Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
File: AyAh-UL2oxvnhET4eVXX98j-Z_k.mft (raw, json)
Hash identifier: vwX66lqj3wsNK16h2pO93YuDh6UUCE6NpoUybGZWnXA=
Subject key identifier: E0:3F:D0:0C:AE:46:3E:E1:65:5F:44:D5:BC:B2:C0:41:6E:D4:6B:86
Authority key identifier: 03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
Certificate issuer: /CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Certificate serial: 01A0D9BA6D6EC1AF629AA2E48BE4C4DF15C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:08 +0000
Manifest this update: Fri 25 Sep 2026 18:01:08 +0000
Manifest next update: Sat 26 Sep 2026 18:01:08 +0000
Files and hashes: 1: AyAh-UL2oxvnhET4eVXX98j-Z_k.crl (hash: zUgTBFo1QXvOhMpSQLDD5SOQG5D8faF4m1CqjdA0SQ4=)
2: O5sybgaSclEqMdz0Cz2yPn7BUqg.roa (hash: gttOxOgOzhcjl2RHp1XJfsuJL3Snw8fxKt1nZwo05Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:6d:6e:c1:af:62:9a:a2:e4:8b:e4:c4:df:15:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Validity
Not Before: Sep 25 18:01:08 2026 GMT
Not After : Sep 26 18:01:08 2026 GMT
Subject: CN=e03fd00cae463ee1655f44d5bcb2c0416ed46b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:de:d0:51:a1:b4:ee:86:c5:d5:ac:30:7e:
72:a4:5e:80:42:86:0b:96:e5:70:bd:49:ef:97:8b:
5f:f4:55:f0:a0:3f:96:d8:8a:6b:62:bc:71:0b:04:
e1:79:b6:63:2d:a2:8c:59:fd:9a:9a:14:bf:d2:07:
e6:13:7e:98:0f:cb:6f:73:c3:e0:05:d2:75:82:b6:
8d:d9:97:8d:54:83:cf:67:bd:a9:97:cf:d6:dc:47:
bd:50:dc:1a:79:86:81:ab:f2:ad:34:e2:70:d9:12:
96:45:de:d4:9c:58:10:2d:c3:dd:6f:c8:c0:42:7c:
a5:ff:57:ca:3c:21:0d:f9:55:89:74:f7:dd:d6:5e:
32:36:96:ee:eb:ac:51:83:a2:c1:8f:0f:a6:1f:c0:
b4:44:d5:9e:4f:0d:e8:07:33:35:fe:dd:f7:f4:33:
95:d7:f8:a7:14:5d:7c:20:e6:9b:c6:c0:22:c1:f5:
97:e1:74:50:05:84:c0:d9:4a:31:56:1d:f0:e1:58:
8c:f2:8c:a1:ad:6e:41:80:9d:d4:3a:3d:c0:38:de:
5c:a5:26:1f:df:e3:fe:10:63:30:6a:ad:83:63:cd:
a3:43:5d:99:d8:cc:8e:97:ea:d8:d9:08:d8:7b:59:
9e:96:be:e3:79:d4:34:c4:e2:4f:f0:bf:b3:af:cf:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:D0:0C:AE:46:3E:E1:65:5F:44:D5:BC:B2:C0:41:6E:D4:6B:86
X509v3 Authority Key Identifier:
keyid:03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9e:51:eb:f7:23:68:ed:d0:3a:2f:13:42:19:99:6c:c0:8c:
c4:8c:fe:ce:f0:1c:72:4e:e5:81:61:4e:75:2c:35:e9:6f:b5:
ed:f6:06:ba:a3:ba:65:af:4b:86:b8:96:70:0e:4f:5d:65:0d:
11:1f:59:54:b7:a3:cd:f7:00:4a:d7:7c:2c:1f:1e:00:78:8c:
87:17:a3:f3:9f:f0:2a:01:bf:cd:b1:27:c4:62:fa:fe:c0:d6:
9d:99:77:30:4c:eb:15:b4:cf:2a:c7:88:72:8d:37:ce:0e:a3:
11:2d:6c:17:2b:71:6e:ae:82:c8:26:e2:6a:e9:91:91:e0:e2:
8d:4f:94:2b:a8:75:5b:5b:79:49:86:94:fe:97:45:a7:0d:b5:
66:6d:bc:11:36:81:31:55:51:81:1d:71:e2:b3:9e:5f:11:54:
d4:fc:be:d5:da:2e:a5:fc:24:1a:99:55:ec:73:fd:69:8d:1c:
45:70:ef:71:8d:97:eb:58:80:bc:17:6f:f2:d3:ff:52:09:68:
46:9f:46:b2:69:91:4e:18:8c:29:a2:5b:56:02:10:75:95:75:
22:27:fc:e4:37:ca:10:c4:33:d8:12:ce:6f:6d:7a:ff:2a:1b:
e1:20:09:84:3b:5d:1c:33:55:37:fd:5b:43:17:3d:d8:49:2d:
bf:f9:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:49:15 2026 by rpki-client