Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: U7j4o20R8SWeoIB2At01OBQDcuhcNvPYOoKLlahEMJM=
Subject key identifier: B5:10:E9:A9:C5:9D:4D:8B:BC:9E:A8:9A:B6:32:7A:FC:41:26:08:98
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 7BBB3A5584D1E8566628AFB3D67F7953F13EC07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: 012F
Signing time: Mon 21 Sep 2026 23:38:49 +0000
Manifest this update: Mon 21 Sep 2026 23:33:49 +0000
Manifest next update: Wed 23 Sep 2026 01:04:49 +0000
Files and hashes: 1: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
2: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: /h3FP8lvvplPbVRRu7mm6nls20IEhovHanPIMifxHDM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:bb:3a:55:84:d1:e8:56:66:28:af:b3:d6:7f:79:53:f1:3e:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Sep 21 23:33:49 2026 GMT
Not After : Sep 23 01:04:49 2026 GMT
Subject: CN=B510E9A9C59D4D8BBC9EA89AB6327AFC41260898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:84:e4:6e:6e:e2:2e:85:c8:e6:7e:85:71:
ff:c0:3d:97:45:17:2f:1f:c4:61:f6:f5:0e:04:81:
12:07:f3:85:7d:1d:85:70:76:d7:91:21:ab:d9:e6:
6b:07:cb:da:96:a7:9c:4b:8d:36:db:ea:a7:0b:9d:
59:44:4f:f1:b8:87:83:b9:36:bd:2b:44:f1:53:c8:
6a:df:a4:63:4a:8a:42:f1:c6:7a:76:75:08:52:80:
20:77:ab:18:62:b6:1c:be:6b:76:b9:47:ee:c1:0f:
8b:4f:87:14:22:98:30:fa:ad:43:94:c6:e4:7e:90:
a7:06:42:b1:6e:9d:95:d7:09:6d:10:60:47:bb:05:
ae:ec:29:ab:87:f4:39:fb:b8:4b:74:b1:b8:f2:bf:
43:26:56:8c:3e:75:01:b6:19:7d:0c:da:e4:12:15:
99:1e:db:63:01:df:43:49:0a:ea:2c:87:ee:f1:eb:
7f:c9:8f:a5:3d:27:d2:f7:2e:9a:d9:7c:21:ce:02:
38:eb:4f:ef:92:eb:50:7c:06:c1:45:b8:a6:30:45:
c9:9a:44:53:68:d1:1c:3f:1e:32:e2:c7:cd:5c:57:
a1:00:0f:39:03:36:29:3f:11:b1:cc:c5:a1:26:35:
88:83:88:8b:59:0e:6e:ab:e8:49:99:3e:3e:7d:40:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:E9:A9:C5:9D:4D:8B:BC:9E:A8:9A:B6:32:7A:FC:41:26:08:98
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:5c:24:81:4c:4e:80:e2:5b:13:da:fd:6e:1b:f1:0b:6a:
3c:d5:06:5f:a8:ca:ca:f3:a2:3f:5f:d8:e7:e4:60:5b:10:5b:
83:bc:95:d1:71:be:95:1e:54:e3:b6:56:f2:6c:bd:36:22:6f:
9f:88:bf:fd:6d:91:67:fb:20:88:4c:ba:38:cc:41:a0:4b:b3:
6c:ec:4b:4b:03:66:bb:47:1d:9a:f3:09:a6:37:f3:44:37:08:
0c:a5:ed:1c:73:0a:7f:34:d8:60:0f:e4:f6:1c:06:8b:53:ae:
c4:19:ef:d3:3f:a2:9c:fe:14:1b:0b:ec:1c:8f:a5:3b:66:66:
ce:fd:8d:be:eb:86:47:79:3f:bd:77:c3:f4:e8:c7:8e:ad:f8:
7c:cd:73:23:a9:e9:90:ea:c2:bb:5d:e0:3a:6d:79:55:ab:e1:
00:da:8e:9f:0c:54:c3:54:fd:cf:03:f1:e4:c7:2a:86:7d:45:
85:88:66:c3:1e:ab:f5:d1:41:0e:72:1d:5d:5a:d4:ab:a9:3e:
00:88:cd:ae:07:a4:96:90:a7:f3:8d:2d:9c:7e:b9:a7:ca:2b:
b7:2c:9f:da:2d:5c:e0:71:12:67:9e:0c:0a:96:b8:8a:51:b8:
b7:c2:89:83:9f:5f:70:8f:77:5b:30:56:23:ea:b7:2b:11:fd:
b2:84:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:22:49 2026 by rpki-client