Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: 1InKFEItpsCXa+bE3SK7zyPyis9oe0vmQqL6RMYygeI=
Subject key identifier: 99:DE:32:74:B5:F4:7C:6D:A8:96:BA:0F:4E:63:DE:7F:F5:D2:D1:0B
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019FAA87CBAE70740B290BC9E829F04AB949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 02DD
Signing time: Tue 28 Jul 2026 21:00:53 +0000
Manifest this update: Tue 28 Jul 2026 21:00:53 +0000
Manifest next update: Wed 29 Jul 2026 21:00:53 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: nsbuLySv5kU/NGYzXxkoiXLclMAKxPX0yjltNw5aYbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:cb:ae:70:74:0b:29:0b:c9:e8:29:f0:4a:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Jul 28 21:00:53 2026 GMT
Not After : Jul 29 21:00:53 2026 GMT
Subject: CN=99de3274b5f47c6da896ba0f4e63de7ff5d2d10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:f1:2d:2c:da:8c:c8:bc:9b:17:dd:d0:7b:
de:1f:ce:10:90:a9:7c:29:d4:f5:e2:d7:10:03:ce:
86:ba:10:2f:c3:bd:b7:8a:ba:7a:f8:06:df:61:16:
8a:f1:c2:bf:fc:bb:a0:cd:d9:06:15:c4:b9:92:28:
cd:a6:ef:34:c7:94:6d:3a:4b:13:46:2a:fc:33:68:
71:06:75:ae:97:e0:b4:37:34:c2:dd:5c:d8:11:0c:
e7:ff:39:3e:91:86:59:2c:fd:e3:c3:d4:7a:92:93:
6c:a4:ca:9d:b0:a1:f2:dd:0e:eb:59:bc:1a:4e:b8:
f7:23:1e:cb:71:32:d0:25:3e:a7:82:ba:90:ec:24:
dd:8f:ed:7d:fd:b1:68:16:ae:8a:3e:b1:5f:38:97:
46:dd:56:93:49:5c:05:3c:8a:f3:e4:58:4e:cb:b3:
56:e2:6f:b7:1c:61:c6:3f:08:9a:75:2a:2b:c6:50:
89:ff:44:da:07:ac:6e:fc:99:65:d3:41:07:b2:59:
59:fe:ee:93:d6:ad:c9:2e:1c:08:cf:20:fa:1f:7c:
9d:78:08:b1:ad:27:73:78:d9:77:08:32:55:44:75:
99:92:08:fc:e0:42:72:a3:fa:8a:13:66:e9:eb:a1:
1e:fb:c9:ee:06:4b:7b:2d:62:45:ce:47:f7:cb:1a:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:32:74:B5:F4:7C:6D:A8:96:BA:0F:4E:63:DE:7F:F5:D2:D1:0B
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d0:f4:0b:82:08:8e:2e:84:80:19:71:1b:12:0a:36:e1:5d:
61:1b:25:9b:01:c2:32:c2:60:15:e2:94:8b:db:03:2b:15:bd:
c0:dc:88:cf:55:85:b0:32:e9:cf:fb:65:de:91:68:63:f5:f7:
d0:d0:1b:6a:97:0b:4f:a9:6b:0e:0b:ad:bf:68:e8:b9:05:e9:
2c:6a:07:d5:11:31:16:c0:99:b4:98:b1:72:3b:4c:22:f5:32:
b6:32:4c:6b:1f:29:26:e0:b4:68:74:07:c8:9a:7f:70:46:ed:
88:ed:58:39:dc:49:31:7f:81:c2:61:f5:65:08:22:53:a1:bc:
27:6f:a2:98:14:9e:4a:7f:91:73:b9:f6:0d:b1:e7:c9:a7:c3:
05:57:08:06:43:c6:57:2a:ec:41:a1:e0:1d:50:45:c4:1c:2c:
e9:e7:8e:10:88:77:05:c0:b3:ba:02:45:13:37:ec:25:9d:3e:
cd:4d:05:a6:89:b6:02:40:bc:43:5f:e3:05:9f:b7:15:9f:3c:
5c:30:3a:11:c6:4f:65:a7:c4:ea:b3:b6:06:c2:5b:d6:eb:29:
5b:4a:42:1f:85:1f:73:b2:c9:3a:cc:e0:27:76:f5:b1:13:ed:
71:04:2f:95:2f:0c:f1:f5:8a:db:b6:d8:56:09:da:fa:31:4c:
9a:ca:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:18 2026 by rpki-client