Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: HuGFG1JeOtqHRe2CxQVW0smVteqFvyjHcT1AyIDcbTk=
Subject key identifier: D4:B9:66:C3:61:42:10:88:5C:A1:B2:99:D9:17:89:EA:2A:CB:84:59
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019EC0DB0F007F9F2079E46AA725C2DD3EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0264
Signing time: Sat 13 Jun 2026 12:00:42 +0000
Manifest this update: Sat 13 Jun 2026 12:00:42 +0000
Manifest next update: Sun 14 Jun 2026 12:00:42 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: EL9CvNQHTURypjZa2AG+cTOIZtiuG1nZewKVkFbp5YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:0f:00:7f:9f:20:79:e4:6a:a7:25:c2:dd:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Jun 13 12:00:42 2026 GMT
Not After : Jun 14 12:00:42 2026 GMT
Subject: CN=d4b966c3614210885ca1b299d91789ea2acb8459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:99:1b:6b:e1:74:67:f5:ad:70:c2:5b:db:
05:58:d2:aa:7e:d9:c1:85:a0:a2:f1:6e:c6:dd:c4:
9a:39:6d:dd:ab:06:af:33:3c:9c:61:13:42:89:86:
51:62:0c:fd:3e:e7:54:95:03:eb:2f:1d:2c:d8:11:
52:c6:05:65:12:66:2d:d1:f0:8f:85:eb:33:b0:82:
b1:c4:7f:c1:da:f7:12:9e:f0:2d:c8:e5:bf:25:84:
5c:df:43:e9:e5:bc:41:f3:98:ac:a6:af:22:2c:71:
87:d0:bf:fc:06:e4:6d:38:d3:09:01:da:4c:72:e7:
4d:e5:ee:8d:55:fe:d7:3d:e1:50:da:8c:bd:d2:86:
4a:da:f5:8a:f9:48:f4:9a:91:d3:6c:1e:19:d2:95:
cd:ad:f0:e9:e4:93:79:22:ad:e8:25:93:c4:d9:66:
9b:38:f1:79:b5:3c:91:74:ca:fd:b2:2b:03:bb:57:
25:28:3b:3a:7d:b5:3c:54:e3:04:68:ef:02:c0:98:
0e:4a:e1:b4:52:06:4f:36:85:ea:af:ee:3c:70:cd:
13:8d:4c:c3:22:ce:33:ae:90:42:87:5a:a5:44:25:
66:4f:db:c2:a1:1a:3e:58:d1:e5:07:3d:a2:1f:83:
bf:69:f6:12:d9:b8:e9:37:ef:3e:d1:8c:0c:c5:94:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:66:C3:61:42:10:88:5C:A1:B2:99:D9:17:89:EA:2A:CB:84:59
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:de:ca:09:5e:27:b8:d9:a0:d6:b1:7e:e1:09:5f:58:26:6c:
cd:f1:8f:53:e7:55:98:99:11:5d:51:60:a7:c4:4f:4b:10:b7:
a5:fa:dd:6c:62:3b:d1:e6:2b:79:78:a4:78:67:63:e5:d4:e3:
c5:58:df:e3:61:3e:33:6a:7c:40:d7:f4:31:67:e2:a9:40:0d:
c4:25:5b:58:22:eb:0a:cb:39:e8:68:d6:d4:c1:e9:0f:70:98:
13:98:79:c5:50:f3:b7:15:06:b9:21:5d:82:35:39:d4:52:7d:
d5:cd:ed:7f:f0:4d:f8:1a:22:07:70:78:e8:d1:4d:5e:a0:05:
92:29:64:0c:89:89:71:7a:1e:0d:78:ff:a4:b9:4c:53:ca:85:
0d:b8:3d:b6:74:9e:07:69:75:d1:00:1d:b4:71:54:c5:6c:b3:
78:a3:58:55:11:56:8c:ec:03:30:91:65:9d:46:3d:2e:46:6d:
ff:6b:ed:87:ed:3a:80:38:ea:8e:c7:0d:b3:31:ee:98:c2:a3:
da:9e:d0:6a:f0:08:23:28:ee:bb:e0:aa:f4:46:02:d3:62:36:
f2:e3:e4:60:14:c2:e1:a0:c2:4c:68:2d:9d:c3:40:02:8d:c0:
60:14:25:dc:b0:ae:13:48:21:24:78:99:13:db:72:e0:9c:b1:
b2:75:7f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:57 2026 by rpki-client