Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
File: AyAh-UL2oxvnhET4eVXX98j-Z_k.mft (raw, json)
Hash identifier: 6q+Qccu/2CvJRsStGOtMaVtGt22fNTsGHjpBaE9ufUo=
Subject key identifier: 7E:59:E6:23:75:78:97:A6:74:76:9E:EE:90:65:69:FA:9D:24:43:16
Authority key identifier: 03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
Certificate issuer: /CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Certificate serial: 019F8F7DFBE7F740D5D7739BED024C4826F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:26 +0000
Manifest this update: Thu 23 Jul 2026 15:00:26 +0000
Manifest next update: Fri 24 Jul 2026 15:00:26 +0000
Files and hashes: 1: AyAh-UL2oxvnhET4eVXX98j-Z_k.crl (hash: xI00hiAjqBJrMr84Qk04I9rrzllxnukNsGZRLS7Jdho=)
2: O5sybgaSclEqMdz0Cz2yPn7BUqg.roa (hash: gttOxOgOzhcjl2RHp1XJfsuJL3Snw8fxKt1nZwo05Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:fb:e7:f7:40:d5:d7:73:9b:ed:02:4c:48:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Validity
Not Before: Jul 23 15:00:26 2026 GMT
Not After : Jul 24 15:00:26 2026 GMT
Subject: CN=7e59e623757897a674769eee906569fa9d244316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:1c:6d:61:1a:7b:df:e4:df:09:11:2a:2c:
20:d8:43:fa:29:fb:d7:62:c6:54:2d:aa:4a:f5:a7:
ba:b2:3b:6c:01:96:75:f4:80:bd:59:2c:78:75:c3:
1c:79:78:c6:9d:b0:48:28:53:0b:42:50:3f:53:f3:
68:5e:45:e2:d9:7d:01:20:4e:ea:e0:34:88:9c:2e:
2f:ca:82:16:67:a1:0a:32:33:de:6b:79:b7:c5:dc:
4f:8e:ec:37:df:7c:6a:6e:2a:cd:6a:c8:a2:f4:66:
ab:db:b7:e6:49:80:af:ed:91:f8:74:90:de:35:0d:
76:b4:8f:2c:5e:48:af:e4:d4:84:53:4d:56:e0:80:
46:4e:43:d3:c0:a5:b6:96:84:0a:18:54:94:5d:2e:
2d:7f:97:49:d5:68:1c:00:ca:d6:10:eb:00:dc:e6:
e8:cf:89:58:f6:a9:ec:50:a0:c0:a6:eb:14:03:9b:
b2:2d:98:c8:b1:68:9f:09:0b:c3:f5:a3:81:b4:da:
3f:7c:cd:d1:02:a9:a7:03:47:f6:ec:77:53:4f:76:
71:70:0d:05:19:c9:8a:1f:92:bb:4a:40:f8:1e:0c:
a8:27:97:0e:70:e7:fa:16:ef:4e:66:9d:2c:00:e5:
5c:b6:7d:7e:db:41:f7:22:48:67:4d:9f:fe:52:e0:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:E6:23:75:78:97:A6:74:76:9E:EE:90:65:69:FA:9D:24:43:16
X509v3 Authority Key Identifier:
keyid:03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:15:00:29:93:40:aa:90:8a:a4:84:8b:81:e2:e1:aa:11:
d1:e2:31:92:cb:20:cd:3b:33:b0:85:cc:bc:98:c3:60:b3:03:
79:e3:a7:2e:82:63:5d:79:a9:55:a0:11:25:1f:28:b2:69:95:
07:b2:59:bd:4e:9b:3b:f4:58:70:a5:6c:0f:2f:f8:50:bf:1b:
cd:28:0b:78:ff:64:81:5d:22:ee:eb:e0:a5:8b:93:cf:18:33:
32:c0:b6:6a:2f:4c:58:7d:f0:01:54:28:ba:58:f7:b6:88:24:
0c:b5:0f:be:c3:0f:2b:1c:5a:22:29:59:e1:4c:80:e0:36:fa:
3f:56:54:d3:0f:87:77:ab:cd:cb:8f:02:1e:93:97:e7:36:19:
de:6b:3a:a8:d4:62:6b:7b:c5:f5:68:34:29:b1:e2:68:88:b6:
63:fd:69:42:14:d6:1b:7f:d1:9b:0d:9e:27:66:49:08:5e:56:
ba:d0:e1:8c:ff:3b:b2:f0:9f:e2:ce:1d:0d:6b:69:94:2e:df:
22:b7:3d:eb:6e:48:41:d9:bb:1a:e4:c2:87:cb:ca:7c:df:29:
65:75:c7:62:70:50:1e:35:49:df:f7:1d:32:97:be:bf:39:d3:
2d:e4:58:97:38:4a:40:d0:5c:df:60:75:81:0e:17:4a:e5:c0:
00:c3:4f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:27 2026 by rpki-client