Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: kyMdJRONLgDnjsQmTlV7/Pwku/lFX8SlKEKAoDKa1ZY=
Subject key identifier: 79:98:79:90:B2:45:71:5C:1B:D6:46:F9:75:78:1D:DF:7D:3B:97:2C
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019EBEB6535A96A235E41E03CCB89E822ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0EE3
Signing time: Sat 13 Jun 2026 02:01:20 +0000
Manifest this update: Sat 13 Jun 2026 02:01:20 +0000
Manifest next update: Sun 14 Jun 2026 02:01:20 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: Xgx74dgPKxshg8RN6IDOE+FU27QH8MLVrIi2v4TZqec=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:53:5a:96:a2:35:e4:1e:03:cc:b8:9e:82:2e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jun 13 02:01:20 2026 GMT
Not After : Jun 14 02:01:20 2026 GMT
Subject: CN=79987990b245715c1bd646f975781ddf7d3b972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:0c:bd:fb:81:33:60:39:72:d3:cd:f9:56:
e1:49:00:9d:b1:e9:a8:23:16:82:75:c1:2d:4c:84:
01:b9:79:90:bf:51:88:fe:af:8d:4e:57:14:28:47:
7f:90:cb:75:07:cc:b9:4e:38:4b:b2:01:09:65:cf:
24:89:ca:47:9c:dd:3a:f6:15:ce:63:38:42:08:f8:
7c:a6:b9:68:c0:92:3d:68:01:94:b0:f3:89:a9:be:
7e:3b:18:ad:37:d1:da:ab:16:bb:13:36:86:d7:c8:
0d:ba:6f:5b:f9:58:2a:93:c3:61:5a:8d:fb:86:ff:
27:7f:4e:13:79:9b:10:3f:a2:d8:7e:37:93:58:95:
2d:92:6b:fe:61:9b:e5:7b:e9:55:c9:f5:21:eb:27:
b2:5a:67:11:1b:fa:85:57:cd:45:29:47:52:28:c1:
d5:79:d1:93:43:68:7c:e5:ce:1a:b6:29:e3:4f:c8:
c8:c1:96:3b:d4:98:0d:87:21:0c:42:06:03:ee:9a:
2a:a6:4e:a7:fc:38:4d:1f:ac:71:97:63:fa:68:c5:
da:4c:b1:4b:2d:38:55:2d:e7:1e:ee:22:e3:11:ea:
9c:14:0a:ae:13:2b:ee:ec:58:c6:16:68:cd:51:40:
39:3b:7b:65:ea:c0:3d:15:b7:21:aa:2a:84:87:34:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:79:90:B2:45:71:5C:1B:D6:46:F9:75:78:1D:DF:7D:3B:97:2C
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:c6:05:0d:ab:54:10:6b:4c:4e:db:9a:34:bd:4a:32:36:
1a:84:f5:75:22:66:5d:c1:bd:d0:08:bd:c4:e9:34:7a:49:08:
87:92:f2:e1:8c:53:c4:64:d2:69:aa:1c:e5:e9:36:d6:e5:60:
35:3c:d2:cb:77:1f:cf:a9:a8:fd:63:08:8d:81:69:3c:1a:35:
7b:e7:31:5b:22:9c:31:5e:8e:ed:eb:70:01:57:33:30:ff:07:
06:ce:e2:ce:46:9c:1d:a3:1b:59:12:37:ac:57:54:26:84:02:
05:4c:6e:f0:a7:62:fa:79:e8:ca:44:a3:87:a6:57:f8:1c:4d:
a4:4d:72:44:cd:b5:5d:ef:cd:53:a8:44:fd:80:f0:64:e3:12:
c0:c9:7e:ee:4d:fd:9b:5e:00:fd:80:e7:29:c7:2a:e5:3b:69:
c3:f3:7c:c9:b8:43:37:c5:6c:5a:63:30:b8:a6:3f:bd:73:76:
b6:0d:ba:35:d0:a8:46:21:64:8d:a2:bc:cb:d9:a4:25:22:a2:
96:ba:3f:11:11:85:d6:d9:41:3e:17:20:6d:99:96:70:43:29:
a5:55:82:b1:22:9e:16:0d:4b:bb:d1:48:49:03:04:b1:0c:89:
7f:33:4e:e6:eb:30:35:4b:d3:55:cc:70:a0:d3:72:72:23:5f:
dd:8b:ee:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tlNalqI15B4DzLiegi7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1
ODM3MWUwHhcNMjYwNjEzMDIwMTIwWhcNMjYwNjE0MDIwMTIwWjAzMTEwLwYDVQQD
Eyg3OTk4Nzk5MGIyNDU3MTVjMWJkNjQ2Zjk3NTc4MWRkZjdkM2I5NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsgMvfuBM2A5ctPN+VbhSQCdsemo
IxaCdcEtTIQBuXmQv1GI/q+NTlcUKEd/kMt1B8y5TjhLsgEJZc8kicpHnN069hXO
YzhCCPh8prlowJI9aAGUsPOJqb5+OxitN9Haqxa7EzaG18gNum9b+Vgqk8NhWo37
hv8nf04TeZsQP6LYfjeTWJUtkmv+YZvle+lVyfUh6yeyWmcRG/qFV81FKUdSKMHV
edGTQ2h85c4atinjT8jIwZY71JgNhyEMQgYD7poqpk6n/DhNH6xxl2P6aMXaTLFL
LThVLece7iLjEeqcFAquEyvu7FjGFmjNUUA5O3tl6sA9FbchqiqEhzR0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmYeZCyRXFcG9ZG+XV4Hd99O5csMB8GA1UdIwQY
MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt
MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5
LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6fGBQ2r
VBBrTE7bmjS9SjI2GoT1dSJmXcG90Ai9xOk0ekkIh5Ly4YxTxGTSaaoc5ek21uVg
NTzSy3cfz6mo/WMIjYFpPBo1e+cxWyKcMV6O7etwAVczMP8HBs7izkacHaMbWRI3
rFdUJoQCBUxu8Kdi+nnoykSjh6ZX+BxNpE1yRM21Xe/NU6hE/YDwZOMSwMl+7k39
m14A/YDnKccq5Ttpw/N8ybhDN8VsWmMwuKY/vXN2tg26NdCoRiFkjaK8y9mkJSKi
lro/ERGF1tlBPhcgbZmWcEMppVWCsSKeFg1Lu9FISQMEsQyJfzNO5uswNUvTVcxw
oNNyciNf3Yvuqw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:05:32 2026 by rpki-client