Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: SFNJ0UmOyiCTN2nBhBYefDGpJCuPq2Y5JUvW4QV0Nuw=
Subject key identifier: 58:3F:BF:15:41:34:5D:75:91:46:22:89:1B:5A:3E:B8:DD:8A:8D:16
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019FFFB7F124E995AC43A03C53B843C0D32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 10:01:12 +0000
Manifest this update: Fri 14 Aug 2026 10:01:12 +0000
Manifest next update: Sat 15 Aug 2026 10:01:12 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: JRGjJeN2N9//YImHmTATz8PBd7BLHrmn2fYRKncAvdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:b7:f1:24:e9:95:ac:43:a0:3c:53:b8:43:c0:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Aug 14 10:01:12 2026 GMT
Not After : Aug 15 10:01:12 2026 GMT
Subject: CN=583fbf1541345d75914622891b5a3eb8dd8a8d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:67:85:23:58:f3:ae:65:d5:6b:e7:28:a8:
eb:e1:b6:c4:b0:bf:2b:1f:28:8c:6e:ef:5a:51:4d:
1c:eb:ed:ba:9b:2c:6e:af:9f:e3:29:22:0d:95:b1:
f2:65:6e:ab:58:95:a3:43:3c:1c:92:e2:3d:d8:29:
1e:97:87:5e:06:4d:a4:62:9a:95:a5:89:9f:db:e0:
d2:de:af:27:d0:0b:36:18:cf:9e:4e:f5:cc:c7:78:
45:48:2d:88:83:83:d8:50:30:6b:8a:dc:ec:ef:14:
b6:85:15:17:7c:09:62:62:40:d6:98:0b:06:8e:ff:
c6:66:51:23:78:65:f9:81:c3:c5:76:87:f1:7e:9c:
33:88:db:4b:0d:b7:cc:54:bf:55:c4:19:e3:d0:a6:
05:5f:b9:47:fe:36:3a:9b:e7:39:1f:e7:e2:09:e2:
fc:38:da:fa:5c:51:85:08:e8:73:93:2d:64:b4:60:
a1:28:99:d4:4b:42:72:6b:37:e7:bc:b1:8a:9e:2e:
fd:03:38:b6:c1:34:0f:72:4f:25:c0:53:4d:db:18:
bf:50:80:31:ef:8b:8f:a6:cf:96:c8:e6:18:df:1f:
08:f5:a2:fe:3a:eb:48:ab:21:90:1a:95:3e:ee:6d:
2e:57:1d:1c:7f:2c:88:73:56:c1:d5:6a:12:85:ad:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3F:BF:15:41:34:5D:75:91:46:22:89:1B:5A:3E:B8:DD:8A:8D:16
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0e:d3:6f:07:84:9e:ff:35:06:6d:9b:e2:f0:6b:27:1d:5c:
40:b0:8e:0c:cf:30:ce:e7:ff:86:fc:0a:7c:4e:a1:fc:d1:c1:
d2:41:52:e2:76:05:61:f9:75:78:35:2d:73:5a:a9:b6:03:73:
22:e7:eb:47:4f:97:ed:10:5b:9e:51:ee:b4:3e:cb:fb:b9:53:
8e:99:8e:c2:40:db:fe:83:ea:46:53:30:19:75:c2:52:be:92:
2f:f9:83:5a:17:56:e4:af:24:b0:b0:b8:e0:8b:3c:d2:2b:94:
b7:b6:9f:b5:95:c9:82:ff:84:c3:cb:e0:30:9c:01:e7:1e:46:
1e:be:60:a6:f0:5d:47:21:cd:47:3d:0d:15:bf:de:80:5c:3b:
a7:1e:e0:d0:79:ec:53:22:3e:62:07:46:cf:59:2a:fe:51:3a:
04:21:8e:1b:ff:bc:db:47:b6:13:01:3c:35:8f:82:2d:37:82:
6e:40:2d:20:c9:df:77:e5:f5:a5:90:2a:6a:1d:45:cf:94:0c:
c8:2d:11:34:58:fe:92:58:20:bd:43:43:a2:80:ea:4c:3b:27:
2a:aa:46:38:99:b6:8b:75:d0:18:88:39:c6:e8:e0:6b:af:56:
5c:cd:28:1f:b7:ff:70:09:21:e0:66:04:8a:09:06:d2:66:77:
80:15:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 19:16:04 2026 by rpki-client