Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
File: AyAh-UL2oxvnhET4eVXX98j-Z_k.mft (raw, json)
Hash identifier: LbKvGhTsfa0VFFOrfp2gxstd3xuGogmV1/J7JK4YyuI=
Subject key identifier: 8A:6D:3F:6D:72:19:C7:0C:EB:7C:6B:BD:CB:92:2A:04:68:43:42:F4
Authority key identifier: 03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
Certificate issuer: /CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Certificate serial: 01A0412A3BC574D2AC93123F8D3E4A29A4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:21 +0000
Manifest this update: Thu 27 Aug 2026 03:01:21 +0000
Manifest next update: Fri 28 Aug 2026 03:01:21 +0000
Files and hashes: 1: AyAh-UL2oxvnhET4eVXX98j-Z_k.crl (hash: XlE0ZuKVPjI/AiG9LKQmxTslJ7J8D4EbentIOXODF2g=)
2: O5sybgaSclEqMdz0Cz2yPn7BUqg.roa (hash: gttOxOgOzhcjl2RHp1XJfsuJL3Snw8fxKt1nZwo05Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:3b:c5:74:d2:ac:93:12:3f:8d:3e:4a:29:a4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032021f942f6a31be78444f87955d7f7c8fe67f9
Validity
Not Before: Aug 27 03:01:21 2026 GMT
Not After : Aug 28 03:01:21 2026 GMT
Subject: CN=8a6d3f6d7219c70ceb7c6bbdcb922a04684342f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:2e:5b:72:39:34:72:cd:97:6b:14:4d:64:
ce:52:8e:de:c9:00:ec:30:4c:63:ba:8e:a4:30:e7:
41:a7:16:3e:f5:fe:79:a6:c1:09:bb:c3:f6:c3:d9:
90:69:72:c6:9e:cc:6d:be:7b:56:be:74:8d:5e:5a:
1c:c8:fa:fc:7a:a6:c7:41:f2:10:35:01:73:a4:97:
bc:69:63:4f:63:2a:f8:4e:63:36:e1:a5:9b:d7:74:
f4:37:21:e0:57:ae:52:c4:78:a1:9f:d8:0f:85:45:
0e:90:78:2d:14:ad:37:bc:82:85:06:d6:d9:1c:90:
bc:cc:c5:8a:c7:fe:67:e0:6c:4e:b7:0b:ff:a5:2d:
03:47:03:a0:4e:94:02:ac:c2:fe:18:79:ee:b4:bc:
09:0c:d8:7d:5c:bf:8f:cc:9f:b2:ce:26:03:05:66:
c3:4e:2d:3d:dd:83:5a:c8:0e:cb:c0:55:60:f4:43:
16:0e:e8:66:9f:a6:71:6b:a3:32:06:26:41:61:73:
8c:45:d6:1c:6f:5c:f5:91:6a:f5:02:e2:d8:5b:72:
1c:52:5e:0f:63:cb:58:9f:00:98:42:c4:1a:d6:2f:
c1:f7:2e:7f:0e:c7:70:13:ad:f0:71:db:a9:1d:a6:
89:e0:28:86:69:e3:de:16:38:a5:f8:5a:36:27:85:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:3F:6D:72:19:C7:0C:EB:7C:6B:BD:CB:92:2A:04:68:43:42:F4
X509v3 Authority Key Identifier:
keyid:03:20:21:F9:42:F6:A3:1B:E7:84:44:F8:79:55:D7:F7:C8:FE:67:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyAh-UL2oxvnhET4eVXX98j-Z_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/AyAh-UL2oxvnhET4eVXX98j-Z_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:86:e0:4f:91:a3:0f:20:52:35:97:56:10:ab:83:b1:4d:f6:
14:c2:6e:c1:57:c5:f1:f0:66:fb:fe:58:21:76:70:ba:bb:e4:
04:c3:e1:7b:f7:69:03:38:1c:c0:26:6f:ba:a9:50:5d:02:53:
2d:2e:61:35:0d:1b:05:f0:2b:e4:9d:74:98:05:cf:62:4d:ba:
0f:8e:8c:d5:43:b5:ce:0a:a6:53:60:87:87:16:48:cd:1f:a4:
dc:8c:bc:e4:61:9b:8a:0f:ae:0e:ac:45:51:23:34:92:c2:da:
39:b7:76:9c:b6:00:2f:43:f0:81:7d:62:31:eb:db:08:9d:2f:
cf:de:8f:6d:f2:dd:a6:99:ba:35:90:1b:9a:f5:8e:b9:28:cf:
d3:80:33:20:1c:45:bb:dd:da:e2:b4:77:2d:46:74:75:41:ba:
e6:81:cd:2f:46:91:1f:0b:f3:22:31:e4:bf:ef:29:75:40:22:
a8:ba:30:ee:98:a5:9b:55:6b:66:0f:36:09:70:23:35:16:f2:
b1:8c:9d:d0:66:d7:eb:ec:33:2b:0b:6c:06:d8:bd:2a:b6:e0:
eb:ab:58:bd:4b:26:82:16:3c:1e:50:ec:52:97:2b:ca:cf:85:
2c:bf:e1:f4:82:db:27:d5:58:19:89:75:da:6d:fa:85:f4:ec:
a5:41:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:50:39 2026 by rpki-client