Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: voLviLmy6bCfRxrGyzWbsxTO8zOzUfxafv0vn6owKlM=
Subject key identifier: 4C:9D:AE:75:07:ED:8B:30:5E:F8:24:83:50:2C:FD:28:C4:75:E8:13
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019D9B513128E38F2C54B3000352E9F86745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 01CC
Signing time: Fri 17 Apr 2026 12:01:22 +0000
Manifest this update: Fri 17 Apr 2026 12:01:22 +0000
Manifest next update: Sat 18 Apr 2026 12:01:22 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: 05qZO2YEB6xgSoeoBtpWnBXcj9RpE7fExSByh8as1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:31:28:e3:8f:2c:54:b3:00:03:52:e9:f8:67:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Apr 17 12:01:22 2026 GMT
Not After : Apr 18 12:01:22 2026 GMT
Subject: CN=4c9dae7507ed8b305ef82483502cfd28c475e813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:c1:b9:85:5f:3a:7a:aa:3c:0d:e2:27:c6:
c7:a1:74:94:61:62:6d:34:a4:09:57:f4:e7:de:59:
64:05:f0:cf:d2:e9:81:c2:0d:33:a8:36:da:85:1b:
0d:9a:0e:2e:46:27:77:79:33:7a:36:be:c8:fb:b3:
8f:75:13:f8:3e:4b:74:fe:05:9d:b9:6a:01:32:be:
60:8e:53:b8:80:0a:96:ef:dd:6d:75:d3:62:9b:0f:
80:6e:1f:49:e3:cf:27:03:5e:4b:26:f2:04:c5:c7:
13:48:43:4d:c7:e0:93:88:22:73:4f:41:ab:d6:db:
ad:f0:b4:e3:7f:59:f1:0a:d0:56:f7:c3:bc:aa:f3:
c7:c7:0b:8e:f7:08:0e:24:1f:97:4f:f2:1b:57:22:
91:6b:6e:30:25:71:6f:9c:6d:f1:31:41:77:02:f6:
e5:75:75:42:fb:b9:77:ca:42:ae:81:5a:ee:e0:6c:
66:e9:e5:1a:94:89:e6:ad:95:48:74:56:55:48:99:
b3:c2:ce:1f:81:a7:9d:c4:50:b9:84:7e:75:e1:91:
02:22:03:ef:dd:3f:b4:22:dc:1a:54:39:28:99:6a:
b4:57:24:e6:76:1e:20:60:f9:6f:55:76:8e:96:c3:
3a:44:d1:14:40:d1:59:33:34:0e:d7:4d:e9:0f:dc:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:AE:75:07:ED:8B:30:5E:F8:24:83:50:2C:FD:28:C4:75:E8:13
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7d:7e:e0:f5:8b:fc:39:46:64:6d:7a:01:74:e4:8c:f8:65:
83:7e:26:34:25:8c:8f:13:f1:9a:ed:51:03:41:74:f8:77:d6:
8e:13:a9:5e:2f:87:94:9e:98:bd:9f:38:b3:b0:9e:25:b9:4e:
64:56:0a:df:40:b9:eb:a5:d0:09:05:e0:1c:55:42:f5:d1:93:
6a:66:f3:08:02:ea:d3:f3:9b:da:61:9d:a3:e8:4b:57:cb:1a:
8a:c0:c7:21:93:55:98:28:05:21:a7:c5:33:0b:ec:fe:4f:69:
c3:59:af:bf:86:be:fc:6b:9c:5f:42:60:00:66:85:63:4c:33:
35:1c:fb:83:58:1f:ee:b7:a3:55:cb:04:df:ac:f6:6d:42:00:
0f:1e:8c:2d:7b:a1:02:46:a6:5d:3c:ab:c6:ca:63:71:1f:03:
73:a3:2a:07:d6:ea:f9:13:ce:d8:f2:d4:c8:c0:41:17:ec:43:
bb:2e:1c:10:8b:5f:d4:27:ad:c1:ef:88:6b:b7:68:e6:64:bf:
ad:46:5f:d6:6c:6b:ff:ed:41:86:ae:c1:5d:2d:d0:c0:dc:90:
a8:3e:06:18:1c:ea:4f:05:48:99:a0:d9:ce:25:9c:71:5f:ba:
6d:58:a8:70:b4:93:53:f4:ea:19:bd:09:98:a7:f3:d0:a3:d2:
f7:fe:46:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUTEo448sVLMAA1Lp+GdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWI0ODllNmQ5YjhjN2Q4M2NhMWU3MjdhNTk4NGRiZTU3
N2FmYmMwHhcNMjYwNDE3MTIwMTIyWhcNMjYwNDE4MTIwMTIyWjAzMTEwLwYDVQQD
Eyg0YzlkYWU3NTA3ZWQ4YjMwNWVmODI0ODM1MDJjZmQyOGM0NzVlODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4LBuYVfOnqqPA3iJ8bHoXSUYWJt
NKQJV/Tn3llkBfDP0umBwg0zqDbahRsNmg4uRid3eTN6Nr7I+7OPdRP4Pkt0/gWd
uWoBMr5gjlO4gAqW791tddNimw+Abh9J488nA15LJvIExccTSENNx+CTiCJzT0Gr
1tut8LTjf1nxCtBW98O8qvPHxwuO9wgOJB+XT/IbVyKRa24wJXFvnG3xMUF3Avbl
dXVC+7l3ykKugVru4Gxm6eUalInmrZVIdFZVSJmzws4fgaedxFC5hH514ZECIgPv
3T+0ItwaVDkomWq0VyTmdh4gYPlvVXaOlsM6RNEUQNFZMzQO103pD9wBvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEydrnUH7YswXvgkg1As/SjEdegTMB8GA1UdIwQY
MBaAFL8bSJ5tm4x9g8oecnpZhNvld6+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTIt
MTgyY2Q0YWFjNDM2LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTItMTgyY2Q0YWFjNDM2
LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnX1+4PWL
/DlGZG16AXTkjPhlg34mNCWMjxPxmu1RA0F0+HfWjhOpXi+HlJ6YvZ84s7CeJblO
ZFYK30C566XQCQXgHFVC9dGTambzCALq0/Ob2mGdo+hLV8saisDHIZNVmCgFIafF
Mwvs/k9pw1mvv4a+/GucX0JgAGaFY0wzNRz7g1gf7rejVcsE36z2bUIADx6MLXuh
AkamXTyrxspjcR8Dc6MqB9bq+RPO2PLUyMBBF+xDuy4cEItf1Cetwe+Ia7do5mS/
rUZf1mxr/+1Bhq7BXS3QwNyQqD4GGBzqTwVImaDZziWccV+6bViocLSTU/TqGb0J
mKfz0KPS9/5G1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:52 2026 by rpki-client