Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: HTA3GBmFa/kuw2FOpkkY3QpgUd4avIq3Dl24n5aQel4=
Subject key identifier: 0D:DB:B7:EC:8C:8F:CA:24:F0:5D:C9:A1:31:39:F1:3F:AE:DC:DF:A0
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01A0201E45596BD12232C13FD0845F7DA45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0F9A
Signing time: Thu 20 Aug 2026 17:00:49 +0000
Manifest this update: Thu 20 Aug 2026 17:00:49 +0000
Manifest next update: Fri 21 Aug 2026 17:00:49 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: o49CsgZpkflQXerYkxWXAopKjaKDg3on73LcFuLD5Eg=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:45:59:6b:d1:22:32:c1:3f:d0:84:5f:7d:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Aug 20 17:00:49 2026 GMT
Not After : Aug 21 17:00:49 2026 GMT
Subject: CN=0ddbb7ec8c8fca24f05dc9a13139f13faedcdfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:64:f4:c2:22:24:23:38:2e:24:8e:ea:42:
34:af:37:25:d1:db:89:b7:51:a5:d5:62:f7:51:73:
b7:77:8e:29:c5:f4:b6:3e:c4:b2:88:1e:7d:44:64:
cc:36:e6:a5:6f:63:98:4d:e6:50:c2:b2:1e:ee:09:
16:af:c9:e4:01:3e:f1:77:1a:b8:b5:8d:64:c8:ec:
1a:4e:7b:fc:27:78:9b:b6:35:00:37:83:db:96:fd:
9d:c5:c2:8b:92:fa:7e:92:00:77:93:15:e4:8f:1c:
d5:c2:e9:c0:df:0b:5a:a5:24:64:29:89:57:61:a7:
b4:69:0b:12:cd:76:03:42:8a:ce:9b:95:f0:5a:d4:
59:55:53:8d:5f:55:9a:2b:86:e7:2e:09:cc:75:e3:
95:05:3f:5b:4d:11:57:7a:4c:a2:97:20:97:f6:d7:
23:62:3c:76:f3:c3:89:d3:db:05:68:77:ef:e3:78:
89:5c:40:64:ad:c9:39:22:f5:0f:9a:d2:8f:8f:15:
71:40:9e:eb:2c:1e:33:cf:f5:33:72:06:26:79:59:
42:ab:d9:90:35:66:64:73:e2:09:0f:50:75:09:d7:
9f:3f:c6:38:73:82:7c:69:e8:3e:55:50:b2:9c:70:
3e:31:3c:4f:ad:ab:03:66:4b:f8:0c:e8:29:84:2f:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:B7:EC:8C:8F:CA:24:F0:5D:C9:A1:31:39:F1:3F:AE:DC:DF:A0
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4d:f1:c4:bc:bd:da:53:8f:2d:a5:2c:28:41:b0:72:75:dc:
0a:fb:8d:e8:38:55:84:74:a8:36:c0:9c:36:c7:c5:32:9e:14:
be:ee:f1:98:31:f2:db:fc:33:e2:f6:15:30:ed:d8:71:5e:bf:
28:71:34:14:b4:08:48:3a:08:90:16:81:c7:75:7a:c9:c9:18:
b0:b5:8b:a6:4d:69:ed:45:7f:d6:b1:89:80:ba:ed:32:24:bc:
17:0a:b1:0e:f8:18:2e:63:9b:80:1f:5f:26:e9:6f:4d:c9:86:
4a:8d:92:fb:38:a4:35:e3:36:b9:ef:20:32:fb:bd:73:92:0e:
03:9c:1f:37:4c:25:3a:cd:c3:1e:be:8d:b9:cc:f9:b8:f6:5d:
93:5c:31:54:88:cb:9f:3c:5b:5f:96:7c:b9:e8:6f:2f:ef:c2:
9c:01:ba:ac:50:46:0c:e0:fb:84:cd:8a:c1:6b:df:db:1b:10:
9c:e0:11:dd:eb:0a:a1:20:1d:ab:a7:c4:78:d3:17:15:42:a7:
ea:53:6e:35:dd:b7:9f:75:06:36:f5:20:e9:62:0e:9c:35:e2:
cb:3c:67:ad:a1:f8:5a:f3:03:d2:53:57:5b:c3:34:e3:42:44:
02:ee:55:58:a3:f5:75:6d:62:73:bf:89:7a:7f:22:ea:40:0d:
2b:14:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:32:24 2026 by rpki-client