Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: cx/3jojZH9Jbwko8AwQC2cOunEwbeNzjQ/jxSI2ynwQ=
Subject key identifier: 9E:F5:90:7A:5C:97:98:84:FD:A0:9D:12:FD:03:01:8B:E3:40:3B:7F
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019D277270F7D3DE87AB59E69C38AFB36CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0190
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: PrL3Qn/PIv5FbgyGUAwK9UZK0nyfVuLhdEVbSBIltIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:70:f7:d3:de:87:ab:59:e6:9c:38:af:b3:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=9ef5907a5c979884fda09d12fd03018be3403b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:1b:7c:c9:bf:e4:55:77:d3:54:9c:ea:3f:
64:f9:c4:b1:aa:99:dd:9c:08:bb:5b:c8:27:b3:d6:
63:db:82:91:38:24:fb:0c:3d:3d:66:ec:40:6b:84:
0f:c7:06:60:8f:3f:57:c0:b0:fd:32:f2:1d:44:d7:
97:87:29:4c:d7:f7:bd:68:82:22:45:bf:67:13:4a:
a0:02:73:70:ba:2c:11:57:3a:e0:de:5d:fb:a3:03:
5b:31:a7:71:37:25:75:2f:0c:9c:60:7b:8b:5e:85:
22:74:90:03:4c:28:f5:21:c6:d4:0a:14:2c:dd:21:
39:79:79:54:e4:9e:e8:f7:4d:ef:77:da:41:eb:ed:
63:e0:b5:fe:64:5c:25:66:c6:81:c2:e1:5b:a8:7f:
3a:09:a1:68:ec:3a:19:1b:3b:30:0f:6f:8f:82:6c:
cd:6a:c7:8e:1c:d3:93:14:51:f7:02:33:c6:fb:f1:
a2:d2:02:42:43:d5:a9:27:55:af:e7:d7:38:2b:55:
e4:d6:77:bc:6b:4c:88:58:77:c6:0c:d0:a5:a9:eb:
f0:3b:29:09:d4:3a:40:4c:0e:ea:ca:a2:41:b8:b6:
37:d8:a8:12:a7:fb:c5:8d:ee:eb:54:b9:df:65:9b:
50:cc:02:63:0b:80:75:c0:90:3c:11:bc:e1:d3:a9:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:90:7A:5C:97:98:84:FD:A0:9D:12:FD:03:01:8B:E3:40:3B:7F
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:d5:00:56:7a:dc:03:64:08:74:b8:f6:5f:58:9a:f2:f1:
58:4c:83:1b:25:01:d4:ad:2b:e1:a4:f1:ba:74:6e:5c:61:e1:
58:c1:53:4b:8b:5e:44:bf:38:a4:98:fc:3f:1e:62:b0:36:dc:
91:ef:f8:b0:4f:e1:5d:85:02:b8:fb:73:4a:ba:3e:ed:e0:d9:
8b:fe:a4:1f:73:6b:85:1e:d2:04:02:1f:d3:5f:75:1b:67:44:
ca:13:bc:51:d2:ec:a2:55:e4:ab:60:a9:2e:0b:25:df:55:8d:
9c:66:3f:ce:fb:98:d5:c0:f2:f9:26:6f:10:3f:8e:bf:9a:63:
7e:e3:f6:36:5e:a5:a6:51:63:32:91:18:c2:ae:91:dc:15:63:
cf:3c:05:dc:79:00:59:04:c1:ab:74:ef:c8:02:bb:c6:b6:d3:
56:84:63:21:8a:1d:14:46:70:66:8c:ce:64:f0:8e:30:92:c5:
2a:c8:ba:37:95:18:ae:6e:e5:9a:a7:37:0e:d0:b1:89:02:af:
38:e1:aa:fe:db:85:b3:dc:67:a5:1e:df:bc:40:51:2e:7e:e5:
8d:be:11:ce:ca:27:a9:b3:84:e0:07:15:0b:87:3e:02:16:71:
6f:43:86:1c:f4:5c:70:57:72:95:1b:29:ce:34:96:6d:f9:cf:
bf:c5:0b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:42 2026 by rpki-client