Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
File: AyAh-UL2oxvnhET4eVXX98j-Z_k.mft (raw, json)
Hash identifier: KwW4UYQ3uWyCrctKzLoYXbs/t5ogtImwkh6vEo3vscM=
Subject key identifier: AE:BA:D8:31:96:33:8F:53:AE:D6:75:62:C8:6B:2A:6E:30:90:46:EB
Authority key identifier: 03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
Certificate issuer: /CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Certificate serial: 01A0D01235D29E23DBBA1D0AB219C1FC6782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:49 +0000
Manifest this update: Wed 23 Sep 2026 21:00:49 +0000
Manifest next update: Thu 24 Sep 2026 21:00:49 +0000
Files and hashes: 1: AyAh-UL2oxvnhET4eVXX98j-Z_k.crl (hash: xont+R6W/ze4+QSfu5Xy/RwcxqEBN1zhplK7KUl+Rdc=)
2: O5sybgaSclEqMdz0Cz2yPn7BUqg.roa (hash: gttOxOgOzhcjl2RHp1XJfsuJL3Snw8fxKt1nZwo05Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:35:d2:9e:23:db:ba:1d:0a:b2:19:c1:fc:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Validity
Not Before: Sep 23 21:00:49 2026 GMT
Not After : Sep 24 21:00:49 2026 GMT
Subject: CN=aebad83196338f53aed67562c86b2a6e309046eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:26:8d:fc:d3:d6:a9:94:4b:36:e6:f7:0a:
5f:9d:37:d1:44:d2:aa:97:33:43:3d:e3:7c:76:02:
8b:0c:43:ae:a7:da:e3:0d:30:04:b6:fa:9b:d8:f7:
01:f7:9e:e3:5b:0b:86:e8:75:bf:be:5b:0f:44:8f:
b9:f7:8b:58:46:e6:0d:c0:3a:c7:7b:ac:8d:bb:fb:
48:3f:d9:ff:ad:59:12:ef:8b:cf:dc:5f:e5:fc:86:
c2:2d:12:8f:00:d6:df:6c:79:58:d9:5f:55:41:73:
5a:0f:b7:a1:a0:ca:fb:0b:66:fc:6b:ee:7e:6b:e5:
da:ea:19:46:99:74:d7:f3:02:44:d8:ff:01:36:a5:
be:58:e4:6b:e9:7a:9a:4f:8a:98:00:89:d8:1a:f2:
c8:f3:92:43:43:e9:ca:cc:a9:16:f7:de:42:9a:21:
03:ec:91:c1:91:b6:59:29:ee:84:df:ac:29:57:da:
7e:10:dc:3a:34:51:5b:b0:88:8c:96:8d:dc:d0:62:
29:48:68:e8:84:33:6a:36:b7:2e:48:90:c6:4f:7a:
4b:ed:57:b0:d4:97:31:26:bc:18:fd:ab:69:5b:c0:
05:f2:04:31:1b:4b:07:bd:26:12:fb:34:bd:1e:d1:
4c:3e:07:5d:0d:1a:97:6e:69:d2:17:54:8a:1b:7e:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:D8:31:96:33:8F:53:AE:D6:75:62:C8:6B:2A:6E:30:90:46:EB
X509v3 Authority Key Identifier:
keyid:03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:42:7e:ec:3b:7c:d0:20:50:ea:73:f3:60:ea:d1:4d:91:09:
49:12:b3:43:2f:b1:62:33:55:3d:06:e5:19:e5:d2:59:96:57:
c1:0b:d5:85:62:08:2d:81:a1:6e:6f:ea:66:23:75:1b:da:3b:
59:13:7f:0d:14:fa:76:58:15:33:30:1f:c4:cb:55:9c:33:e9:
6f:b6:11:a0:ee:be:44:3b:cb:b7:7d:d4:bd:67:6a:c5:e7:ef:
23:a9:20:9c:02:7e:00:79:56:cc:06:a3:c1:60:4e:d0:8c:37:
91:f2:d5:11:bb:1d:75:79:56:9e:db:6c:5c:20:65:26:65:28:
ee:45:c9:da:ad:2e:7a:e7:8f:6f:d1:f8:7e:ae:fb:90:d3:9c:
65:f8:0f:07:08:dc:cd:01:28:9a:68:e2:f7:71:d8:ac:fb:e2:
b7:aa:ac:51:f8:24:50:d4:35:f7:8f:d8:2b:be:82:93:ae:52:
dd:6e:9a:4a:57:03:e5:44:6d:00:5e:31:6f:d3:55:66:12:6c:
72:59:c3:4b:57:7d:aa:f3:26:a5:1d:f9:f9:61:95:08:f8:42:
6d:1c:68:af:3b:ee:c4:1d:b8:1f:b8:d5:3c:54:f3:05:6c:38:
e0:d8:37:40:02:a5:fb:1f:da:f7:26:61:37:89:2f:91:ef:4e:
99:aa:e0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:02:20 2026 by rpki-client