Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: bX9uaExnr3jp7iP7fNJzQrbsdF7COLbUlWSkxq8Dsv4=
Subject key identifier: 05:CE:B1:73:DE:E8:5C:D9:42:84:02:24:33:E6:A8:F9:2C:BC:B9:49
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 01A1DC82914D1B4C8F66545854E14D6992F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0400
Signing time: Sun 15 Nov 2026 00:01:46 +0000
Manifest this update: Sun 15 Nov 2026 00:01:46 +0000
Manifest next update: Mon 16 Nov 2026 00:01:46 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: FHLX5aHlY9nKefZkdLtkvu/4Cs7ftT4+TJUJgrm22LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:91:4d:1b:4c:8f:66:54:58:54:e1:4d:69:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Nov 15 00:01:46 2026 GMT
Not After : Nov 16 00:01:46 2026 GMT
Subject: CN=05ceb173dee85cd94284022433e6a8f92cbcb949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:65:3e:9d:2b:9f:6c:d5:d1:16:20:38:81:
c9:c8:dc:55:62:03:49:23:1e:4f:03:58:b9:11:35:
6f:28:03:99:57:fc:11:53:83:66:32:c3:db:1d:96:
5b:5f:df:96:aa:b7:fc:37:57:a8:c6:24:5d:10:68:
fc:ad:cf:36:30:4a:2a:40:03:ab:f8:5a:17:09:90:
4c:d1:1b:1e:1b:cc:34:53:3f:d3:a6:4f:7c:02:11:
4a:d2:44:97:1e:00:b4:d6:82:d9:49:96:2e:96:f6:
90:04:a7:df:6b:2f:7f:12:56:af:9b:73:1e:44:ed:
21:1a:ce:00:14:01:3e:40:99:c5:91:7a:ac:3f:10:
83:58:2d:e3:fc:d6:bc:1c:6a:fa:2d:19:b4:62:97:
3e:66:dc:78:78:aa:bc:00:15:dc:57:07:68:f5:bd:
f5:4c:47:67:c5:46:09:6b:04:44:c8:d5:34:1d:5d:
09:d6:58:9f:a1:1b:bf:d4:29:8e:d4:0d:ce:29:1f:
f0:b7:0a:bb:4b:fe:a5:34:fa:bd:bd:47:77:de:f3:
15:71:2b:21:be:97:1a:04:b0:b5:51:bf:34:82:28:
14:21:9c:1c:20:cb:02:12:bb:73:0a:1b:fc:e1:cc:
56:24:83:30:23:cd:aa:1d:0c:f2:d9:fc:ec:89:5b:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CE:B1:73:DE:E8:5C:D9:42:84:02:24:33:E6:A8:F9:2C:BC:B9:49
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:cf:96:80:1e:3c:ea:1c:a6:90:8c:cf:53:f4:a2:e7:ec:
89:f1:a5:f6:80:ab:39:2b:0d:81:2d:54:23:bc:9a:22:12:fa:
84:c4:ff:50:86:2f:3c:88:15:35:49:0c:e5:ec:0e:3b:00:2c:
b2:3b:74:e6:4d:c5:98:32:18:52:77:81:3d:6a:8f:43:9e:cf:
8f:ab:1f:dc:ef:85:e4:b8:f3:34:b3:b5:bc:db:87:72:b9:ed:
fe:cb:b2:5b:0e:fd:97:db:1d:b4:5d:55:ef:d6:0c:11:4c:6a:
34:c9:c8:31:27:a0:44:46:da:7a:17:bf:0a:a1:0d:a4:1f:59:
4a:36:64:79:08:6c:67:2b:71:d8:73:25:dc:93:48:0a:84:0e:
28:63:a8:bc:81:56:87:d9:1a:a5:df:20:08:6f:09:73:79:91:
37:50:1f:c8:b3:5d:e2:55:3f:ad:9e:2b:e4:37:6c:09:2a:fe:
f5:e2:64:68:20:9e:a3:7c:f0:55:f0:04:f5:4e:60:ad:d2:d9:
c7:43:f0:82:06:71:da:ef:1e:26:3d:22:ff:f2:fc:c8:5c:1f:
08:58:6d:0b:fd:12:35:ca:9e:45:6c:48:85:04:00:8e:20:a8:
7b:ab:6d:8f:a3:26:63:0c:ba:a3:7f:9c:ec:54:1a:2c:1a:6e:
16:74:45:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:19 2026 by rpki-client