Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: 0hcz7IJ1Lallj5HwE9vZ2xyL9nUiq56cayzdsdhMGjY=
Subject key identifier: F6:AA:CC:A5:C9:8D:9E:B0:A0:46:14:44:43:99:35:F9:38:9F:25:41
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 01A0DDCE8E505D60997E59C70A493F38BC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1A7B
Signing time: Sat 26 Sep 2026 13:01:36 +0000
Manifest this update: Sat 26 Sep 2026 13:01:36 +0000
Manifest next update: Sun 27 Sep 2026 13:01:36 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: GB2uCzqSCGbMB6XRr98II9AQte+CyzmpHyA2TT3U/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:8e:50:5d:60:99:7e:59:c7:0a:49:3f:38:bc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Sep 26 13:01:36 2026 GMT
Not After : Sep 27 13:01:36 2026 GMT
Subject: CN=f6aacca5c98d9eb0a0461444439935f9389f2541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:08:b9:78:fa:fc:a1:62:7c:90:6e:99:87:
55:de:53:2b:dd:92:3b:9f:fb:2e:81:6f:27:c2:90:
ee:11:13:b7:cc:49:29:a4:9b:44:5f:20:e6:3d:ac:
e8:d3:a9:a4:e6:6f:68:ec:85:8c:62:b2:36:5b:d9:
c2:5a:45:0e:1f:78:b9:ae:a4:9f:fb:87:65:03:58:
f2:63:07:d7:9a:85:d8:f1:1b:76:8a:d1:a2:16:0c:
00:f4:dc:be:68:a4:05:45:e5:6a:e2:b3:01:51:5e:
63:42:3b:58:35:cd:eb:01:cc:f4:d2:1a:52:fc:a6:
2a:15:8e:b3:fc:47:f9:4d:10:ec:a4:27:81:6f:8e:
bc:8c:9d:14:39:4d:01:e1:5c:1e:0a:f2:c4:da:af:
d1:d0:e8:a8:35:95:d9:73:de:5d:63:fe:60:7a:61:
11:26:ac:3d:aa:90:de:a5:47:80:20:2d:7c:aa:91:
bf:d3:fb:fb:ec:1f:63:a0:8c:a0:a6:60:30:97:2d:
ee:b6:f2:21:08:76:2a:34:ab:88:c2:28:3b:7d:09:
18:33:76:83:93:74:f5:5f:2f:7a:8e:68:8f:c9:1f:
b6:f1:b4:95:46:f3:bf:e9:22:32:f8:6b:4a:9d:ac:
01:3f:b6:75:95:21:0c:b7:d5:ec:14:76:98:77:3c:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:CC:A5:C9:8D:9E:B0:A0:46:14:44:43:99:35:F9:38:9F:25:41
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:61:0b:3b:07:cc:ba:68:40:75:df:1e:3b:5b:7b:aa:3b:ef:
ff:6a:87:a3:e0:e6:d8:4a:8f:b4:9e:f9:77:ee:c5:b6:bd:50:
01:42:69:0e:67:70:2b:fa:bd:d1:86:dc:81:ac:54:9b:08:50:
e5:e8:3e:d4:30:89:f3:3c:6d:89:be:4b:b9:2b:20:fc:bc:04:
dd:88:3d:1f:cb:ba:ae:94:14:58:ab:9c:4f:55:fe:70:a8:9d:
a0:9a:86:dc:07:39:96:a9:35:aa:70:0b:a9:fe:a8:32:aa:55:
1a:62:51:14:af:0d:2c:ae:96:d6:bc:d9:ef:5f:10:85:3a:3b:
34:6b:2a:ae:cb:36:f6:0e:2b:47:52:de:b6:a3:18:53:39:80:
d2:c9:5b:89:16:27:36:ac:42:7e:b7:e3:dd:c0:35:13:09:b1:
0c:15:9b:6c:91:1c:e6:7c:af:46:05:c8:ec:12:c0:dd:ec:b8:
0c:79:58:9c:49:fd:b4:7b:d5:03:a2:b7:f0:1e:e3:03:e4:f9:
df:6a:f7:c3:e0:5b:16:e3:85:45:e1:16:75:d1:92:87:6f:ea:
e2:36:c8:a3:d7:fb:45:10:4c:cb:19:9e:48:14:62:46:91:1e:
04:b5:d0:c5:27:bd:f2:eb:55:89:ef:71:81:e4:89:d2:d3:45:
aa:2f:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:16:00 2026 by rpki-client