Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: zDL5hOKBP6OYwE1kPObKgOv8D77w++fy3Fgipj2i9Uc=
Subject key identifier: 7D:3B:B7:6C:9F:E3:3B:52:E2:2A:8D:4D:7E:5B:32:99:11:EF:DC:1D
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019E1E6CB07995E33574D823ABD7D7DDC7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0E90
Signing time: Tue 12 May 2026 23:01:39 +0000
Manifest this update: Tue 12 May 2026 23:01:39 +0000
Manifest next update: Wed 13 May 2026 23:01:39 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: zYfXQHgbpDsgybfNtaYyGm6Cg26xPbtDUjyXEeSn+sg=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b0:79:95:e3:35:74:d8:23:ab:d7:d7:dd:c7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: May 12 23:01:39 2026 GMT
Not After : May 13 23:01:39 2026 GMT
Subject: CN=7d3bb76c9fe33b52e22a8d4d7e5b329911efdc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:a1:f5:ab:de:fe:a0:9b:03:cb:79:08:d9:
8a:cc:b7:6f:af:91:e8:cb:7a:09:ef:bb:d9:fe:83:
70:71:79:55:58:a4:69:fa:9b:63:3e:ef:d9:61:08:
4d:75:8e:0e:7b:ea:0c:06:f3:4e:22:51:46:8c:62:
66:4f:a7:ac:8c:ed:fb:16:b5:32:b9:39:fe:fe:d3:
ba:29:78:ed:56:84:d2:ad:b8:b9:4d:48:90:1a:1b:
24:58:f1:ad:de:1e:38:48:de:10:72:55:9d:0e:59:
9c:87:21:44:b3:29:ca:9f:53:60:21:bb:89:5c:3d:
13:2b:34:a5:76:5d:2a:b4:c6:85:2c:a4:d5:65:41:
71:56:16:50:d4:f6:ac:b6:5d:9d:2f:f5:3b:65:30:
7a:48:81:da:c9:d2:26:2a:c8:8a:df:14:90:75:df:
39:7a:f2:de:bb:fc:70:d2:f7:37:22:58:dd:36:fb:
a6:6b:62:30:66:2e:06:d4:b8:a0:45:21:13:df:95:
34:ce:17:73:81:77:50:ca:e0:6f:fc:eb:1a:ec:86:
69:35:fe:a3:51:ac:ea:b2:fd:66:4e:5c:22:4e:ca:
0a:3a:e1:61:24:c7:3b:5d:a5:2a:47:61:27:cb:5d:
22:43:ea:55:9c:09:e0:1f:0f:32:3f:36:6c:a1:3b:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:B7:6C:9F:E3:3B:52:E2:2A:8D:4D:7E:5B:32:99:11:EF:DC:1D
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:a6:7f:f4:23:0c:da:20:01:56:fe:ec:4a:74:2b:73:ac:
d9:7c:63:0e:f7:ee:1e:20:0a:c8:91:95:d8:eb:6f:51:dc:6a:
3a:c7:30:1b:9f:56:97:c7:d5:97:6d:44:4c:63:a7:88:ee:1f:
55:27:08:ae:a3:e1:1a:5c:d9:2c:b8:d5:59:9c:a2:80:04:82:
a0:0f:db:01:a2:6f:94:b7:4e:dd:5d:67:f5:f2:ba:8d:7f:bd:
8b:f3:6f:46:c8:10:13:67:d1:43:b2:ea:91:ff:16:5a:e7:06:
ca:dd:41:2e:94:5f:3d:2d:0b:7e:ea:80:8f:c9:2f:b9:cd:d9:
84:4d:f8:98:9e:37:84:48:8b:f4:65:e5:33:59:39:85:4e:e5:
8e:e6:a7:1d:67:64:37:a5:7a:a7:b6:14:22:54:69:eb:0e:27:
38:c9:d8:cd:f6:22:10:28:8f:75:81:40:c4:95:69:0c:c8:e1:
d4:57:d9:9e:2b:ec:a1:c4:5a:59:8e:06:84:11:08:8f:be:5e:
80:c3:58:6b:61:98:17:5e:bc:62:a0:47:b3:19:1a:ad:20:66:
d3:b1:d1:20:47:1b:cf:46:ea:ce:b3:a1:f3:e2:6c:8b:2b:63:
ad:e9:07:c8:c0:1b:e2:11:32:50:7d:93:55:4d:8d:8c:0a:e6:
a6:28:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:14 2026 by rpki-client