Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier: ORnMVzG3zolfgi0TsZgyazli+j8Z31VEIzh3kRTkq7k=
Subject key identifier: 87:84:99:E3:20:0B:9C:25:90:27:4B:E4:35:05:57:FD:0C:4C:59:DD
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial: 0125B3D5CD593064BDCE2B4EA67338976E60342A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number: A3
Signing time: Sat 18 Apr 2026 18:47:30 +0000
Manifest this update: Sat 18 Apr 2026 18:42:30 +0000
Manifest next update: Sun 19 Apr 2026 21:24:30 +0000
Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: TZbqfdFqkwdGrKbK1dh7xvqWrZBihvL2LCcWyvvlb+U=)
2: AS216299.asa (hash: b6JHD36Kgpu0jmLLR3t1azNloUQb5AtsPrRoc08q6FE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 21:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:25:b3:d5:cd:59:30:64:bd:ce:2b:4e:a6:73:38:97:6e:60:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Validity
Not Before: Apr 18 18:42:30 2026 GMT
Not After : Apr 19 21:24:30 2026 GMT
Subject: CN=878499E3200B9C2590274BE4350557FD0C4C59DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:91:e9:08:f3:5a:8d:a5:91:df:e6:1f:7f:
26:09:08:d6:af:5b:de:ee:fa:62:55:d1:16:49:ff:
8f:b0:f6:86:c1:67:7c:2d:8e:fd:cd:e6:30:c7:ef:
3b:92:89:49:e4:9e:d6:97:63:de:b9:05:1c:f9:97:
86:ee:19:e8:b4:82:a4:31:09:a2:ce:c7:a9:96:92:
b9:5d:59:02:35:20:18:8a:3d:ef:40:0e:6a:a9:fa:
10:fb:25:ac:48:3b:ed:74:93:2e:e5:f2:b6:07:2d:
a1:ff:ab:39:41:0b:2e:6b:fa:6c:04:e7:03:9a:97:
cb:f1:6c:9e:66:9f:22:b7:40:e9:d3:4b:bd:c4:2c:
28:12:d1:be:da:18:b7:5f:81:4f:94:70:ec:7f:a1:
48:28:b8:19:7d:86:da:bf:e1:6d:ea:03:0e:52:a5:
1d:f7:7f:16:4a:dd:1f:f2:d5:72:c1:1b:14:23:e1:
32:87:cc:a4:a6:38:24:d6:27:a6:52:77:d5:34:14:
df:75:6f:25:a3:f1:74:18:bb:0a:e6:b1:b2:c6:85:
b9:1c:23:0e:df:0a:66:75:63:d8:ea:43:1e:bf:47:
50:36:53:43:b9:7b:13:1b:98:6e:91:77:ac:bd:76:
94:4d:15:22:f2:1e:ee:da:22:b4:85:5d:0a:a8:a4:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:99:E3:20:0B:9C:25:90:27:4B:E4:35:05:57:FD:0C:4C:59:DD
X509v3 Authority Key Identifier:
keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:98:cd:d9:c7:1f:82:f5:0f:f7:c6:a9:d5:3a:dc:81:f0:d3:
bd:de:af:bb:e1:46:4b:e0:9c:83:f1:f6:5e:c1:54:df:7a:4c:
f7:dd:fd:0d:8e:f8:62:ca:89:0e:c6:cb:99:96:13:0e:4a:22:
69:ac:ee:20:3d:39:f0:0e:7c:90:a5:d4:a4:e0:6f:2a:a6:60:
74:76:01:05:fd:ad:7b:c5:28:f1:e5:67:cf:70:72:b4:a4:15:
5d:b5:ba:b2:5e:ae:5e:39:46:b9:d0:c2:80:ca:82:ee:9a:f0:
a2:48:cf:02:15:4f:ee:bf:0c:e3:d0:a8:c7:06:04:72:af:4b:
b5:d6:93:05:d8:30:4d:d4:6b:ef:e7:42:86:3a:bb:7b:26:4e:
eb:59:8b:2e:db:76:63:a1:8f:d7:bd:fa:e2:7b:e2:f9:b4:dd:
a4:85:6f:10:5d:ab:62:51:ee:4a:d2:c4:91:95:c8:60:64:b5:
f4:70:63:54:d1:65:c7:ed:78:6c:2e:68:13:13:60:fd:ff:6b:
f1:6c:b3:0b:70:36:18:14:5c:47:4e:bc:30:e2:24:8d:91:3f:
7d:37:83:bb:08:e7:fc:68:cc:ee:b5:e3:b9:41:1d:77:d7:48:
4b:7d:6c:d3:4f:b5:dc:ce:ec:2e:bc:95:09:c5:96:01:f2:51:
1a:0b:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:56:58 2026 by rpki-client