Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: E6w2r1qT2J6bHlTjDiNM2nsdYhyV5zEnb6hh5inzLgA=
Subject key identifier: 64:B6:A2:7C:22:57:10:52:44:8C:D3:62:DE:2A:E8:1A:BF:C7:F9:E6
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 01A1291EB6996C5F49D481992795C6B08232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1AA2
Signing time: Sun 11 Oct 2026 04:00:40 +0000
Manifest this update: Sun 11 Oct 2026 04:00:40 +0000
Manifest next update: Mon 12 Oct 2026 04:00:40 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: J82I8Vy1dzyyYKgHQFMtC489joo7AkQGitTy8JFnhMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:b6:99:6c:5f:49:d4:81:99:27:95:c6:b0:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Oct 11 04:00:40 2026 GMT
Not After : Oct 12 04:00:40 2026 GMT
Subject: CN=64b6a27c22571052448cd362de2ae81abfc7f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:89:c9:8f:14:60:db:0a:9e:0b:b8:ed:b7:
af:63:4f:c5:79:14:16:29:fe:c4:9a:25:d7:c8:03:
3f:04:1b:32:cf:e4:37:04:a0:d0:a5:e4:24:68:bc:
99:96:71:ae:01:ea:3f:81:5e:c1:e4:f5:d8:75:49:
71:dd:2c:b7:41:6a:06:02:a4:a4:a0:bc:94:74:74:
46:36:d2:af:da:ae:ba:d1:d0:6a:8e:aa:82:b4:76:
19:11:c1:86:f4:b1:92:6f:e6:85:2d:66:5c:51:28:
1f:71:78:72:b2:70:9f:59:c4:c4:c3:fb:69:3a:84:
26:c3:20:ac:e2:ec:e5:07:b7:84:5b:81:54:19:bd:
35:3d:c0:ee:44:7a:d6:3d:45:96:1d:9f:e7:ae:63:
00:c8:79:3e:3f:02:fc:58:98:aa:85:73:38:1b:e7:
4d:f5:5f:bd:33:09:72:ed:85:11:c9:7c:36:1d:9c:
ab:78:21:7f:a9:c4:8b:3f:ff:ab:49:aa:42:8c:d3:
71:0b:25:1e:52:b5:59:f5:4e:d0:b7:14:54:b1:d7:
0e:44:f9:b2:c7:83:40:ac:ec:60:02:c4:72:ad:e3:
1d:be:b8:f8:09:4d:67:ac:8a:7c:4b:4e:f5:93:d3:
15:e0:cb:b9:92:5e:a0:ec:59:e1:be:a7:67:e6:eb:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B6:A2:7C:22:57:10:52:44:8C:D3:62:DE:2A:E8:1A:BF:C7:F9:E6
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:ed:ce:3b:87:73:50:45:55:b9:03:98:84:44:f5:62:16:
05:fa:d9:04:f1:39:c3:7b:0f:31:8b:3a:33:b7:98:82:ab:56:
30:be:cf:e4:f5:2f:24:90:61:af:8d:49:a8:79:30:fa:69:c5:
64:96:0f:59:d0:f7:0f:6b:08:1a:94:53:e1:5f:c6:78:6a:1f:
dd:d7:fc:0f:67:55:47:ba:b0:9a:86:1c:85:d1:82:e6:79:0d:
47:a0:d8:d7:0e:1f:f0:cc:bb:2f:5e:80:d3:13:43:50:38:c9:
dc:ce:1c:7c:2f:d1:ab:f3:3a:50:7f:82:71:bb:bc:77:6a:ae:
35:00:43:a5:d9:0e:fb:72:92:7b:2b:5f:b8:25:d5:3e:69:e2:
4a:a5:25:74:30:99:a4:39:63:f2:95:09:1b:2d:55:7e:7f:25:
ff:c1:d0:25:6d:28:b4:48:85:80:b7:ec:2b:9f:d7:e1:7b:d3:
f6:c7:43:36:62:8a:4a:bd:8e:4c:15:bd:1f:ec:81:e7:1f:57:
1d:ae:4b:25:e8:20:87:a1:15:c9:d9:58:c8:a4:66:25:9e:9f:
77:a9:cf:e0:e6:e5:31:98:04:ac:bc:b3:bb:bf:88:6e:58:61:
48:7c:74:25:71:75:9f:c6:12:dd:e4:e2:ea:62:d5:e8:58:c1:
4f:f2:bd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:51:52 2026 by rpki-client