Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: r2p3kdoORIt+QnsDQahUReEQSy5dURcfxP8lKVBsf0A=
Subject key identifier: 5F:AC:0D:49:69:69:BD:C5:FB:6F:E0:F7:EA:95:E8:4F:28:78:FD:65
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019F93918514568D8A2D4136015410C04725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 10:00:15 +0000
Manifest this update: Fri 24 Jul 2026 10:00:15 +0000
Manifest next update: Sat 25 Jul 2026 10:00:15 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: 6GOfFXVIERWsHDhAnflLCzb1LnIG0seLvRqFjX3iJ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:85:14:56:8d:8a:2d:41:36:01:54:10:c0:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jul 24 10:00:15 2026 GMT
Not After : Jul 25 10:00:15 2026 GMT
Subject: CN=5fac0d496969bdc5fb6fe0f7ea95e84f2878fd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:8c:5a:77:ae:ac:07:57:f9:7c:14:a1:bc:
3d:d5:8b:27:b3:a8:24:d0:50:e2:01:61:ad:b8:2f:
f1:ea:5e:3b:30:e5:3b:21:e0:36:b7:b4:15:26:bc:
06:04:1e:80:4c:27:21:14:d1:d0:f8:d0:a6:29:e9:
81:c4:8d:07:ea:a8:50:1b:27:11:03:d2:25:df:cc:
be:62:64:e6:d5:a1:87:a2:ae:da:70:b3:45:86:4e:
98:e1:91:73:0a:93:58:72:88:e8:6d:18:da:34:4d:
0c:6c:bb:70:54:8d:28:14:a9:1e:eb:d0:86:76:fa:
a5:0d:87:62:3c:6f:80:18:02:2a:49:c9:14:0e:c4:
b0:cf:d8:ed:01:d2:e9:da:3a:0a:86:52:81:d5:2f:
5b:eb:5e:e5:ff:26:b3:56:63:7d:25:ba:57:de:26:
17:c5:24:a7:41:29:ee:d3:a5:ed:2c:5a:4d:4d:81:
d3:28:58:c2:65:ef:51:3e:f4:5b:30:05:d8:30:f4:
ca:1c:4a:87:21:97:27:d3:c8:65:8f:97:39:0e:cb:
69:aa:b4:2c:1d:e9:88:5f:e1:38:82:6d:7b:1d:43:
2a:49:78:c9:86:46:1b:58:e6:b2:a6:36:a9:93:c0:
5f:0d:d9:54:ad:31:e6:3e:85:e0:05:ba:33:f8:85:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:0D:49:69:69:BD:C5:FB:6F:E0:F7:EA:95:E8:4F:28:78:FD:65
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:53:6e:42:21:a1:36:ad:b0:e1:78:66:f8:8f:a6:80:7e:8a:
02:5b:df:94:30:28:4a:7e:0c:e7:fe:b7:5a:75:c6:88:7f:dd:
1c:02:47:1d:37:a0:ab:80:ad:f5:5c:d7:59:a5:f7:c3:e1:89:
16:8e:77:8e:8e:ff:f7:01:8a:5a:e5:9a:d3:93:bb:5e:27:62:
8d:12:e2:00:29:43:8a:ce:c9:23:53:26:ad:60:c3:d3:97:50:
d4:dd:87:9d:36:d9:78:ab:8b:70:0c:bc:09:02:d9:05:01:67:
61:fd:89:db:57:7a:17:f8:42:73:0a:89:11:2f:e6:e4:1e:2e:
ba:ee:55:85:a2:44:9d:ae:35:ff:11:fe:c2:d7:60:c5:91:3c:
8f:43:8a:f2:15:f9:85:64:73:ca:f5:84:90:e1:3d:33:6c:40:
50:ed:c3:1e:0e:90:7b:c5:3a:cd:82:b9:b1:11:ed:71:e4:74:
ad:11:6c:8d:e7:16:a7:e7:93:ef:2b:70:ba:c3:6e:e7:10:19:
fa:15:c0:45:96:aa:8d:ba:e1:31:d3:d7:2a:63:1d:07:cb:d6:
67:cd:fa:9d:9a:e1:59:a2:70:1b:bb:3a:cd:2a:59:9a:e4:07:
fb:eb:1a:bc:91:8a:ef:a9:c9:3f:bb:07:60:87:15:e4:0f:b3:
82:88:bf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:40 2026 by rpki-client