a:e8:6d:71:7a:
7c:ee:7a:37:4a:9b:02:75:ab:14:86:91:9c:f1:19:
f9:4b:37:45:5f:55:4c:03:ce:0e:82:af:29:93:df:
2d:6f:07:db:5a:e8:df:90:c2:0e:6e:45:25:92:03:
c6:5f:1c:5a:a9:86:98:f2:8f:13:ad:a8:07:c6:02:
41:42:63:72:7b:bc:a7:53:cb:45:96:f3:dc:2b:2f:
56:75:48:dd:76:f5:10:a9:96:3a:7f:cf:f4:85:96:
9b:49:6f:76:57:cc:94:6b:90:fb:d9:b6:dc:21:54:
f9:b1:43:c8:17:75:a2:6c:13:4e:da:25:2e:95:3a:
9e:c0:6e:df:72:b0:b0:38:38:34:4b:0d:a7:5e:e9:
0e:46:6e:7b:02:a0:15:dc:6a:0a:c4:f2:f8:a8:cd:
8e:ac:3d:83:1a:71:2f:f5:54:d5:f7:02:2c:74:f4:
b7:26:a8:2f:20:05:30:27:ff:3b:95:e1:aa:d8:1b:
82:b0:ec:6e:60:f2:ba:f0:5e:ce:8f:94:0b:23:9f:
22:a5:fa:c6:85:18:fc:6b:37:41:93:89:ff:04:b5:
8c:c5:96:23:3d:41:36:ba:38:81:e4:0a:2d:3d:c3:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:2E:CB:25:E9:86:6B:47:98:D7:2C:D6:5A:2B:63:3E:3D:80:92
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b7:5c:87:da:37:e8:22:ea:85:dc:eb:05:0f:03:80:14:37:
55:60:6f:d6:ef:60:4c:cc:77:79:0e:f1:1e:aa:6a:07:71:09:
fd:36:6a:d0:e5:fc:f8:a0:f9:96:43:0a:43:c3:12:03:1f:b6:
22:0e:d8:b7:65:80:ca:92:96:fe:c3:78:3c:d2:38:e3:26:3e:
49:b5:f5:a7:54:b7:1c:b1:71:9e:72:34:be:be:ef:c5:1c:82:
f4:fb:e6:cb:38:77:23:8c:c7:a3:4e:50:49:80:54:5c:47:9c:
a6:14:7e:b8:38:a4:dd:cf:18:85:0d:4c:37:3d:d8:ec:42:8e:
92:4a:28:6c:80:19:94:70:62:98:b1:20:1a:aa:6d:d1:4c:a3:
a0:3b:07:f4:cc:bf:a4:86:d8:e0:79:70:2e:c5:9b:8b:fe:07:
4d:a6:1f:72:c6:c2:86:7f:9e:68:0a:70:cf:b9:7a:2b:70:5e:
80:90:b9:32:a9:96:19:cc:64:07:d1:79:6a:5d:14:14:cf:ef:
c0:c5:da:dc:b7:bf:e1:fb:a3:55:e9:6f:09:62:d9:7f:94:72:
56:41:75:46:fa:1a:1c:6f:b6:f2:83:7f:17:81:46:eb:f7:09:
31:58:56:6b:92:c2:17:1c:81:7e:70:3e:f3:6c:b4:aa:82:49:
38:f2:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:17 2026 by rpki-client