Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: Fe78ztjLk1tTp4zeng8Ciz284DqRAb5RfnpWIhTaXYg=
Subject key identifier: BA:58:00:50:28:AA:D2:51:D8:81:AF:EA:48:27:A3:88:7A:64:DD:86
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01A0D79688856511A6BE4383DB3F127FC68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0FF9
Signing time: Fri 25 Sep 2026 08:02:41 +0000
Manifest this update: Fri 25 Sep 2026 08:02:41 +0000
Manifest next update: Sat 26 Sep 2026 08:02:41 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: QkIGrNIRoYlyXwcjOAjaVJZHI9xk1U10FsHp7GK2Bog=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:88:85:65:11:a6:be:43:83:db:3f:12:7f:c6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Sep 25 08:02:41 2026 GMT
Not After : Sep 26 08:02:41 2026 GMT
Subject: CN=ba58005028aad251d881afea4827a3887a64dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:57:88:1e:06:82:f2:7a:08:93:ef:95:9b:
54:38:80:d6:23:9e:3b:d6:18:f8:8b:24:00:cc:90:
bb:2d:1e:3a:a3:60:9a:86:b1:36:99:24:14:47:9b:
e3:2e:9f:ec:8c:b0:76:21:47:a1:3e:38:35:01:09:
ab:df:cb:e2:a8:29:85:44:0b:91:9c:ee:4c:7e:2a:
91:ae:46:30:f8:67:33:6d:6e:24:dd:a2:18:b4:84:
da:81:b2:b4:40:86:ba:05:05:8a:2f:17:a7:c4:1b:
76:98:ec:01:53:04:9c:cb:8d:72:9b:17:4c:95:a4:
b8:c2:4f:6a:cf:e9:f6:f1:47:13:7b:5f:0e:77:68:
27:f0:82:92:6f:bc:11:59:75:3e:cb:ee:a4:1d:4e:
75:72:cd:26:e5:09:ac:1e:a3:85:77:aa:37:6b:ad:
6e:d9:fc:39:a9:1a:1b:e8:03:7d:bd:de:cf:91:75:
00:ef:01:a5:ac:d5:41:19:58:c0:4e:e8:f4:4e:a5:
f5:eb:6c:cc:3d:67:20:96:ae:93:64:0c:b2:2e:e4:
0d:3d:93:d2:19:08:b7:86:f9:9c:d5:67:52:75:3a:
5f:f7:51:28:d2:78:87:41:e9:43:78:10:07:db:9f:
c0:d8:a6:f3:ca:bf:6c:e0:f6:26:f5:40:6f:80:60:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:00:50:28:AA:D2:51:D8:81:AF:EA:48:27:A3:88:7A:64:DD:86
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b4:a9:08:61:b6:10:6d:71:27:c9:99:88:d2:28:58:56:0c:
16:ac:9a:ec:b3:10:76:c1:fb:10:cd:3c:5e:81:83:5e:fa:2f:
28:a3:89:03:d7:23:46:3f:f3:2b:44:13:8e:76:39:21:16:ed:
c5:5f:da:85:48:e8:e0:29:30:6d:a8:28:44:f1:bd:c9:dd:68:
4e:eb:6d:1b:f6:54:52:a1:6a:d2:6a:b6:5e:f2:62:7b:5f:1a:
e3:be:2d:16:cb:95:c5:59:66:67:26:af:9f:5f:90:bf:4c:6e:
13:60:80:bf:2d:6f:b1:50:68:bd:14:d4:e6:22:cd:e5:fa:ff:
1d:bb:7e:4a:e2:74:4c:ca:c8:45:b2:c7:06:78:0e:22:e2:c7:
53:39:37:84:7c:47:97:6d:1f:a3:f5:3c:2e:99:0a:f5:6d:06:
e5:c2:45:74:a1:fd:bd:76:8b:77:c7:0f:4a:60:c1:64:38:f6:
38:d7:5b:2e:fb:36:c7:cf:58:18:11:4e:b0:cb:54:41:24:6f:
f6:96:b3:e9:e4:70:d7:58:55:c6:bd:75:2e:c0:92:4e:75:7b:
f7:26:14:68:e7:e7:6f:97:fd:4c:53:12:f0:4d:ba:09:84:f8:
c5:94:94:24:c0:ad:67:67:ea:9e:76:e2:01:16:fb:41:87:15:
ac:97:6f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:22:35 2026 by rpki-client