Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: eC2EQfUCaELkBsaUY1p7fXsfK4HUWwmGw7e9e1UtK0Q=
Subject key identifier: 66:E9:6C:2D:C0:32:04:63:58:56:BB:6B:70:91:38:C5:C3:44:3F:98
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019D992B024D8CA8E94274B438606E57A19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0E4B
Signing time: Fri 17 Apr 2026 02:00:25 +0000
Manifest this update: Fri 17 Apr 2026 02:00:25 +0000
Manifest next update: Sat 18 Apr 2026 02:00:25 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: g1FRvvfg9uOlBWWBuFeTfEqzDCeB82qmSBKpT2tDYdQ=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:02:4d:8c:a8:e9:42:74:b4:38:60:6e:57:a1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Apr 17 02:00:25 2026 GMT
Not After : Apr 18 02:00:25 2026 GMT
Subject: CN=66e96c2dc03204635856bb6b709138c5c3443f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:06:ca:5e:3c:c8:4c:d4:22:da:61:9f:42:
5c:a4:50:c2:ab:8f:6c:d2:3e:f9:81:d9:9a:54:34:
8c:44:b1:4a:5a:fe:99:f6:c9:b6:ff:b9:a2:7d:38:
83:a7:05:c4:c8:18:3d:78:4e:d4:85:fd:4c:3a:72:
21:eb:3d:36:87:1b:83:45:de:bf:ed:62:09:c8:fd:
be:b0:e2:cc:4a:14:a5:f4:2b:05:1c:d7:f9:41:66:
8f:56:6d:39:87:b0:1c:85:48:8c:a0:8c:48:5c:d5:
a4:ad:77:a9:74:d2:ca:2e:57:37:df:74:b4:37:96:
19:73:97:ba:fe:a1:bb:ac:ee:01:93:27:48:36:85:
fa:1e:90:ec:58:fd:77:1d:a4:87:73:24:95:82:91:
7e:69:61:0d:32:5c:8f:25:a6:95:5f:6e:ad:4e:17:
33:a1:fe:ab:d7:d0:48:47:ee:23:23:dd:b2:e0:3a:
50:20:04:9a:01:35:da:ef:06:a9:5c:3a:f4:b4:0c:
f5:b9:1a:67:7a:a6:5d:63:19:d7:6e:b7:0d:1c:fb:
06:93:e8:2f:4e:3a:fc:cf:de:4b:09:61:a7:ac:9e:
8a:f9:83:06:84:ed:b5:43:7a:25:b0:ba:e8:c3:a7:
76:ea:c5:2a:9b:35:fa:6d:2d:34:0b:f5:7c:e4:eb:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E9:6C:2D:C0:32:04:63:58:56:BB:6B:70:91:38:C5:C3:44:3F:98
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e1:bb:94:f2:08:70:2c:50:94:2b:51:ec:40:04:44:77:1d:
55:52:fb:2c:59:93:5b:aa:f4:80:47:46:16:73:67:1b:8f:25:
01:fa:31:a6:eb:09:ea:85:83:0c:1b:ba:fd:19:e0:0b:5d:20:
23:08:47:a8:bf:75:67:32:9d:60:c9:2a:d3:de:54:a5:ea:5b:
4d:1a:80:51:4c:0e:a9:69:d4:a1:a9:5c:7e:6e:0c:a0:7f:6f:
cf:d7:17:a3:df:58:aa:99:a9:e2:b9:59:03:2d:a2:c9:af:21:
ad:a1:99:19:ad:4a:74:53:cf:f4:fe:7b:c5:2c:32:69:3f:40:
96:d0:c5:3c:fa:c8:7f:a5:77:a2:83:c5:c6:1e:67:95:f4:a3:
ca:a6:7c:19:9c:1a:4e:63:71:f2:60:25:cd:7e:39:05:43:8f:
93:7f:8c:a8:c9:88:88:d3:ad:b7:ae:ba:bf:97:9c:4b:81:ec:
ab:fa:a9:c7:84:2a:2d:f4:02:d3:17:4b:ad:f7:e3:58:8a:47:
4e:41:f1:c0:53:99:bd:7c:05:0e:29:cc:6f:2c:73:55:6d:54:
e1:1a:48:ba:f1:f2:8c:e7:55:36:35:a6:05:5e:1d:78:d8:90:
ba:2c:bd:8c:e0:c8:2c:b7:22:06:d7:66:6e:c7:3e:f6:1d:49:
d0:f0:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:32 2026 by rpki-client