Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: z18ZIPRaMi1fqnhFYYiLKTZHDO3q1DIpSkclc/RC8lc=
Subject key identifier: 81:82:9B:0C:6E:47:C3:2D:1B:B1:BA:14:31:C8:0F:21:51:AB:7B:FF
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 01A0DFBCE63B9CE8E04543340583DAF58665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1A7C
Signing time: Sat 26 Sep 2026 22:01:33 +0000
Manifest this update: Sat 26 Sep 2026 22:01:33 +0000
Manifest next update: Sun 27 Sep 2026 22:01:33 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: dN4F3jDzqJkPL3cmEutMxVI7eErwGGsoTyrjn1dFfRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:e6:3b:9c:e8:e0:45:43:34:05:83:da:f5:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Sep 26 22:01:33 2026 GMT
Not After : Sep 27 22:01:33 2026 GMT
Subject: CN=81829b0c6e47c32d1bb1ba1431c80f2151ab7bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:c5:c4:7b:9c:36:8e:ff:76:b2:e9:ab:6c:
cf:50:ed:b8:13:01:d1:bb:c3:6d:88:f5:f3:5d:81:
a8:17:0c:0d:fc:20:60:c7:7b:5a:93:f6:13:69:3b:
f6:5b:bb:d1:64:32:e4:d3:c1:7f:f6:80:80:c9:cd:
09:c8:d1:86:10:cb:7e:08:9c:d9:f0:8e:97:0c:94:
8d:53:74:1f:23:bf:d1:ea:c9:27:ac:2a:81:27:de:
6c:7a:47:96:6d:cd:f5:c7:dd:c6:4d:e5:02:45:8a:
5b:dc:cc:b6:4a:4d:38:b2:c6:ed:87:90:cb:78:7a:
ab:66:0e:31:1b:7b:b9:5c:79:ac:91:fc:e3:cc:ac:
6c:a3:ee:bb:c0:df:e6:14:f4:be:17:9b:3c:33:40:
78:d7:7f:24:53:6a:b3:95:59:c7:20:b1:f4:01:53:
3a:63:0a:b6:92:af:fe:04:f7:a8:d2:c5:43:9b:98:
b8:10:15:f9:c1:11:1c:b7:83:d3:42:55:4f:36:d4:
79:44:1e:d9:c7:54:3d:d1:75:47:1d:a9:44:9f:d0:
a7:7d:2f:c3:6a:c2:98:55:d1:c5:41:d9:c3:1e:36:
16:e9:03:a0:f7:1b:53:7b:cc:da:6e:47:f6:77:ed:
fc:a5:fc:3e:34:29:5d:91:c1:af:57:54:b4:08:db:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:9B:0C:6E:47:C3:2D:1B:B1:BA:14:31:C8:0F:21:51:AB:7B:FF
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:81:eb:65:09:be:33:9e:7f:7d:84:43:ee:12:d2:15:66:44:
64:b5:16:2f:c3:66:57:45:c0:a4:b6:46:29:23:f5:c6:de:76:
37:f3:d8:97:6e:96:b9:76:e0:42:42:20:f4:a6:06:48:a0:0b:
6d:62:e7:d1:c4:70:6a:5f:e7:70:58:74:c6:eb:23:db:b6:06:
7a:e2:82:67:59:83:41:e2:ac:f0:e7:7e:d6:b9:70:0b:ac:a3:
42:0d:dd:95:1e:7b:a8:22:15:17:91:1a:4c:78:72:9d:e4:0c:
18:fd:08:89:51:54:af:f2:6d:c7:95:92:fe:59:ad:3b:9a:21:
16:51:8d:d2:2b:8a:2d:a2:35:29:91:b0:27:a5:c5:de:64:23:
8d:59:56:32:cc:df:e6:ea:a6:89:c0:33:c4:9f:bc:ff:65:11:
88:2f:2f:63:f3:b9:54:0f:e0:be:2a:aa:ce:76:ab:f4:67:52:
6b:aa:b6:38:23:3d:21:0f:bc:31:2f:82:64:12:23:b5:a1:14:
5c:58:ba:0e:46:f0:f0:29:a0:e4:06:e8:87:8c:73:f7:54:05:
a2:ce:17:e4:1d:90:94:3e:df:ef:b8:cf:75:4a:f9:86:a4:a2:
ab:51:79:96:ad:72:f7:f9:2b:6b:4f:1c:50:4c:f3:54:ae:06:
16:c5:02:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvOY7nOjgRUM0BYPa9YZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi
YWJjMjkwHhcNMjYwOTI2MjIwMTMzWhcNMjYwOTI3MjIwMTMzWjAzMTEwLwYDVQQD
Eyg4MTgyOWIwYzZlNDdjMzJkMWJiMWJhMTQzMWM4MGYyMTUxYWI3YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc7FxHucNo7/drLpq2zPUO24EwHR
u8NtiPXzXYGoFwwN/CBgx3tak/YTaTv2W7vRZDLk08F/9oCAyc0JyNGGEMt+CJzZ
8I6XDJSNU3QfI7/R6sknrCqBJ95sekeWbc31x93GTeUCRYpb3My2Sk04ssbth5DL
eHqrZg4xG3u5XHmskfzjzKxso+67wN/mFPS+F5s8M0B4138kU2qzlVnHILH0AVM6
Ywq2kq/+BPeo0sVDm5i4EBX5wREct4PTQlVPNtR5RB7Zx1Q90XVHHalEn9CnfS/D
asKYVdHFQdnDHjYW6QOg9xtTe8zabkf2d+38pfw+NCldkcGvV1S0CNsMwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGCmwxuR8MtG7G6FDHIDyFRq3v/MB8GA1UdIwQY
MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt
Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk
LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYHrZQm+
M55/fYRD7hLSFWZEZLUWL8NmV0XApLZGKSP1xt52N/PYl26WuXbgQkIg9KYGSKAL
bWLn0cRwal/ncFh0xusj27YGeuKCZ1mDQeKs8Od+1rlwC6yjQg3dlR57qCIVF5Ea
THhyneQMGP0IiVFUr/Jtx5WS/lmtO5ohFlGN0iuKLaI1KZGwJ6XF3mQjjVlWMszf
5uqmicAzxJ+8/2URiC8vY/O5VA/gviqqznar9GdSa6q2OCM9IQ+8MS+CZBIjtaEU
XFi6Dkbw8Cmg5Aboh4xz91QFos4X5B2QlD7f77jPdUr5hqSiq1F5lq1y9/kra08c
UEzzVK4GFsUCoQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:18:17 2026 by rpki-client