Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: BljWaWcdcB1lKANVV808BvGs6CIErpAqoUfB4z/z5HE=
Subject key identifier: 9E:36:23:A5:60:D9:C3:6D:21:69:7F:66:E2:44:58:90:5A:D6:B8:DA
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 01A1DE70EF6B412E355D7B29A6AE2991ED5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0401
Signing time: Sun 15 Nov 2026 09:01:45 +0000
Manifest this update: Sun 15 Nov 2026 09:01:45 +0000
Manifest next update: Mon 16 Nov 2026 09:01:45 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: LwGYdYvS8rfgAiF113NO4hXal+veTh0jY3hdZgznw58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ef:6b:41:2e:35:5d:7b:29:a6:ae:29:91:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Nov 15 09:01:45 2026 GMT
Not After : Nov 16 09:01:45 2026 GMT
Subject: CN=9e3623a560d9c36d21697f66e24458905ad6b8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:f3:69:32:24:12:71:af:68:06:dd:55:cd:
26:cb:3b:ea:e2:a8:8a:d3:13:a5:a2:12:4c:5f:83:
ac:d9:e0:a7:9f:22:ba:2b:40:04:82:e3:d8:c1:2f:
02:25:e0:b3:42:51:7b:b0:c7:12:72:a1:5f:1c:48:
d1:f6:b1:5e:1b:96:41:47:5c:38:22:7d:4c:3f:91:
9f:aa:f4:6a:e8:df:e6:90:b6:32:20:cc:93:3f:11:
46:c6:c4:a9:3b:2d:31:80:02:90:bb:e6:a9:3d:a7:
9a:85:9d:4b:bd:87:6c:7f:f0:05:c0:8a:fd:86:b2:
8e:38:35:6f:e8:c1:ad:19:84:dc:15:9f:c0:8d:9b:
e1:08:c8:b0:57:52:91:cb:68:e5:77:0a:40:3d:f7:
fe:69:47:e7:6a:66:19:04:29:34:11:e2:0b:0a:8e:
dd:c5:3d:f4:d9:bf:b8:d1:1b:ed:be:f2:c2:e5:60:
7e:2c:6a:78:ef:98:bf:5d:65:34:65:48:ac:27:4d:
42:4f:81:0a:e0:39:14:82:be:d3:0d:5d:76:8f:dd:
00:b7:5d:b2:dc:bd:50:c1:7d:15:44:87:15:6d:cc:
00:ec:fc:28:ae:c9:74:96:0b:90:e7:1a:f1:36:da:
53:01:6d:97:65:91:f2:cb:c7:6b:a4:ff:85:d7:4c:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:36:23:A5:60:D9:C3:6D:21:69:7F:66:E2:44:58:90:5A:D6:B8:DA
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b7:6d:09:c5:e8:01:72:22:6a:7f:24:54:5e:12:80:42:37:
6f:c4:69:22:19:65:42:e1:b1:47:25:5c:6e:67:46:9e:67:25:
45:09:d6:2a:37:7a:f3:b7:ab:33:cf:7c:5c:73:82:0f:cc:40:
38:bd:ac:43:70:75:b2:10:4f:2e:d4:92:25:81:fa:32:dc:17:
ae:0b:05:4b:0e:c4:90:53:a3:1f:30:03:83:db:5b:de:3b:25:
0f:27:5f:7d:19:b3:ca:43:19:c3:b4:d0:41:57:69:17:00:7d:
fc:ce:ac:83:fd:8a:c4:36:37:ee:4b:a7:bb:79:d3:d4:2d:bb:
db:5f:59:17:f8:40:69:e4:51:fb:8d:9e:3a:a3:42:03:2c:53:
c5:d6:cb:b6:d3:16:c0:74:72:b0:ee:df:72:71:ae:bd:e7:98:
fd:56:cb:64:37:6e:68:dc:c3:ec:de:c8:8a:ec:f8:94:87:32:
4f:39:08:7e:40:6a:d5:f4:9a:6f:dc:aa:80:08:97:28:e1:7e:
50:c2:dd:ad:e6:c0:55:3a:ed:f1:69:e8:53:27:06:20:a7:6f:
9c:04:8f:1b:11:e8:53:86:70:fb:21:88:12:4d:13:0a:57:a0:
2c:f6:93:ba:97:59:0d:df:c3:37:f0:10:78:7e:05:43:2b:8e:
41:67:d9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:25 2026 by rpki-client