Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: PSQyIYZrxs95eEZHbF//REn8WsfCOyn27Ts/RG7V+5Q=
Subject key identifier: 1A:66:42:19:8C:C8:9A:EA:DD:18:7D:83:19:8F:37:DD:CC:04:62:8F
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019D27A8C81300EAA211DB3E5221A52CFE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: 9YGtNd09M3YHd+qNLgZlOvbQ7qpMPf8tFhjB93yXBUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c8:13:00:ea:a2:11:db:3e:52:21:a5:2c:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=1a6642198cc89aeadd187d83198f37ddcc04628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:57:b5:da:b0:28:74:8f:77:b6:a5:83:ae:
fa:5a:00:d9:58:0b:b6:70:0c:c4:b1:44:c4:12:5b:
b5:95:15:5f:93:3b:ac:b1:09:65:56:db:6c:1f:f7:
6c:74:e3:62:0a:71:1b:5c:6b:fb:24:28:da:12:ed:
f0:31:61:69:60:a0:1e:99:b8:02:c7:37:ca:7c:cb:
8c:6c:42:fd:54:66:df:00:5c:83:6f:a4:4d:7f:d0:
4a:43:17:30:96:33:af:8b:02:0b:7e:69:d3:71:02:
45:d1:6a:da:ff:07:2a:d6:9e:14:66:05:da:f4:60:
f9:fd:ac:01:e3:b0:18:7d:4d:e0:37:f0:15:b7:0e:
2c:f7:05:17:fa:79:7f:de:d4:35:eb:f9:84:4c:53:
34:a0:2a:96:f6:15:71:09:e2:e1:bc:c6:82:a9:bd:
15:b4:ca:d7:60:c1:24:6e:cd:a5:d8:30:27:9e:7d:
be:00:21:d9:68:79:4d:1c:79:0a:06:2a:77:b1:e3:
76:dc:c4:c0:c3:44:87:55:15:0c:75:a6:67:be:73:
db:0a:26:cf:b1:a8:41:88:97:1d:d9:3c:9c:19:a2:
01:f8:2f:e0:76:02:1b:9f:da:bb:42:dd:4a:3b:91:
ed:a5:1d:f2:78:b9:07:9d:4c:21:9f:ea:92:a7:05:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:66:42:19:8C:C8:9A:EA:DD:18:7D:83:19:8F:37:DD:CC:04:62:8F
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:ac:27:89:47:d5:c9:65:49:95:be:12:86:41:1b:e4:6b:
ba:d1:9c:85:0a:3d:c6:be:64:44:84:fc:fa:90:f1:84:3b:d1:
4e:0a:a1:3c:2f:60:d3:5b:b4:6a:96:e5:0e:2a:38:eb:e0:2c:
19:91:81:c1:83:e1:8b:c8:ad:ba:5b:87:79:2d:68:3c:ca:29:
3e:4a:c2:b3:6c:2e:2e:c7:a5:57:e6:39:42:a9:5e:a6:31:61:
a9:d6:8f:39:6e:05:aa:05:36:e3:7d:e3:49:8d:68:9d:d1:94:
6b:ca:40:e3:4c:cd:7f:5e:4e:f9:32:32:05:14:a8:27:3c:d4:
53:65:d7:89:fb:68:3c:49:e1:a5:43:8f:2c:d4:5b:b1:bd:f3:
56:71:a2:60:79:69:ff:83:ca:4c:db:96:e2:50:4f:cd:79:a7:
6f:45:66:2a:f7:6b:f2:63:96:a4:67:72:e3:94:fe:a0:7d:7d:
fe:e8:9e:ee:eb:b1:fd:b4:4c:3e:f5:19:68:dd:b6:90:1b:91:
84:3a:34:3e:ef:5a:36:4b:51:41:4c:dc:93:a0:8f:03:9b:ca:
f1:4f:9e:04:a9:50:7f:2b:ac:95:a8:42:0f:6f:b1:16:de:92:
8e:50:79:7d:69:b1:b2:41:63:fe:7e:8e:82:9c:ce:e0:04:70:
48:f6:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:07 2026 by rpki-client