Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: 5eLS1GzAHe5GQjaXNOoiVVkkzfPuX6ccKmZHbvBvIZY=
Subject key identifier: 2F:37:8E:EB:4E:CC:E4:F2:20:57:3B:81:FA:17:F7:BD:D4:BF:1C:4D
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 772A16E620013989F835847CF8E496CCFFBDED05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: FF
Signing time: Thu 03 Sep 2026 15:43:07 +0000
Manifest this update: Thu 03 Sep 2026 15:38:07 +0000
Manifest next update: Fri 04 Sep 2026 17:57:07 +0000
Files and hashes: 1: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
2: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: BXUNVeiySyh0wX6IRAVMzznS1nNHZAwE4zU+osjZPWA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 17:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2a:16:e6:20:01:39:89:f8:35:84:7c:f8:e4:96:cc:ff:bd:ed:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Sep 3 15:38:07 2026 GMT
Not After : Sep 4 17:57:07 2026 GMT
Subject: CN=2F378EEB4ECCE4F220573B81FA17F7BDD4BF1C4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:24:37:30:36:25:f6:03:51:4e:0c:5d:f9:
af:7f:08:99:51:15:2f:ec:49:20:d6:2a:e9:60:64:
e4:2c:9b:be:e9:5f:cd:72:23:b2:30:3e:fa:ad:b5:
0a:d8:34:39:14:ed:7a:3e:60:83:b8:73:37:0b:2c:
90:34:7e:11:25:4a:65:e2:1a:3c:6e:e8:7e:ee:b4:
e5:4e:ea:16:f7:fd:19:d6:eb:31:bf:aa:4e:5e:1d:
9a:49:ea:11:8c:23:9a:92:2a:fd:0d:9b:c0:b3:d5:
b3:0f:67:5c:46:00:98:ca:5b:1c:4f:54:f2:44:11:
c1:e2:69:91:88:40:c2:c2:83:2b:61:f6:6e:d5:db:
7d:a2:a4:f4:68:83:c4:d6:50:30:7c:cf:8c:39:0a:
43:cb:ae:c9:8b:93:ea:b7:2d:31:e9:88:d0:47:95:
0d:10:74:c5:49:36:db:33:72:c1:14:86:69:96:cf:
cd:07:0b:55:69:0e:af:40:df:87:dd:88:3c:03:5c:
d6:fd:6b:d0:91:82:ef:4b:d5:30:a8:4a:8a:8f:25:
d4:ac:5b:8f:50:07:dc:bd:98:95:ae:d5:9a:1f:cd:
fe:13:f8:7e:e3:66:0a:9f:4b:e3:4c:c3:84:66:cc:
fa:d2:e5:c7:1e:ea:6b:1e:78:27:64:70:23:94:e1:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:8E:EB:4E:CC:E4:F2:20:57:3B:81:FA:17:F7:BD:D4:BF:1C:4D
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:28:58:12:8d:aa:c8:5e:2b:3c:8d:3b:ea:38:35:c1:3b:20:
34:0a:92:f7:71:8f:18:ab:7f:f7:c0:88:2d:c2:29:61:95:37:
47:47:fa:e1:da:98:aa:e7:7d:1e:db:9f:b5:bd:73:62:97:9a:
0a:9b:ad:e6:cd:f9:11:e0:fe:ce:22:e3:1a:a4:51:8f:e6:3a:
8f:b2:d5:4c:77:66:fb:61:80:c9:9b:f9:36:07:81:60:06:2a:
61:35:1c:ea:55:4e:40:70:70:ab:de:d4:1d:98:4f:af:a8:37:
b9:78:8e:72:7d:27:38:c7:f5:46:a2:a2:ea:65:3b:da:c7:a6:
f5:7c:ee:0b:c8:87:b8:bc:4a:d0:65:f3:77:04:9e:a3:3c:56:
7c:ae:1c:7d:52:9b:77:5b:a2:2a:8f:ca:76:10:18:79:70:d3:
33:b1:13:c8:06:f7:fe:7e:35:05:c7:d5:6c:f8:8d:4b:11:f3:
c6:85:b7:be:ac:9e:4c:ac:a8:f7:69:be:b4:55:74:57:ea:3a:
11:52:15:29:ae:b5:b5:ce:9c:09:4a:5f:80:23:04:be:79:2a:
9e:9c:87:b0:e7:68:00:90:5b:80:6d:0f:89:20:58:d3:b4:e0:
5d:34:e1:81:2d:b8:30:a6:f7:4c:f3:3e:a6:ad:c1:c1:6a:d2:
7f:f8:a9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:18:29 2026 by rpki-client