Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: fLYv0C00mfXh3sZJtIZ+Ux3rkqWyA1m/4cb0YFgyi0Y=
Subject key identifier: 20:28:0C:75:A2:6E:15:D9:33:11:F2:03:74:A0:B2:C0:3F:A7:4E:26
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 1B436D5A36A1420A7A720910C1D0BE5AF91DFB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: 86
Signing time: Thu 23 Jul 2026 14:02:30 +0000
Manifest this update: Thu 23 Jul 2026 13:57:30 +0000
Manifest next update: Fri 24 Jul 2026 17:10:30 +0000
Files and hashes: 1: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: cMXJ5hUw6hi+RL+qTYie4SoJ4zug6VaJu2EFbMAmPSQ=)
2: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:43:6d:5a:36:a1:42:0a:7a:72:09:10:c1:d0:be:5a:f9:1d:fb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Jul 23 13:57:30 2026 GMT
Not After : Jul 24 17:10:30 2026 GMT
Subject: CN=20280C75A26E15D93311F20374A0B2C03FA74E26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:d6:da:35:e4:a8:66:81:23:b4:66:e7:47:
9e:03:77:28:ce:36:23:6e:95:0b:0a:87:d3:fc:fe:
10:2e:e9:d1:b4:e4:ec:05:92:9c:04:98:07:ba:f1:
6a:91:0c:cf:b5:1f:84:6b:57:55:dd:8f:db:ec:ea:
ea:76:9f:ac:c9:9c:1f:86:e2:65:13:ba:d1:95:1b:
b4:2f:c3:88:06:15:97:cc:05:45:4f:8e:f1:7a:ab:
cf:79:9c:41:00:9d:91:6f:21:f2:43:44:0c:2e:ca:
7d:07:5f:d8:2f:8e:3a:f4:f0:fd:c8:8f:6a:93:8b:
f2:b2:51:0a:9e:3a:c7:0b:af:4e:ca:18:83:a8:3b:
fc:eb:f7:31:4e:4a:c2:db:74:d2:fc:89:af:15:a0:
e7:e3:c3:16:54:b7:55:d4:e9:e1:75:80:16:20:2f:
1f:49:09:0e:93:74:80:86:3c:2f:a4:48:be:d8:81:
f6:ef:de:82:08:82:92:26:73:c5:e3:87:12:42:e0:
ed:8a:2d:e8:95:26:95:da:52:98:dd:1f:56:04:80:
79:98:4a:9c:36:67:de:18:7a:fa:0b:06:51:70:dc:
e5:7e:8a:85:26:54:d8:d3:1e:d9:69:9e:50:ad:67:
ba:c3:47:32:0e:a4:fa:5f:f5:e6:56:a3:2f:73:3f:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:0C:75:A2:6E:15:D9:33:11:F2:03:74:A0:B2:C0:3F:A7:4E:26
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:7c:13:a1:13:76:d2:41:f8:7e:e0:2e:7b:61:ae:cc:d7:
cc:e4:47:30:a3:f3:4c:08:aa:5e:d0:97:e6:f4:16:76:6d:2a:
6e:9a:40:8f:1f:19:5c:4d:53:77:05:22:4e:cf:e6:5d:7c:f9:
d0:4e:92:7e:4c:47:7a:a6:6b:c0:7a:e1:d7:bf:6e:83:f4:b3:
02:c8:6e:bf:0b:2e:cb:f9:7f:23:5e:0a:be:96:2a:69:e4:7b:
6a:4b:bd:d2:6e:2e:25:e3:fb:ab:9f:ad:45:30:84:f7:89:82:
c7:0a:0e:6b:ec:06:a5:af:34:34:20:e3:e8:f2:db:e0:44:89:
0d:c9:8b:b5:9e:4a:9e:f6:bc:5a:bb:c0:42:36:3f:13:4f:0a:
71:b9:ec:e4:0e:87:fe:1f:40:a6:44:1d:7f:08:c1:8f:b1:a5:
eb:90:f0:5e:03:51:b8:87:9c:a7:e3:f6:7f:3a:39:54:da:90:
d9:03:53:ca:18:89:04:d4:3a:2a:10:2a:ee:57:f1:c6:23:bc:
37:00:28:52:63:d1:85:0f:af:54:6d:52:30:34:6e:92:e6:3d:
51:1d:a3:fc:1e:59:1c:69:04:7d:40:9c:65:ea:d3:85:e3:c7:
09:7c:be:ef:fd:4e:2b:10:18:6e:d9:21:5e:30:39:6c:69:26:
c1:a2:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:40 2026 by rpki-client