Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: 6apccwxl52ZoXAgxCfUK7UeJ/X6lhXd4B/d4D+LeYPU=
Subject key identifier: D5:D6:26:84:88:A5:C2:B8:A0:97:78:26:E9:2C:93:82:54:1C:48:09
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 019D273ABDF79CA66A1CDF6A0F4C9B5CD8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0E10
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: 7uZhbFIPYU/z92MpJ1DmSyXzP54B+PufJC/lG6n+lbs=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bd:f7:9c:a6:6a:1c:df:6a:0f:4c:9b:5c:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=d5d6268488a5c2b8a0977826e92c9382541c4809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:64:c5:18:79:54:18:40:c8:56:42:77:cb:
e1:9d:01:b7:2f:85:6c:56:ff:52:df:5d:a0:a1:8e:
91:b0:ca:62:a2:26:7c:96:d9:ef:3b:85:33:c9:f3:
68:e4:c1:e5:33:55:5f:6e:8a:c4:29:33:51:c2:e3:
49:59:53:35:1d:ca:52:0e:50:dd:06:5f:ca:ce:68:
f6:fd:ce:99:6c:2c:b9:9c:f0:30:b7:0e:06:66:03:
36:1b:64:49:91:b2:e4:d0:48:c5:cc:4f:aa:0f:aa:
8a:4e:64:a9:00:56:ab:0e:f7:f6:bf:d5:9c:b3:8a:
1b:96:97:b7:16:79:d7:71:ca:d3:de:65:01:3d:b1:
ca:72:61:00:68:73:4c:c0:a9:3b:dd:a3:a7:54:7c:
50:c4:c0:0a:81:34:31:f1:9f:03:1d:69:7d:a9:48:
a1:af:f6:0b:53:3e:ef:13:03:82:3b:e0:22:50:54:
f8:00:75:be:54:3a:3c:e4:39:69:d4:4f:92:3f:78:
3f:1c:80:1e:f8:d6:69:ae:16:5c:c6:c7:74:9a:0c:
af:84:1f:98:ce:4d:75:29:72:3c:1a:34:a3:44:af:
b7:c1:cf:9e:90:d3:10:73:b0:23:02:8f:90:8d:69:
60:36:fb:80:57:2d:97:6d:ff:86:2f:3b:46:39:7c:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:26:84:88:A5:C2:B8:A0:97:78:26:E9:2C:93:82:54:1C:48:09
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:1e:96:be:b6:88:fd:b8:0e:20:76:2f:92:d4:38:c1:19:
e7:7a:f2:d0:73:7d:4b:f8:78:aa:66:da:fe:02:17:aa:9c:71:
1e:cd:6e:3d:51:07:7c:a7:fa:e3:cf:60:48:1b:dd:31:2f:fa:
c1:5f:9e:ce:4f:db:06:f2:6c:a9:c6:10:b0:38:40:6d:ba:1d:
c5:49:91:38:9a:93:5a:2d:e8:03:cb:ff:5e:eb:31:e7:1e:eb:
aa:cf:8f:d8:02:94:b1:6d:7b:3d:62:93:26:4d:92:8a:75:bd:
e5:0e:39:1d:67:ac:63:59:16:ef:38:80:75:b4:d3:53:30:c8:
9e:ec:c3:75:19:06:95:d9:66:d0:14:0b:60:d2:06:e2:32:b9:
cd:1f:16:fb:87:b1:fc:04:50:9f:21:59:d4:8d:6f:05:01:b7:
c5:9c:e5:38:19:e3:74:c5:e4:08:f9:27:fd:be:7e:ba:23:eb:
e3:69:18:64:f0:07:0f:9b:34:f3:61:18:d9:ce:a2:43:34:6a:
48:d0:d3:e5:ea:b7:53:fa:c1:ce:c1:9e:17:30:37:ad:fa:21:
dd:1b:a8:84:9e:78:73:59:bf:ce:66:d6:b9:17:1e:a7:3e:ed:
10:23:eb:2c:cc:f4:9d:da:88:9c:2b:7d:2e:15:6d:8b:c9:65:
a2:da:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:53 2026 by rpki-client