Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: UmDYe0KRNpLI2IDe+V8tC/JR/rEQXCPVCwjum7V/mLM=
Subject key identifier: 8F:20:81:B2:62:77:4E:AC:2C:2F:9F:6B:A9:85:11:D4:2D:95:B7:15
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 0264F7A1EDC24AE69BAD04B69D99D5B8C0CE1AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: 0175
Signing time: Tue 20 Oct 2026 15:52:45 +0000
Manifest this update: Tue 20 Oct 2026 15:47:45 +0000
Manifest next update: Wed 21 Oct 2026 18:27:45 +0000
Files and hashes: 1: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
2: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: x2IY3MMOIfGvrUU7+57oCfPouGVVyTjEU4Zg85zBbU4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:64:f7:a1:ed:c2:4a:e6:9b:ad:04:b6:9d:99:d5:b8:c0:ce:1a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Oct 20 15:47:45 2026 GMT
Not After : Oct 21 18:27:45 2026 GMT
Subject: CN=8F2081B262774EAC2C2F9F6BA98511D42D95B715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:6a:52:78:b2:a8:d9:76:6d:db:4e:12:b5:
ec:eb:be:2e:05:40:99:9a:ad:98:bf:dc:9d:36:6e:
95:05:69:12:53:b5:22:a2:5b:74:bd:31:12:b3:4a:
a8:72:a7:cb:98:29:ea:00:de:cb:f3:67:de:8b:1e:
c6:6e:63:28:49:de:10:ff:72:9c:55:ff:7f:b1:26:
32:e9:66:a9:4c:a7:35:25:2c:c0:f7:c2:da:08:94:
5b:9a:b8:64:32:bf:3b:7e:a5:8a:63:80:ae:36:19:
7a:a9:55:33:41:4c:c7:2f:c1:f2:15:e9:f5:08:86:
c5:d8:6b:f0:89:7b:9c:f7:19:ce:68:6c:4b:60:88:
3f:b4:bf:8a:30:1d:df:2b:94:99:9d:43:bb:1c:52:
92:0f:99:d4:b2:85:fc:76:82:a1:ac:7d:d2:ec:ad:
ff:7f:e1:59:7e:b3:e1:04:78:96:7f:6d:a8:79:3a:
77:5e:8c:f5:4a:36:e0:5f:83:a6:27:df:32:6f:a9:
be:19:00:95:24:4b:b7:36:70:08:6a:0a:83:53:04:
8e:31:a7:7d:11:3c:32:9e:01:25:7f:62:43:27:22:
78:dc:6b:b7:b9:2d:58:66:40:49:c1:ab:10:79:00:
37:95:be:24:40:10:c0:05:30:72:19:43:a3:b2:22:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:81:B2:62:77:4E:AC:2C:2F:9F:6B:A9:85:11:D4:2D:95:B7:15
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:97:ac:da:b9:77:13:82:5f:0c:e6:63:0d:92:77:eb:ba:16:
f3:56:f8:71:5e:80:64:3d:93:69:a2:74:8e:97:38:75:61:73:
81:b2:4f:14:fb:fc:ec:98:db:14:ce:a9:41:b6:4f:fb:f6:9c:
28:7d:00:3a:8e:ec:a8:d0:a7:77:b9:5d:a0:1c:ce:5c:67:c5:
9b:6e:5a:39:df:e5:6d:1a:23:c0:72:c3:61:d7:af:9a:96:d3:
a0:61:3e:18:23:f9:bc:82:60:99:79:8d:f0:16:d3:03:dd:f4:
34:15:38:d9:b0:08:ba:ee:ad:a8:14:ea:a5:57:12:ea:49:39:
ae:74:3c:6a:a2:1e:61:1c:34:17:7d:70:43:fb:9f:35:f6:f5:
92:6c:00:4b:6d:f0:14:05:35:43:1b:c3:53:23:99:28:d3:a6:
82:e6:ce:3f:f6:0a:7f:58:27:fd:21:6a:0f:1c:44:b5:82:9b:
7a:9e:48:77:4e:19:27:37:a5:1c:54:2a:8c:c0:2f:0f:25:29:
f0:85:7d:d3:4c:a0:5b:57:12:72:47:19:2f:35:51:8f:17:87:
01:6f:d4:6c:65:01:0e:9d:d0:df:d2:fc:23:c3:65:a8:db:53:
a6:9b:f6:67:de:e0:b6:bd:11:80:43:8b:63:49:07:f1:64:e7:
88:58:e7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:41:04 2026 by rpki-client