
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json)
Hash identifier: P4bdcx7xsi8yutw4ZJ/9UMT66yotoxc91wjwORJwilQ=
Subject key identifier: AF:1A:C4:E2:11:33:B2:FC:53:10:E9:09:50:B4:44:2B:F9:EF:45:A5
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01A1DBA648E431616BFEADD13B227F2CDEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
Manifest number: 1881
Signing time: Sat 14 Nov 2026 20:01:10 +0000
Manifest this update: Sat 14 Nov 2026 20:01:10 +0000
Manifest next update: Sun 15 Nov 2026 20:01:10 +0000
Files and hashes: 1: 1bncdI1HvWegkfkOeeoa5nOljr8.roa (hash: NfbtKL/fM/sWFvyUIB3zJxF3TY7oHsHrb3iWZHcFnF8=)
2: 2CbQxQdIR56oI33mXsNPJysh2OI.roa (hash: joXS8xA5s2yEiWLT1AkcUqDIoaCDRVGH7P/aChB2ymU=)
3: 3EanmD6DodOa3OjQ9Kx0qn9ri6Q.roa (hash: 4kaL0cFBeCDq0v8h0ILY1h3bjLeCtgIe5E5jCClpBsI=)
4: 3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa (hash: z6ut5tdJDvXB8Jzf9s56+SPQvAn7Qp00GIZZPe2eAlQ=)
5: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (hash: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg=)
6: 7cfTnZvgSfEil-YZBKZdLdCbAbo.roa (hash: AKLB22yDeG7EM9+/4pHVnLAsK2pplpeZJDCWxL6pSIw=)
7: 96nhW7fwQ_laWKSgwpcxi24MuvM.roa (hash: N6W5Ek/wK4Pm3whmGHtixWn1/HYkCfQdvQqhfZHUqC4=)
8: DAsiheAfQV-3n4ItlbPGVG1Md4w.roa (hash: 6+SFOXT2tV1fCHy49Xv2Jfj0h6/qqmiVRYPvHr297JI=)
9: Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (hash: qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=)
10: FBci10I6aG73ENuNfx7xpq1wj1I.roa (hash: 7Qx3boAf1NH/EWgy4dJq6Se8FRdBuYw6f3pqwBtRiL0=)
11: J8uF2NoryDUxm1SlbC6CQSKPUdc.roa (hash: x3HcBoYWhmqAXNzF37ZMBXp3/y4iai3A8/l7Q1ckTWM=)
12: JgQFyvhK48UsiHLo2GClJOr_UYg.roa (hash: ENI0caY+qR5uep969CyovRK5p657zdmyswAf0HcKQ3I=)
13: M25DxF769Ii8sD3VQLHjxn_a5xs.roa (hash: km4/YnoSASnoYK+VrVOCmmtlMYLN2uh5BGpv+BmeWq0=)
14: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (hash: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0=)
15: UK_V3N1epsugIkAcmcr5ieNfjeU.roa (hash: 4iAgS9C2I2C1YIUY6TIsSDC8YFSx7TeJEyw2cxl8uo0=)
16: YBpN3TQ1JzwNzB0-jsj_CckejPU.roa (hash: 8A8QBdzrHSSwGIlNYxFd7VC285mnazoMY8ZTK0EOh18=)
17: ZsQ9lmRCQ--4PszinpRM3-Zgb2Q.roa (hash: gLbW2t41nzvj/YP55Vnr5cnIfKklQY/CBVxBOEbb3ls=)
18: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: vXsL4GeGRGAhbUJifds86I2zFTWZkOeUzQXNKOiU5BM=)
19: hPPUJEU66HUzBCdsMKPjv4y6kCw.roa (hash: ZcjMLqy1z7bp5wMo9CeMXm4svFAsNX9iyFgfU+2xru4=)
20: icFNxm6-PTi48L2vXKiDHN-axp8.roa (hash: BdFj1k1TZoLMU1HBgixKhNdJTHKY90rp1IYePTyNxUE=)
21: kx1p1slIxkJTxYn4OAj06CJUsf8.roa (hash: HkJZcVcAXKQ3R00x2VbaFry/zdm9SDMa5rLM9eNsbGo=)
22: q4DCvIiS6THJXZg00ACbcwTs9to.roa (hash: BzDZyZi3DK/fRXztW3cj1XBtDtFZup20v6Mda//O7qY=)
23: uSxyC5p1LzFocZL_XSBl8zeh0yg.roa (hash: zYJeQSQ3Bb4u+MNLkMaVaYTlv5YIpnhYpjXWLaWwK80=)
24: yhO6jjNSs_bJoAXmqMYLMOei02c.roa (hash: onlwkoJ5OKhTr40KVglk32d3M7hjIqq4nk6HmNYVvsU=)
25: zL6Va8mz4-mL5dF-T8Ckn3SRIUc.roa (hash: Kfzl6+KPLIjmljlRdomaeCn9w4EH9DthiJPy82CrCpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:48:e4:31:61:6b:fe:ad:d1:3b:22:7f:2c:de:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Nov 14 20:01:10 2026 GMT
Not After : Nov 15 20:01:10 2026 GMT
Subject: CN=af1ac4e21133b2fc5310e90950b4442bf9ef45a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:7e:28:64:4e:41:be:1e:e4:e8:13:cb:38:
93:b8:56:ec:85:8b:26:73:84:e6:0c:1a:ff:c7:8c:
80:94:43:2f:51:55:50:80:02:c5:3a:33:10:50:01:
c4:87:68:4f:a4:0b:ff:d6:5c:da:1a:bb:41:9e:0b:
db:76:ac:17:fa:36:d4:03:26:a6:0c:3c:ea:d8:aa:
be:1a:99:00:89:a4:1b:dd:ef:21:0b:4a:45:09:3e:
b8:90:1f:8f:aa:11:35:a8:f7:30:a5:b3:3f:d0:75:
90:40:cd:bc:5d:ec:1d:43:a6:3c:b1:4b:86:29:e0:
3d:cf:9b:59:b8:20:f0:62:3a:fc:ed:b7:06:05:6c:
4f:73:d1:38:16:55:5e:39:8e:1c:0a:70:58:43:fa:
b8:20:1a:d7:bf:97:17:30:87:b0:52:e8:c3:c2:4b:
6c:cc:92:39:75:cb:f8:34:b8:02:cb:e1:db:e2:12:
b9:2a:01:2c:1d:fc:10:5b:6a:78:1a:65:15:50:06:
f8:03:2b:b7:20:3f:5c:a7:6a:c9:01:3c:34:3d:28:
3c:55:d7:22:fe:c1:29:5d:50:cd:24:65:23:89:c7:
c5:f4:54:a5:5f:bc:dd:6e:3b:ed:b1:b6:a4:d8:94:
d1:b6:3d:65:bf:e5:ef:e3:ac:b7:9b:20:77:32:b8:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1A:C4:E2:11:33:B2:FC:53:10:E9:09:50:B4:44:2B:F9:EF:45:A5
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:84:d0:4d:88:c5:9d:59:df:f2:66:a6:78:ee:bc:6b:51:
ea:39:48:84:17:fd:88:47:37:09:fb:ca:08:a6:4a:95:10:74:
d3:11:08:7d:a7:7e:1c:9e:02:3b:95:bd:7f:6e:a1:ad:7e:38:
90:03:a1:73:f4:00:dd:7b:30:3d:b5:5b:01:b0:0f:c0:39:21:
e7:7a:28:00:bd:a0:65:f6:23:92:1d:ce:d4:fd:8d:0c:3c:b5:
0f:10:fd:61:e1:85:fd:0d:65:26:59:b6:21:fa:02:24:92:98:
f8:e6:89:42:f5:f2:67:86:08:93:a7:a2:87:1f:3c:30:39:dd:
a6:74:0a:ad:f7:38:55:85:0f:f3:95:a2:30:dd:91:2e:fe:82:
15:1a:80:8b:5b:b3:b5:9e:c1:2b:06:fa:ea:35:a7:5b:bd:62:
67:75:a5:5a:1b:b9:d5:45:06:8a:d9:2e:73:b1:01:76:ab:2b:
c7:9b:6b:e6:fa:03:40:18:1e:76:a3:a0:1d:b8:bb:10:35:13:
4c:7c:b8:36:01:f4:19:e6:3e:18:c2:7b:39:8e:bd:bd:68:98:
5a:b3:85:7a:6d:d1:e8:51:7f:0e:d7:8e:2d:22:cd:93:a9:8b:
95:11:44:01:38:c8:3a:e0:ac:5a:9d:3f:38:0d:31:cc:48:ce:
16:06:6c:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbpkjkMWFr/q3ROyJ/LN7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjYxMTE0MjAwMTEwWhcNMjYxMTE1MjAwMTEwWjAzMTEwLwYDVQQD
EyhhZjFhYzRlMjExMzNiMmZjNTMxMGU5MDk1MGI0NDQyYmY5ZWY0NWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsp+KGROQb4e5OgTyziTuFbshYsm
c4TmDBr/x4yAlEMvUVVQgALFOjMQUAHEh2hPpAv/1lzaGrtBngvbdqwX+jbUAyam
DDzq2Kq+GpkAiaQb3e8hC0pFCT64kB+PqhE1qPcwpbM/0HWQQM28XewdQ6Y8sUuG
KeA9z5tZuCDwYjr87bcGBWxPc9E4FlVeOY4cCnBYQ/q4IBrXv5cXMIewUujDwkts
zJI5dcv4NLgCy+Hb4hK5KgEsHfwQW2p4GmUVUAb4Ayu3ID9cp2rJATw0PSg8Vdci
/sEpXVDNJGUjicfF9FSlX7zdbjvtsbak2JTRtj1lv+Xv46y3myB3MrgTnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8axOIRM7L8UxDpCVC0RCv570WlMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEOE0E2I
xZ1Z3/JmpnjuvGtR6jlIhBf9iEc3CfvKCKZKlRB00xEIfad+HJ4CO5W9f26hrX44
kAOhc/QA3XswPbVbAbAPwDkh53ooAL2gZfYjkh3O1P2NDDy1DxD9YeGF/Q1lJlm2
IfoCJJKY+OaJQvXyZ4YIk6eihx88MDndpnQKrfc4VYUP85WiMN2RLv6CFRqAi1uz
tZ7BKwb66jWnW71iZ3WlWhu51UUGitkuc7EBdqsrx5tr5voDQBgedqOgHbi7EDUT
THy4NgH0GeY+GMJ7OY69vWiYWrOFem3R6FF/DteOLSLNk6mLlRFEATjIOuCsWp0/
OA0xzEjOFgZsBQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:44:41 2026 by rpki-client