Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: Ih3ca+Sqn0+b+kx48QAzqNOdTsxavkP+Zvwoy2hael0=
Subject key identifier: DA:69:B6:B5:46:5A:46:EA:57:C7:A0:F1:3A:A4:0C:4F:42:F1:08:25
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 3871E93E286556F0903B4DF2E13321D915209566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: 017C
Signing time: Fri 23 Oct 2026 04:09:36 +0000
Manifest this update: Fri 23 Oct 2026 04:04:36 +0000
Manifest next update: Sat 24 Oct 2026 06:10:36 +0000
Files and hashes: 1: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
2: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: EqLbN+d0x5VrLbwebclWnrhtxM3CTLMGW7ggFv9MNVM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:71:e9:3e:28:65:56:f0:90:3b:4d:f2:e1:33:21:d9:15:20:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Oct 23 04:04:36 2026 GMT
Not After : Oct 24 06:10:36 2026 GMT
Subject: CN=DA69B6B5465A46EA57C7A0F13AA40C4F42F10825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:f3:38:a0:fb:75:28:40:6a:e7:18:6b:66:
2a:86:7d:80:78:2a:6c:6a:ca:57:e9:39:2f:6e:41:
53:c5:92:59:12:cf:f1:e2:74:75:01:86:0f:a1:7c:
39:90:37:c0:0e:99:f4:9c:dd:02:c5:1e:68:57:7f:
44:d4:38:a2:f3:4d:f1:53:dc:d3:d6:0f:48:be:aa:
92:cc:6a:70:ce:f6:ed:ac:e9:5a:ae:b5:71:29:96:
8d:37:9e:51:e9:72:30:32:30:e8:d6:3e:85:2d:1f:
21:a2:23:50:d5:de:e2:3a:e3:3c:03:8f:ff:80:3b:
10:3a:51:6d:56:f5:e9:69:58:c4:0e:49:ac:2e:15:
24:15:cd:36:14:ff:25:38:61:33:ee:0b:00:20:a8:
51:e4:a4:0a:cf:d9:56:af:a0:9e:8a:ae:36:c5:04:
49:9c:df:c2:4f:71:fd:6f:c6:01:63:09:bf:46:77:
c6:a8:e0:6a:e6:6e:cf:a4:66:38:2a:23:7b:b5:fc:
24:36:ef:c2:16:7d:a9:99:3c:6f:bf:8c:db:4e:50:
95:ce:bd:2e:58:8e:7a:94:95:04:dd:3b:2d:66:47:
52:51:78:a0:69:3f:45:30:38:28:25:15:a2:7d:2a:
1d:b6:ce:1d:70:66:9a:c5:21:75:57:95:81:63:e9:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:B6:B5:46:5A:46:EA:57:C7:A0:F1:3A:A4:0C:4F:42:F1:08:25
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0e:1f:41:c1:44:0f:1b:e3:12:dd:2a:de:e0:8d:76:ac:64:
f9:b9:cc:ac:75:41:fc:ec:ea:f1:c7:50:e3:a8:5c:2c:c3:18:
73:24:9c:52:b4:18:ac:da:92:62:7a:d4:3c:27:0b:74:53:3b:
54:3c:38:47:4c:6f:c6:83:75:54:73:26:c0:cb:30:d0:e7:31:
10:4b:9c:35:42:dc:67:a1:a2:ad:54:c3:4f:5e:e0:85:32:da:
9b:5e:e3:39:51:5d:40:07:ad:b4:b5:98:10:0c:55:32:c3:fe:
81:e2:5f:17:de:81:7e:07:1e:72:73:27:7b:2e:c3:1a:81:ea:
32:40:8b:f3:0b:4e:c1:9b:11:16:34:36:8f:82:fb:b1:a2:e0:
6c:24:16:e5:14:76:cd:d6:e2:6f:be:ae:81:2e:25:a8:55:21:
fd:12:76:bb:98:69:3c:1e:0a:f5:11:e0:6d:8b:d4:48:d5:57:
17:7c:7c:df:68:f7:78:14:f8:6d:8e:26:6b:24:30:34:60:eb:
2c:09:45:d3:5f:6f:dc:b5:8f:0d:bc:d6:92:8d:eb:6e:07:67:
51:32:d6:b2:d2:fc:62:bd:c3:2e:a1:5f:30:f9:bd:23:85:a3:
13:75:6a:86:b4:04:c6:cb:3e:9a:74:f5:c0:38:a4:72:36:06:
5d:e0:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:19:55 2026 by rpki-client