Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: 0jun9xWoOfxUEmzmWDOAFgWj69uw2/YpMAOupP+KEpI=
Subject key identifier: 2C:A9:FC:CF:BC:3D:94:D3:B8:CC:BE:71:81:65:D8:75:1B:59:43:51
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019CAA2200568E662FCF87D0144F5BB90A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 16:01:20 +0000
Manifest this update: Sun 01 Mar 2026 16:01:20 +0000
Manifest next update: Mon 02 Mar 2026 16:01:20 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: fD5oD7FRYZoRp19ylfflwH9NBkbkp5yoiVmqgkMPZxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:22:00:56:8e:66:2f:cf:87:d0:14:4f:5b:b9:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Mar 1 16:01:20 2026 GMT
Not After : Mar 2 16:01:20 2026 GMT
Subject: CN=2ca9fccfbc3d94d3b8ccbe718165d8751b594351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:58:2b:83:78:80:2d:0e:c4:18:ec:d8:a2:
af:97:ba:1a:47:5f:55:e3:4c:3f:91:67:4f:e9:70:
aa:96:cd:bc:0e:8f:00:9a:c9:93:3d:a6:af:de:8e:
c9:07:4f:3b:b4:8f:44:31:ff:47:0d:ab:a5:5d:da:
01:79:2e:75:05:ea:33:a3:b3:a4:95:00:29:e9:8f:
4e:f4:30:0d:8e:ea:87:91:97:f3:fb:e0:71:ff:05:
82:0b:03:45:ae:17:c1:68:f3:79:52:54:7c:75:63:
98:00:ec:db:c0:ed:8a:e5:0f:8b:68:56:d1:68:0a:
96:03:c7:86:8f:5c:16:c9:00:92:30:f4:58:95:38:
74:f2:4c:72:d4:4e:f2:7b:87:55:85:03:b5:38:de:
7d:ce:70:76:50:a4:a0:a9:e1:e8:92:73:2f:a4:1f:
6e:4f:0d:20:08:6e:70:4e:44:11:07:cf:61:8b:69:
ce:0a:19:d9:31:88:4c:55:10:d1:88:a6:7d:33:79:
6e:06:14:0d:51:0a:d9:81:ad:e4:cc:2c:f2:86:9f:
55:42:80:ad:f3:78:d5:36:6c:3f:14:e8:b4:0d:a7:
d2:bc:4a:45:a6:ab:d0:5b:ec:46:60:da:3e:91:13:
fd:0b:84:9a:a5:c8:ad:92:a4:02:6a:0d:3e:d8:01:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:FC:CF:BC:3D:94:D3:B8:CC:BE:71:81:65:D8:75:1B:59:43:51
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a9:84:cc:c0:8e:6f:e9:15:78:c1:4f:1f:92:1d:6c:b6:1d:
aa:5a:5f:44:c7:0a:97:86:fc:99:90:bf:c2:5d:bf:f6:d0:77:
c8:61:19:96:19:df:79:44:b5:bf:ae:25:93:62:54:d2:93:ee:
8f:ec:de:30:77:33:01:05:93:87:6b:f4:1d:ed:fb:11:b6:c0:
f2:87:40:8d:2e:24:36:b3:51:95:34:aa:8f:70:2d:6d:bb:e5:
06:fe:27:e6:db:d1:dc:50:a1:c5:ba:0f:ca:a0:92:81:5e:e8:
53:e8:4c:42:0a:46:d6:04:db:0e:62:11:5c:3d:8f:c8:7c:f5:
3e:12:e7:7e:48:c2:d4:71:d1:a5:d5:a0:e8:d7:aa:ed:f5:57:
9d:7c:aa:27:4a:a1:d7:35:30:ac:8f:4c:0c:ff:24:0b:3c:1c:
dd:d1:22:ed:a2:d4:41:10:99:bb:c1:f2:26:f4:b5:f0:10:94:
df:91:e7:f7:f7:e8:7a:a2:94:ac:f5:4f:80:cf:84:60:50:52:
fa:8a:cb:85:1d:40:12:0b:00:fe:8a:fe:70:0b:bd:f8:7b:c0:
74:24:0a:00:b5:c1:44:f8:29:71:71:ca:46:56:1a:cc:b2:5b:
fc:1f:64:88:b8:72:ff:9d:6e:fb:b0:5d:02:71:50:1a:5e:08:
68:3d:db:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIgBWjmYvz4fQFE9buQpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi
YWJjMjkwHhcNMjYwMzAxMTYwMTIwWhcNMjYwMzAyMTYwMTIwWjAzMTEwLwYDVQQD
EygyY2E5ZmNjZmJjM2Q5NGQzYjhjY2JlNzE4MTY1ZDg3NTFiNTk0MzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZlYK4N4gC0OxBjs2KKvl7oaR19V
40w/kWdP6XCqls28Do8AmsmTPaav3o7JB087tI9EMf9HDaulXdoBeS51Beozo7Ok
lQAp6Y9O9DANjuqHkZfz++Bx/wWCCwNFrhfBaPN5UlR8dWOYAOzbwO2K5Q+LaFbR
aAqWA8eGj1wWyQCSMPRYlTh08kxy1E7ye4dVhQO1ON59znB2UKSgqeHoknMvpB9u
Tw0gCG5wTkQRB89hi2nOChnZMYhMVRDRiKZ9M3luBhQNUQrZga3kzCzyhp9VQoCt
83jVNmw/FOi0DafSvEpFpqvQW+xGYNo+kRP9C4SapcitkqQCag0+2AFn2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyp/M+8PZTTuMy+cYFl2HUbWUNRMB8GA1UdIwQY
MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt
Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk
LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqmEzMCO
b+kVeMFPH5IdbLYdqlpfRMcKl4b8mZC/wl2/9tB3yGEZlhnfeUS1v64lk2JU0pPu
j+zeMHczAQWTh2v0He37EbbA8odAjS4kNrNRlTSqj3AtbbvlBv4n5tvR3FChxboP
yqCSgV7oU+hMQgpG1gTbDmIRXD2PyHz1PhLnfkjC1HHRpdWg6Neq7fVXnXyqJ0qh
1zUwrI9MDP8kCzwc3dEi7aLUQRCZu8HyJvS18BCU35Hn9/foeqKUrPVPgM+EYFBS
+orLhR1AEgsA/or+cAu9+HvAdCQKALXBRPgpcXHKRlYazLJb/B9kiLhy/51u+7Bd
AnFQGl4IaD3bAw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:40 2026 by rpki-client