Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
File: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft (raw, json)
Hash identifier: l+1ZmvHj0SgwV4JZiJpJsXU2ijmMvNobnhIbdYvaiUQ=
Subject key identifier: 09:95:DA:47:4D:80:16:10:B1:F1:60:11:1D:35:AD:7F:39:8F:80:53
Authority key identifier: AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
Certificate issuer: /CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Certificate serial: 2C64EA98B76C86952DC2D979C8F5166976343BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
Manifest number: 0133
Signing time: Thu 24 Sep 2026 06:19:53 +0000
Manifest this update: Thu 24 Sep 2026 06:14:53 +0000
Manifest next update: Fri 25 Sep 2026 08:05:53 +0000
Files and hashes: 1: AS204518.asa (hash: knTXg4oFfEiTxJ88fFqJ8Q/SLk+ruyNV3B46HDQddb0=)
2: AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl (hash: x/cSDyTuwayrdsCcePtb5D8avdR7I1PzB5eFHYV+pN4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:64:ea:98:b7:6c:86:95:2d:c2:d9:79:c8:f5:16:69:76:34:3b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5a524029d8de44780a0cf0e747ecae171a70e1
Validity
Not Before: Sep 24 06:14:53 2026 GMT
Not After : Sep 25 08:05:53 2026 GMT
Subject: CN=0995DA474D801610B1F160111D35AD7F398F8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:74:2c:cd:86:f1:16:54:93:6f:cf:4a:24:
42:69:60:51:25:a2:1d:4a:29:5f:84:16:7e:8e:d4:
c1:2d:cc:2d:12:61:33:c5:63:89:12:05:c2:4a:1e:
72:ff:79:fe:4a:2e:73:65:fb:51:d6:f2:d0:36:4d:
6f:22:f2:d6:40:09:2a:3e:2f:9a:1c:ad:78:a8:67:
da:02:2d:b4:59:8d:df:ef:ce:a8:61:f9:ab:2a:f6:
1e:ef:d8:dd:73:64:57:90:fd:9a:8e:0a:d9:ca:7b:
5a:b2:3c:49:53:63:07:44:e8:75:2d:d6:b0:af:1c:
57:b8:4b:65:ba:dc:65:b1:7d:f2:aa:ee:33:c5:b8:
f3:de:d3:3a:aa:a0:92:3e:85:3f:91:82:4d:c9:51:
7e:c9:dc:a5:91:c7:a9:d7:de:74:05:4d:31:bb:06:
38:99:ef:b1:27:cd:bf:bf:37:82:ef:30:89:88:5e:
d3:0c:36:e8:46:9b:59:c9:98:a7:44:54:53:1d:8e:
cf:fc:41:7f:88:c1:95:e5:54:92:e7:93:95:7d:ba:
9a:68:5e:f5:92:e7:c3:f5:48:de:cb:7a:d9:e4:6d:
4c:72:97:fc:60:b6:ec:c6:c8:ad:5f:6f:77:26:a7:
35:7e:29:26:1b:76:99:e4:44:93:32:ac:7b:b9:37:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:DA:47:4D:80:16:10:B1:F1:60:11:1D:35:AD:7F:39:8F:80:53
X509v3 Authority Key Identifier:
keyid:AE:5A:52:40:29:D8:DE:44:78:0A:0C:F0:E7:47:EC:AE:17:1A:70:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlpSQCnY3kR4Cgzw50fsrhcacOE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/2/AE5A524029D8DE44780A0CF0E747ECAE171A70E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5e:75:d1:72:45:a0:53:b1:b9:80:18:00:c1:fb:94:d6:29:
2a:ac:fe:38:97:3e:29:44:2a:72:0b:ab:a2:f1:85:ee:bb:01:
9e:5b:8c:62:76:6d:f7:39:22:fd:7d:30:9e:9d:c5:6b:9f:69:
5f:38:0c:d6:40:a5:cc:c0:e4:fa:40:e1:7e:6c:fb:4c:65:23:
07:83:cc:ac:98:04:48:98:90:2d:bf:b5:85:b2:2b:de:df:2b:
17:30:de:c4:5a:fe:fb:82:e6:81:e6:6c:93:5f:81:17:31:1e:
b4:5e:52:a5:5a:e5:a2:ad:3c:ab:71:f8:d0:97:a2:22:8c:2c:
a9:7f:0a:f0:93:db:f6:cc:4a:d4:89:81:fe:bc:3a:2b:bb:a3:
f7:e0:38:e0:ea:af:dc:2a:2e:a4:17:6f:93:6d:26:96:3c:bf:
3b:e8:fe:c9:c3:db:1d:fa:98:29:1d:ef:c0:ca:69:ae:9d:2c:
e0:48:d4:11:33:15:2c:01:4a:f7:68:0b:54:03:36:55:da:87:
86:6d:ec:f7:07:a3:e2:6d:9f:6a:c1:a4:8b:a7:35:30:d2:b4:
ce:3b:b4:52:25:3f:db:f0:cf:9e:da:90:89:54:92:05:01:33:
59:f7:61:cb:2e:08:53:83:20:54:da:48:8e:a7:19:ee:ea:37:
97:af:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:56:11 2026 by rpki-client