Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: PgZM4+swNqrOAXn96ETppZ9lrCmq7EAjsi1gkEVEnSE=
Subject key identifier: FA:15:11:89:B1:6B:DC:59:E4:78:E4:93:C4:E1:DF:03:E6:DE:71:A4
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01A0BE79CC38DE844A5BD5CD82EC7A3435F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0FEC
Signing time: Sun 20 Sep 2026 11:00:48 +0000
Manifest this update: Sun 20 Sep 2026 11:00:48 +0000
Manifest next update: Mon 21 Sep 2026 11:00:48 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: G/JtHixG7RBF2MhceUIVQYAMsj3JtjmlwnQ0C8Z44Hg=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:cc:38:de:84:4a:5b:d5:cd:82:ec:7a:34:35:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Sep 20 11:00:48 2026 GMT
Not After : Sep 21 11:00:48 2026 GMT
Subject: CN=fa151189b16bdc59e478e493c4e1df03e6de71a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:38:bc:6d:52:61:8c:23:0d:66:67:d6:22:
fa:86:aa:b6:03:e0:e6:32:76:d4:67:46:6a:97:6d:
37:1d:5a:71:3d:55:e1:e0:23:5e:7c:ed:54:5d:26:
95:6d:63:bf:f5:e8:16:e5:35:93:08:b1:20:77:93:
23:21:ca:24:f3:b5:84:32:8e:2b:4c:3d:f9:dd:10:
5c:76:5f:f9:a2:5f:82:3a:a6:a5:ef:73:57:37:b8:
f7:f1:9b:2d:f1:2b:f5:6b:65:47:5c:29:c7:fd:0d:
8d:5a:d3:e2:64:9c:a8:cc:b2:03:25:90:25:d3:6f:
d6:a0:04:77:c8:df:19:87:02:3c:6e:24:d8:07:22:
78:c0:12:cd:5f:c7:91:f2:e3:78:77:46:b5:f2:ba:
83:4a:4c:0b:5c:88:65:92:ee:fb:94:bd:6e:8b:28:
23:d5:1f:7a:d7:c2:8f:c2:2f:9c:f9:75:6d:dd:90:
42:98:e5:dd:6b:d4:bd:87:2d:56:f6:e5:45:dc:1b:
4f:3a:8c:af:de:84:59:98:34:ff:f3:e8:6a:89:5d:
3f:7a:7d:ae:00:12:15:ee:9a:1c:46:34:fb:35:30:
40:9d:34:ae:be:15:e1:ae:42:66:74:40:6d:3d:47:
de:95:f5:ae:81:86:d7:ae:16:38:1a:df:fd:a7:63:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:11:89:B1:6B:DC:59:E4:78:E4:93:C4:E1:DF:03:E6:DE:71:A4
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:31:0c:f6:1d:4b:3f:97:02:1c:6b:b1:01:2d:34:80:2a:74:
82:70:59:66:4c:52:96:e4:5d:2e:32:bc:b0:35:84:de:9d:65:
d6:a9:a6:08:23:47:97:13:18:c0:bd:18:5d:2b:f6:2f:4f:e4:
ff:f0:73:e8:8b:e7:d7:88:67:29:bd:0f:eb:11:18:e4:b2:40:
b8:be:59:80:b8:00:f7:f9:3c:38:ad:3d:82:76:73:cd:ca:e4:
81:3c:c3:a2:6c:a3:37:2e:05:1a:0a:99:02:2e:fe:0b:71:82:
96:2f:7d:89:d3:18:3b:ae:38:82:55:81:28:a4:66:4f:58:3f:
87:f7:34:81:c7:fd:cc:b2:12:9f:4e:2b:19:10:a7:8c:20:f3:
c3:94:9b:06:51:a1:3f:8f:d1:be:54:c7:26:33:19:6e:37:8d:
c3:c1:f7:93:ca:51:58:e5:3f:d2:2b:e3:c5:d0:9a:52:a8:d8:
c5:6a:e5:d7:98:08:64:2d:af:9a:b1:ef:62:d3:f3:cb:4f:b0:
87:40:7f:00:4f:8e:c3:c6:86:6e:44:b9:6d:41:0f:d8:20:4a:
45:43:9c:b1:9a:cb:08:0e:23:d0:18:b7:4b:4a:45:73:94:41:
a5:aa:af:9e:fe:95:7e:28:88:1b:85:a6:2c:14:08:5a:69:d6:
21:45:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:53:36 2026 by rpki-client