Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: DT35IS007KWAoOOYanTLhPjtv4RXlFX4bEh2TNRtgwg=
Subject key identifier: 75:23:B2:CB:CF:42:C3:55:62:E9:7C:A1:03:70:4D:93:2A:CD:2D:05
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019CA9B36F89056634EE51CE21BB757D9970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0DCF
Signing time: Sun 01 Mar 2026 14:00:34 +0000
Manifest this update: Sun 01 Mar 2026 14:00:34 +0000
Manifest next update: Mon 02 Mar 2026 14:00:34 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: tauyLBwI8RyR5IcgavGrIQIDWz8AJkzBMQDtc3UiBUg=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:6f:89:05:66:34:ee:51:ce:21:bb:75:7d:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Mar 1 14:00:34 2026 GMT
Not After : Mar 2 14:00:34 2026 GMT
Subject: CN=7523b2cbcf42c35562e97ca103704d932acd2d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:31:bb:2f:08:c0:9b:8b:53:cf:ff:8c:3e:
73:3a:5e:6b:47:58:4a:09:1c:60:0f:78:af:75:f0:
2b:75:3c:61:39:01:a0:99:6f:9f:10:c1:85:e0:e7:
3c:91:29:99:f5:32:bb:4e:b5:52:63:fb:dc:5e:9d:
0f:eb:48:20:4d:24:db:fb:6d:22:86:34:f8:9c:98:
62:4f:fd:1f:6f:c0:6b:4b:71:5b:30:7f:aa:b1:ab:
ec:20:2a:f7:52:22:ff:c3:56:4c:dc:a5:3b:d0:26:
11:26:6c:66:95:c2:0a:06:8f:7e:1c:00:96:54:db:
e6:60:d6:0a:de:82:4b:47:b5:5e:71:d1:dc:b1:e7:
67:40:3b:bd:e7:b4:6b:ff:e7:27:1f:27:c4:63:56:
a9:e4:16:6e:29:d1:54:79:03:97:83:34:38:5f:10:
fd:0d:18:8e:fb:27:17:7e:c8:07:f0:63:6e:1b:48:
fc:3e:26:52:a3:51:1a:dc:56:1e:b4:a3:b7:89:4b:
12:ba:0d:ce:1e:3d:de:72:3f:a6:fa:16:02:c0:f7:
61:48:4e:6e:0e:c7:c5:e7:9c:e1:0c:d5:b0:05:c1:
bb:38:d4:f9:06:7e:79:6c:44:4b:a8:3c:eb:1e:00:
72:10:08:38:d5:52:d1:66:04:6a:fb:7c:d4:bf:54:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:23:B2:CB:CF:42:C3:55:62:E9:7C:A1:03:70:4D:93:2A:CD:2D:05
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c9:74:f5:1b:fc:84:67:61:c8:4d:f8:ee:c2:f2:2a:30:93:
cb:4b:75:2f:58:ae:fa:c7:f3:fb:af:66:f3:9e:57:80:13:7f:
cd:ef:6d:1d:f2:ec:71:98:5d:43:41:95:96:dc:d8:36:07:a2:
75:de:77:a4:67:68:21:1b:4d:f1:8e:fb:61:65:2e:fe:c7:6d:
97:45:56:6b:5d:36:22:2b:c1:ab:85:f3:a9:bc:fd:a6:3d:7d:
9b:fe:7a:f5:11:4d:ce:f8:d0:80:98:c5:7e:9b:81:5d:ed:fd:
49:05:5e:e2:b2:61:a3:f2:3b:73:d9:d0:07:9d:cf:3e:10:b8:
ee:64:f0:17:16:3b:5f:b2:4b:53:98:94:44:71:40:7c:37:bd:
57:23:df:eb:e9:cb:ad:a0:9d:63:96:26:08:97:ca:c6:c7:39:
9d:f3:49:0f:36:c4:72:99:35:a8:4c:d7:2e:62:a0:9a:15:94:
f4:54:d5:1f:6b:83:0d:8d:e1:5a:dd:55:70:a4:10:e6:3a:67:
28:c2:8d:8f:a5:3e:96:a9:7f:e4:e2:90:9a:d7:25:ac:dd:d0:
fe:83:cf:79:90:20:16:70:e0:10:10:31:3f:99:ec:c3:00:52:
79:a3:15:f2:76:91:db:63:a5:56:e1:52:80:4b:9c:1e:76:69:
51:6b:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:35 2026 by rpki-client