Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: cZTrJuHZM+645klelDBjdpLBpBedU2kFUoTCh5j4yuo=
Subject key identifier: C2:84:F4:AC:58:1A:E4:BD:15:E5:AD:2F:85:1E:23:65:84:FE:18:08
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019CADC74D6EDFDC06A3C9E4DF0C124F7DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0151
Signing time: Mon 02 Mar 2026 09:00:45 +0000
Manifest this update: Mon 02 Mar 2026 09:00:45 +0000
Manifest next update: Tue 03 Mar 2026 09:00:45 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: b2SI5qgliNfSK75NJQsXOwQuqs+15rHe3cSmrVpNrwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:4d:6e:df:dc:06:a3:c9:e4:df:0c:12:4f:7d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Mar 2 09:00:45 2026 GMT
Not After : Mar 3 09:00:45 2026 GMT
Subject: CN=c284f4ac581ae4bd15e5ad2f851e236584fe1808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:4b:18:a4:b4:8c:0d:01:2e:4a:07:14:15:
94:80:97:ef:0a:ac:5c:8f:ac:04:e1:e5:44:4f:f3:
25:89:93:44:6d:23:b6:79:c2:9b:1e:21:91:0b:ea:
6c:55:fd:94:88:4a:56:1b:30:79:77:c9:4e:5c:a1:
2d:3b:8d:21:6a:98:17:88:b8:fa:55:f8:03:03:2b:
25:3d:68:8e:37:a5:a6:d6:f0:8a:d8:45:ab:d7:d4:
24:eb:f5:4e:7f:63:11:3e:43:17:ff:2a:f8:8b:15:
f8:68:10:20:d9:96:a4:fb:4d:bd:81:0c:a5:be:d0:
eb:96:1b:32:d4:f0:04:a0:00:8b:c0:6e:73:36:af:
d2:d9:3d:47:95:96:ea:68:86:46:53:7a:f9:f8:14:
81:b3:64:56:18:9b:bf:27:70:d6:5a:41:2c:54:69:
58:46:5f:50:f9:01:27:16:41:34:68:fc:9c:3d:86:
9a:b4:be:26:9b:da:0b:03:b8:f8:23:2a:b3:23:f4:
bf:6b:f9:ed:0f:4f:cd:bc:75:9b:ce:fe:d9:08:c4:
67:3f:4c:82:63:3e:ef:c8:fd:26:c8:65:17:94:4a:
a2:3b:8b:c1:db:04:c0:90:2e:3e:89:31:26:43:b9:
66:ea:f2:e4:86:34:72:e3:59:b3:b8:47:05:be:6d:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:F4:AC:58:1A:E4:BD:15:E5:AD:2F:85:1E:23:65:84:FE:18:08
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5c:88:0f:34:aa:08:85:52:4f:8b:7c:47:1c:60:09:15:85:
c8:90:dc:25:3c:98:a9:dc:5e:fc:27:4d:8f:ee:0c:0d:12:b6:
fc:bb:d2:1b:cd:af:d8:91:36:8e:65:33:01:10:cc:4b:c9:15:
77:0d:88:4a:aa:56:ca:d2:2a:03:75:f3:16:5b:a1:af:da:b4:
fb:20:2c:9a:05:63:50:b4:df:2f:6c:8c:13:39:34:0a:42:75:
0f:37:31:0c:b5:cc:db:64:b7:b4:2a:eb:8f:87:17:e3:cf:bb:
46:cb:ca:39:af:ea:86:b1:fc:23:8e:51:6f:60:c4:1b:51:5a:
c1:47:dc:06:62:17:2f:97:4b:ec:b6:75:33:96:b2:2d:09:6f:
ee:69:8d:85:8c:d6:3b:4c:09:2e:1b:36:c6:f0:a4:84:d9:04:
ae:cd:c9:7c:a6:97:47:ed:e9:2e:0f:e8:b4:a4:ed:15:c0:5c:
46:e5:2d:63:49:53:3e:b3:fe:79:20:6d:ee:71:55:c9:d6:a1:
db:18:48:75:1a:52:ed:e1:57:64:11:3d:29:42:1c:d7:01:85:
09:32:d5:f3:56:19:96:cb:0d:d5:fa:47:b7:aa:b5:59:99:5b:
16:ac:08:fb:d0:3b:c3:e2:a1:54:6e:f9:da:27:cf:9f:d8:17:
79:06:3f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx01u39wGo8nk3wwST33aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWI0ODllNmQ5YjhjN2Q4M2NhMWU3MjdhNTk4NGRiZTU3
N2FmYmMwHhcNMjYwMzAyMDkwMDQ1WhcNMjYwMzAzMDkwMDQ1WjAzMTEwLwYDVQQD
EyhjMjg0ZjRhYzU4MWFlNGJkMTVlNWFkMmY4NTFlMjM2NTg0ZmUxODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64xLGKS0jA0BLkoHFBWUgJfvCqxc
j6wE4eVET/MliZNEbSO2ecKbHiGRC+psVf2UiEpWGzB5d8lOXKEtO40hapgXiLj6
VfgDAyslPWiON6Wm1vCK2EWr19Qk6/VOf2MRPkMX/yr4ixX4aBAg2Zak+029gQyl
vtDrlhsy1PAEoACLwG5zNq/S2T1HlZbqaIZGU3r5+BSBs2RWGJu/J3DWWkEsVGlY
Rl9Q+QEnFkE0aPycPYaatL4mm9oLA7j4IyqzI/S/a/ntD0/NvHWbzv7ZCMRnP0yC
Yz7vyP0myGUXlEqiO4vB2wTAkC4+iTEmQ7lm6vLkhjRy41mzuEcFvm0BTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKE9KxYGuS9FeWtL4UeI2WE/hgIMB8GA1UdIwQY
MBaAFL8bSJ5tm4x9g8oecnpZhNvld6+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTIt
MTgyY2Q0YWFjNDM2LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTItMTgyY2Q0YWFjNDM2
LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFyIDzSq
CIVST4t8RxxgCRWFyJDcJTyYqdxe/CdNj+4MDRK2/LvSG82v2JE2jmUzARDMS8kV
dw2ISqpWytIqA3XzFluhr9q0+yAsmgVjULTfL2yMEzk0CkJ1DzcxDLXM22S3tCrr
j4cX48+7RsvKOa/qhrH8I45Rb2DEG1FawUfcBmIXL5dL7LZ1M5ayLQlv7mmNhYzW
O0wJLhs2xvCkhNkErs3JfKaXR+3pLg/otKTtFcBcRuUtY0lTPrP+eSBt7nFVydah
2xhIdRpS7eFXZBE9KUIc1wGFCTLV81YZlssN1fpHt6q1WZlbFqwI+9A7w+KhVG75
2ifPn9gXeQY/lg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:08 2026 by rpki-client