Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: X1jCRNrZZK4VdppjtBFBg68Ct7YTLpIhByFcdta5vWM=
Subject key identifier: 7B:0E:15:15:EF:BC:4F:B1:80:A2:F9:87:C9:94:AE:A2:91:D6:8B:18
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 019D371BBA19DEFFB6CAEAE4EA5E8D25D3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 01:00:57 +0000
Manifest this update: Sun 29 Mar 2026 01:00:57 +0000
Manifest next update: Mon 30 Mar 2026 01:00:57 +0000
Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: l13H34VVQQF4ViMRwegd0zS6R61csRtOUniNAl2hoqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ba:19:de:ff:b6:ca:ea:e4:ea:5e:8d:25:d3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Mar 29 01:00:57 2026 GMT
Not After : Mar 30 01:00:57 2026 GMT
Subject: CN=7b0e1515efbc4fb180a2f987c994aea291d68b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:57:94:2b:1c:2d:46:d5:38:d0:19:29:ba:
69:9f:7f:f1:45:b7:ef:5c:6d:ab:e2:f3:fb:17:89:
3f:28:c9:ee:c1:5d:b4:e2:5c:3e:ce:66:cf:4c:5e:
77:a0:19:16:46:4e:a8:90:60:2c:ae:f2:a7:77:47:
2a:64:dd:c9:83:03:cc:db:bf:9a:c2:8a:e0:11:fd:
cf:56:e6:05:26:b8:fd:e7:bc:e2:f6:cb:0d:c4:72:
76:6c:de:cc:81:f2:19:57:f0:48:ab:be:17:13:9b:
57:16:4d:da:6a:b7:0e:81:bc:de:e3:27:f1:03:a0:
47:cb:de:9e:3c:88:df:5a:73:08:1c:a8:65:f2:16:
2d:ae:2b:1c:fe:37:61:63:b0:21:d6:26:48:93:fb:
95:9a:84:7e:eb:b1:7b:cd:cc:49:54:c1:1a:80:6c:
0e:d6:54:bb:7f:c3:b2:81:27:cc:da:23:6a:e4:26:
da:eb:09:24:83:cc:61:42:89:bd:14:cd:ed:c7:8b:
85:87:d4:70:7c:84:9a:73:28:f5:22:2e:72:2b:69:
ed:e5:42:73:8a:22:66:00:e0:24:56:18:be:ad:36:
0e:c4:d4:fb:5b:51:d2:b8:20:12:3f:48:54:95:13:
27:57:dd:4e:3e:3b:5d:33:2c:e9:fd:e5:65:02:b7:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0E:15:15:EF:BC:4F:B1:80:A2:F9:87:C9:94:AE:A2:91:D6:8B:18
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:32:48:b2:69:45:e5:8d:b7:8b:7c:bb:ea:0d:ce:da:43:f4:
63:cb:e8:bd:fb:7f:28:14:d5:a4:f1:44:fe:1b:eb:a7:e6:e2:
b3:67:d3:13:59:93:ca:28:6c:62:cd:4b:01:80:c5:ad:0c:41:
88:f7:89:ce:3d:6e:c5:2c:43:d3:4c:d4:1a:72:e8:7d:03:20:
e5:ff:46:7d:6f:a1:df:3d:4f:4c:eb:5f:a3:15:00:eb:ff:0f:
03:23:34:19:db:02:f2:96:3d:ac:44:15:16:16:cb:a2:0e:14:
f8:a5:8e:f9:86:7f:d7:cf:71:58:cc:59:30:b1:1c:29:2d:e0:
ab:55:6c:46:00:38:51:9a:4f:54:48:4c:aa:46:80:ad:a8:21:
56:97:a2:77:90:9d:5f:9a:53:e6:b2:f9:8e:6e:be:42:e2:06:
79:a2:b2:f8:d2:83:84:7c:ad:40:a2:22:d1:e2:b6:65:2e:62:
ef:a1:8b:7e:3c:80:38:40:9f:70:78:82:38:94:fc:2d:e3:f1:
4a:f9:65:bb:29:18:60:0a:82:11:fa:cd:75:ad:85:f5:c2:db:
6c:f8:2c:30:53:84:af:7f:00:74:2d:2d:f7:94:bb:b6:1d:07:
57:68:ec:e4:91:6b:cd:68:0c:e3:46:3b:01:7a:09:d0:22:02:
0f:5b:f2:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7oZ3v+2yurk6l6NJdPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi
YWJjMjkwHhcNMjYwMzI5MDEwMDU3WhcNMjYwMzMwMDEwMDU3WjAzMTEwLwYDVQQD
Eyg3YjBlMTUxNWVmYmM0ZmIxODBhMmY5ODdjOTk0YWVhMjkxZDY4YjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM9XlCscLUbVONAZKbppn3/xRbfv
XG2r4vP7F4k/KMnuwV204lw+zmbPTF53oBkWRk6okGAsrvKnd0cqZN3JgwPM27+a
worgEf3PVuYFJrj957zi9ssNxHJ2bN7MgfIZV/BIq74XE5tXFk3aarcOgbze4yfx
A6BHy96ePIjfWnMIHKhl8hYtrisc/jdhY7Ah1iZIk/uVmoR+67F7zcxJVMEagGwO
1lS7f8OygSfM2iNq5Cba6wkkg8xhQom9FM3tx4uFh9RwfISacyj1Ii5yK2nt5UJz
iiJmAOAkVhi+rTYOxNT7W1HSuCASP0hUlRMnV91OPjtdMyzp/eVlArc/nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsOFRXvvE+xgKL5h8mUrqKR1osYMB8GA1UdIwQY
MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt
Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk
LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATJIsmlF
5Y23i3y76g3O2kP0Y8vovft/KBTVpPFE/hvrp+bis2fTE1mTyihsYs1LAYDFrQxB
iPeJzj1uxSxD00zUGnLofQMg5f9GfW+h3z1PTOtfoxUA6/8PAyM0GdsC8pY9rEQV
FhbLog4U+KWO+YZ/189xWMxZMLEcKS3gq1VsRgA4UZpPVEhMqkaAraghVpeid5Cd
X5pT5rL5jm6+QuIGeaKy+NKDhHytQKIi0eK2ZS5i76GLfjyAOECfcHiCOJT8LePx
SvlluykYYAqCEfrNda2F9cLbbPgsMFOEr38AdC0t95S7th0HV2js5JFrzWgM40Y7
AXoJ0CICD1vyeg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:50 2026 by rpki-client