Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: 0L1pR0KkZCnFPU0d0wuFOOZXHameITrM7ce/3BEtTpI=
Subject key identifier: C2:CB:4C:C6:AF:5D:BC:B8:6D:7E:A9:8C:FF:0A:30:9D:BD:69:33:49
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 4571816611AFCD045647B6C1A3C09249CF4BC480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: 4B
Signing time: Sun 28 Jun 2026 20:51:37 +0000
Manifest this update: Sun 28 Jun 2026 20:46:37 +0000
Manifest next update: Mon 29 Jun 2026 22:52:37 +0000
Files and hashes: 1: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
2: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: NSqTvM0CYNZsRiGENbT6a9f5bK+5DAeptvCxGmI0/iw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 22:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:71:81:66:11:af:cd:04:56:47:b6:c1:a3:c0:92:49:cf:4b:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Jun 28 20:46:37 2026 GMT
Not After : Jun 29 22:52:37 2026 GMT
Subject: CN=C2CB4CC6AF5DBCB86D7EA98CFF0A309DBD693349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:ec:85:d5:2c:4e:8a:97:bb:fa:69:f0:5f:
3d:65:6b:b9:9f:ad:06:b9:8c:82:39:ff:df:87:0d:
f7:4e:c5:25:8e:56:d9:5a:d2:69:88:3e:a8:9e:c3:
fe:5d:4a:f6:f2:6d:b3:51:15:21:83:28:3a:6d:3e:
54:8f:ae:35:8f:b4:83:06:e4:e7:2a:e3:86:fe:e7:
c0:62:98:c7:4d:a9:69:87:5f:50:88:ca:58:d2:6e:
cc:45:18:bb:8c:e5:67:05:ec:e8:73:1e:0f:d1:d7:
28:11:e3:6a:99:08:48:6b:b3:03:b7:e0:76:66:9f:
de:3f:b6:f6:05:78:2a:49:eb:1a:ca:5a:02:fd:23:
9f:8a:56:81:ac:09:78:0c:46:c6:4f:27:fd:bb:4d:
7d:26:ca:b8:5b:e0:b6:53:d8:27:17:02:07:cc:54:
a7:98:fb:7a:25:81:28:12:0c:b8:98:fa:34:b5:2d:
7d:cd:96:4e:46:97:b2:8d:b3:b5:1e:b3:37:1a:98:
66:e7:3c:c6:79:f9:7b:43:52:9f:81:22:ee:13:67:
58:37:43:de:0a:3a:9e:43:d2:7a:7c:85:7e:11:87:
5c:6c:e4:50:76:68:8e:85:5d:f4:62:96:bf:ce:81:
b2:cb:a9:cf:17:40:dd:ca:66:fd:77:1c:ce:3b:61:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:4C:C6:AF:5D:BC:B8:6D:7E:A9:8C:FF:0A:30:9D:BD:69:33:49
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fc:30:3e:29:c7:c1:09:18:81:52:b9:7c:34:69:80:0f:9a:
02:73:e0:d6:bd:9d:95:64:c6:cf:3f:78:09:a7:4a:89:e3:ce:
8a:95:cc:ae:a0:b5:62:3f:09:67:66:e0:81:a6:85:da:01:42:
87:9f:d7:f5:ce:7a:85:a2:a7:96:6e:65:f3:57:5d:f6:d6:ab:
2c:82:a4:fc:22:32:6d:ff:39:6a:1b:36:2f:f3:1e:d2:fc:85:
29:cb:c8:89:a2:d4:0d:1a:0b:13:0c:6b:73:59:d7:6a:f9:0c:
dd:fa:77:2e:3f:0d:6f:c4:3a:42:56:26:2a:60:d8:16:3e:60:
a5:36:4b:92:48:54:d2:67:d7:35:b4:fc:3f:a5:f9:6f:18:05:
d6:4c:f2:e5:06:ce:2f:20:10:00:6e:9e:39:57:e7:1d:62:7b:
c5:e5:70:16:0f:3c:7e:db:8a:a9:33:06:b3:da:20:44:9b:a0:
2f:f6:e3:45:36:37:5f:5e:8b:8b:3f:c5:ff:59:74:f7:d6:09:
12:88:d7:72:32:0c:95:cc:22:53:50:6b:46:17:01:5f:98:ad:
a0:37:57:ad:67:3b:5b:05:7c:38:f2:e3:df:dd:2f:8f:70:a2:
ea:96:7d:7e:89:68:6e:9a:83:a0:37:a0:b5:a8:aa:a8:75:95:
c2:4f:41:b2
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURXGBZhGvzQRWR7bBo8CSSc9LxIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWU1YTUyNDAyOWQ4ZGU0NDc4MGEwY2YwZTc0N2VjYWUx
NzFhNzBlMTAeFw0yNjA2MjgyMDQ2MzdaFw0yNjA2MjkyMjUyMzdaMDMxMTAvBgNV
BAMTKEMyQ0I0Q0M2QUY1REJDQjg2RDdFQTk4Q0ZGMEEzMDlEQkQ2OTMzNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96uyF1SxOipe7+mnwXz1la7mf
rQa5jII5/9+HDfdOxSWOVtla0mmIPqiew/5dSvbybbNRFSGDKDptPlSPrjWPtIMG
5Ocq44b+58BimMdNqWmHX1CIyljSbsxFGLuM5WcF7OhzHg/R1ygR42qZCEhrswO3
4HZmn94/tvYFeCpJ6xrKWgL9I5+KVoGsCXgMRsZPJ/27TX0myrhb4LZT2CcXAgfM
VKeY+3olgSgSDLiY+jS1LX3Nlk5Gl7KNs7UeszcamGbnPMZ5+XtDUp+BIu4TZ1g3
Q94KOp5D0np8hX4Rh1xs5FB2aI6FXfRilr/OgbLLqc8XQN3KZv13HM47YfjnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwstMxq9dvLhtfqmM/wownb1pM0kwHwYDVR0j
BBgwFoAUrlpSQCnY3kR4Cgzw50fsrhcacOEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGFmYjVmZTItM2MyYS00OTM5LTk1ZTktMDA3N2I4MGI0
ZjBlLzIvQUU1QTUyNDAyOUQ4REU0NDc4MEEwQ0YwRTc0N0VDQUUxNzFBNzBFMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JscFNRQ25ZM2tSNENnenc1MGZzcmhj
YWNPRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0z
YzJhLTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMi9BRTVBNTI0MDI5RDhERTQ0Nzgw
QTBDRjBFNzQ3RUNBRTE3MUE3MEUxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/wwPinHwQkYgVK5fDRp
gA+aAnPg1r2dlWTGzz94CadKiePOipXMrqC1Yj8JZ2bggaaF2gFCh5/X9c56haKn
lm5l81dd9tarLIKk/CIybf85ahs2L/Me0vyFKcvIiaLUDRoLEwxrc1nXavkM3fp3
Lj8Nb8Q6QlYmKmDYFj5gpTZLkkhU0mfXNbT8P6X5bxgF1kzy5QbOLyAQAG6eOVfn
HWJ7xeVwFg88ftuKqTMGs9ogRJugL/bjRTY3X16Liz/F/1l099YJEojXcjIMlcwi
U1BrRhcBX5itoDdXrWc7WwV8OPLj390vj3Ci6pZ9folobpqDoDegtaiqqHWVwk9B
sg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:37 2026 by rpki-client