Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: kI/qn5gMXNxY/ehlhTl4L7VXGtN5w5aFxXWlLWA5ksg=
Subject key identifier: ED:51:4B:96:AC:4A:F1:C2:55:92:65:79:F9:DD:52:5E:78:E0:F4:77
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 01A0CA46CBD0341C3A0920FC901DDDF4B2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0372
Signing time: Tue 22 Sep 2026 18:00:32 +0000
Manifest this update: Tue 22 Sep 2026 18:00:32 +0000
Manifest next update: Wed 23 Sep 2026 18:00:32 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: D/wICwJkHjKtDqg9kXFM5Tmku6+xBPHCavBPHxVUdRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:cb:d0:34:1c:3a:09:20:fc:90:1d:dd:f4:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Sep 22 18:00:32 2026 GMT
Not After : Sep 23 18:00:32 2026 GMT
Subject: CN=ed514b96ac4af1c255926579f9dd525e78e0f477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:28:a1:17:14:6f:20:64:88:79:7a:b0:18:
41:cc:fc:4c:90:51:98:62:d8:56:42:ea:5e:e0:44:
51:86:36:d6:5d:10:22:79:40:2a:42:51:2b:a1:06:
95:8f:a7:15:0d:cd:af:36:6d:8b:3d:8e:49:78:7a:
cc:f4:35:a3:54:2c:f7:dc:49:bb:8f:81:c5:df:bc:
66:df:0e:33:f9:5b:d3:08:17:ee:6f:43:91:b9:49:
79:ca:0b:05:ed:09:54:09:1c:9a:19:e0:24:c0:81:
ff:57:ed:9b:8a:44:a5:4e:b0:d0:47:35:ab:2b:8e:
28:04:05:68:90:ec:ad:38:70:6a:d3:f2:f1:b8:2b:
8e:db:a1:56:ed:06:4a:57:bb:78:7a:05:7c:d7:f4:
e4:48:a9:c9:01:cc:a7:f2:89:98:5e:b1:97:e8:7c:
f5:1f:a5:fa:41:1c:f4:88:5c:c6:03:40:c7:9a:11:
69:a0:d1:32:38:0c:c0:2c:2d:c4:27:81:1d:8e:c5:
c3:64:f3:15:f4:43:82:34:e3:cd:29:a3:24:f4:37:
c9:e1:77:9d:25:72:35:76:f0:dc:2a:7b:58:65:98:
17:50:25:e0:aa:a2:19:87:4e:f5:7d:c0:96:0f:0f:
0c:a3:3e:fd:ef:41:b6:cb:cf:9b:75:a9:ea:b8:d0:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:51:4B:96:AC:4A:F1:C2:55:92:65:79:F9:DD:52:5E:78:E0:F4:77
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:2d:8b:3d:75:45:6d:75:7b:c6:93:d6:03:4a:06:8e:dc:
a9:4a:63:09:06:91:b5:32:16:9f:36:22:1e:fe:fd:a3:30:01:
91:8d:6f:23:d0:9f:01:2c:28:cc:83:29:d1:3d:9b:b9:de:59:
45:7d:f0:85:8e:51:08:14:77:06:94:59:92:5f:fd:50:35:d9:
0f:1c:bd:d4:77:2f:3c:b4:b5:c4:cd:3d:08:66:e3:0b:6f:74:
de:80:f8:37:b3:f4:42:65:16:ff:c2:42:b1:5a:b2:0c:26:2b:
fd:a6:c3:e3:17:74:bf:c7:25:82:bb:c5:b9:a4:ff:e6:89:dc:
0a:65:e6:cc:9a:ce:8c:54:6a:16:74:26:29:27:df:4a:0b:a6:
70:63:5e:3a:4c:81:01:64:c6:08:75:ee:de:bb:8e:53:c1:4d:
c1:9b:5c:73:89:58:c3:3f:94:4b:36:62:e8:0e:e6:70:b9:ea:
6b:b3:b6:75:21:20:08:6f:17:9f:2c:a1:a9:1c:71:6a:d9:20:
4a:82:f7:3d:c8:c4:28:db:b1:56:1c:23:b1:e1:22:58:08:9c:
8e:90:c2:cd:4b:a4:eb:18:2d:61:b2:33:37:23:1a:2b:40:ff:
a6:46:78:00:da:93:5b:8f:78:13:0a:bc:da:68:32:e8:12:cf:
bd:e3:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:22:42 2026 by rpki-client