Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: cOpXZ7TGeVhG1QBTIavKWingDD3ZQrD6VKYpQquRhek=
Subject key identifier: 11:32:E1:C6:F9:DA:48:C8:7F:D1:32:E1:13:4A:C0:8C:13:C5:DF:9F
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019FAA50B87746BAB1864CB34883AA0862B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0F5D
Signing time: Tue 28 Jul 2026 20:00:44 +0000
Manifest this update: Tue 28 Jul 2026 20:00:44 +0000
Manifest next update: Wed 29 Jul 2026 20:00:44 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: rgPa713X+LyEPf+mWpky1bPWOmWxPfQwVjm4qRg7IoQ=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:b8:77:46:ba:b1:86:4c:b3:48:83:aa:08:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jul 28 20:00:44 2026 GMT
Not After : Jul 29 20:00:44 2026 GMT
Subject: CN=1132e1c6f9da48c87fd132e1134ac08c13c5df9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:2d:5b:07:fe:c0:b9:ed:a4:62:e2:8e:1a:
d2:fc:03:cb:b1:a8:c8:b0:69:c9:ec:00:ef:df:6c:
4d:1e:d7:c5:33:e1:c8:b3:85:68:42:30:a9:12:2e:
43:a7:68:60:9b:7f:c5:4a:20:99:ad:66:d1:a4:5a:
7c:8e:4f:43:79:0d:b3:fe:62:8f:9d:1c:fd:f1:4a:
b7:46:ae:ab:c8:1b:23:da:85:55:be:9a:08:ed:1e:
fc:94:fa:4a:da:e8:ef:33:7e:60:98:5e:6d:b4:0e:
83:c3:e1:7f:b8:3c:32:16:99:8a:2f:c5:0b:27:cc:
0f:af:f2:c8:15:d2:b1:58:1b:51:e1:03:d0:ed:fb:
21:78:37:be:54:df:0d:a9:94:a0:e7:aa:57:80:c9:
ac:8f:0b:02:14:d8:31:dc:54:13:5a:ec:03:46:22:
d4:f5:bc:22:13:f8:47:bd:42:7d:64:90:3c:48:14:
24:e0:fc:a7:7b:35:65:30:9e:ea:e8:6d:41:28:d6:
21:91:97:5d:33:48:51:96:e4:51:98:64:4f:76:da:
9b:9e:df:85:a0:52:00:04:f0:98:eb:06:7f:0c:2d:
f2:8e:e2:45:cf:ba:ea:07:a6:b0:a8:dc:46:f6:15:
08:09:72:80:d9:0e:40:b8:23:2a:f0:9d:3b:92:af:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:E1:C6:F9:DA:48:C8:7F:D1:32:E1:13:4A:C0:8C:13:C5:DF:9F
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:12:c3:7b:be:b4:82:19:a2:4b:39:65:b2:31:ac:45:f3:93:
a3:17:04:84:1b:1d:7b:c4:85:6c:16:38:a6:d9:8f:e1:6b:52:
a9:fe:a6:4a:f3:a9:d1:b8:7f:40:dd:20:1e:8e:5b:35:f2:bf:
09:7f:86:34:47:08:2b:42:42:c4:c5:c1:d7:73:81:86:90:3a:
1a:39:06:3d:e7:7e:6c:4c:c4:14:bc:e0:48:11:4e:e7:2c:0e:
3f:ba:02:0e:c1:db:c1:27:e9:65:d9:f8:64:f8:56:11:d6:a6:
7e:b7:3e:9c:de:a8:ee:b9:ca:d2:25:bd:af:5e:12:d8:b8:33:
b5:a3:a0:ea:78:78:20:39:66:3a:04:2a:ce:a7:ef:3c:8c:98:
90:64:5f:7b:38:2e:5a:c9:8a:65:ee:cd:63:47:68:34:a3:3f:
93:5d:77:fc:0d:85:0a:49:40:a5:1a:4f:28:ee:a0:7a:83:7f:
97:ac:be:5f:ed:68:4c:e2:63:ef:cb:a4:85:97:53:cb:e4:f6:
c3:b8:a3:06:b3:d8:71:a9:d5:3a:1f:72:a5:96:34:b9:60:3f:
3f:61:9a:59:86:6b:86:4f:b3:8b:8c:41:ac:0e:b8:14:74:f0:
4e:c5:f5:51:4b:1b:4b:af:e8:52:cc:ee:fa:20:1f:47:e9:e8:
d3:12:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:54 2026 by rpki-client