Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: oHpCBntJYcu9U+32mKHdqBXefBBYtmYPPkdBDmPWa9U=
Subject key identifier: 69:63:C8:80:4D:51:50:EA:0D:76:12:FC:99:98:F7:BC:49:26:3E:23
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 01A11184DD1FC904CF6FB74B40AC69E3379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 1017
Signing time: Tue 06 Oct 2026 14:01:22 +0000
Manifest this update: Tue 06 Oct 2026 14:01:22 +0000
Manifest next update: Wed 07 Oct 2026 14:01:22 +0000
Files and hashes: 1: GBkpxMzxrmyVPOC0jew5XJ8aWhY.roa (hash: 0vABW6RkwXsVeCWaOEjF8mfFrqV+hg0CI9slDlZi5Hs=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: +A+m/11w+KBIQ1QU5hZFy6XYwkFL81p785oZ5T7/fBU=)
3: xKJGESGTjFwwHaYD9v272aHamsA.roa (hash: fgbTfswP5/p+4NfMt/CDHRQt2/uUSdoKPJJSPF2ke2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:dd:1f:c9:04:cf:6f:b7:4b:40:ac:69:e3:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Oct 6 14:01:22 2026 GMT
Not After : Oct 7 14:01:22 2026 GMT
Subject: CN=6963c8804d5150ea0d7612fc9998f7bc49263e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:f8:33:2b:00:b8:9b:cb:8e:d7:54:34:67:
4a:6f:a6:69:b2:b0:b7:ec:69:8b:96:e9:2c:cd:83:
65:29:ee:b2:d9:b1:58:15:16:9c:d9:6b:b4:cb:c1:
a2:30:8c:74:44:c7:d9:ae:8c:f2:e4:57:c6:a7:24:
0c:07:e8:d4:fa:fc:c2:4d:a9:99:3b:d1:17:59:c3:
3a:3e:d3:74:a1:1d:9f:05:4a:bc:ff:75:be:39:09:
2d:3e:a6:5a:ea:6b:3c:59:c7:0d:06:2f:90:8a:d1:
85:4d:7e:0b:7f:62:49:35:5d:92:f6:a8:d4:0e:f4:
d3:7a:c6:5e:f1:7b:c8:07:61:58:7a:36:4c:d8:b0:
0a:af:e6:2f:f2:ff:52:0b:a7:57:83:dc:85:a7:2f:
94:30:50:61:f4:c5:b0:e6:7d:74:b6:88:3f:0e:61:
a7:8a:a8:0e:f7:d5:aa:51:9d:5d:93:82:cd:65:50:
18:0a:6a:36:15:10:39:f9:d8:66:1e:2b:22:dd:4f:
e5:c1:cd:44:bf:67:97:d3:a4:19:15:a3:c4:ce:fc:
e1:53:ed:83:c1:fb:4b:18:c7:cd:d0:c7:e3:a2:ee:
b9:3b:7f:6d:02:ee:18:65:be:c9:d0:e4:81:ac:ea:
41:bb:c4:60:61:00:23:38:a5:1f:f6:71:fa:ac:22:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:63:C8:80:4D:51:50:EA:0D:76:12:FC:99:98:F7:BC:49:26:3E:23
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d9:fc:e2:f8:19:00:52:3b:3a:df:6e:0b:fc:5d:f6:41:dc:
1c:b4:3b:3a:11:13:a1:d0:7d:f5:a8:21:98:e2:6e:00:a7:b2:
62:d3:f6:28:84:34:a2:4a:57:c7:65:49:f1:58:2e:ff:f4:55:
f3:50:f6:ae:d8:a5:86:14:91:38:80:75:7b:29:fb:57:a3:27:
a6:70:40:74:25:bf:12:df:38:55:9d:e4:b6:1e:ae:fd:ad:bf:
cf:b1:81:b2:1f:d6:e8:e3:c2:41:19:bb:7c:5c:cd:89:ec:31:
1e:cd:d4:85:31:64:2c:44:b6:f4:6f:89:55:d4:b1:a3:aa:9e:
e4:1c:22:58:18:8d:39:8e:23:fc:00:24:c9:4b:2f:97:98:6c:
49:7b:8b:fc:11:4c:55:8b:55:b1:12:12:59:d2:1e:6e:6f:d1:
cb:86:14:6f:05:6d:69:54:78:a7:cd:44:12:6c:41:2e:10:a5:
5e:6e:f2:e1:92:19:a9:ee:bd:95:c5:69:3a:d1:06:57:dd:73:
39:6b:d1:87:3d:31:2f:98:ea:50:07:a7:e5:40:b8:93:f0:6b:
a0:80:59:d5:b5:50:62:23:d5:56:29:de:8c:b1:97:5a:1e:ae:
d2:c5:87:fe:ba:96:2b:87:b3:5b:fc:8c:4d:ed:b3:8c:5e:62:
bf:77:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:51 2026 by rpki-client