Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: P7X3Z+JOok6ocgW+hv078IdVcjbDyHre5+l3S3EaiYw=
Subject key identifier: 1B:B8:DD:19:E4:54:C7:46:E2:BE:9C:51:D8:A2:68:78:76:C6:B9:34
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 019E1EA3951EA4B98CDE345EEDF1D4781B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0210
Signing time: Wed 13 May 2026 00:01:37 +0000
Manifest this update: Wed 13 May 2026 00:01:37 +0000
Manifest next update: Thu 14 May 2026 00:01:37 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: KeHcT2c5eovZTIFC4CtzmntEB6NwI1fE4QS1lWI6N+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:95:1e:a4:b9:8c:de:34:5e:ed:f1:d4:78:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: May 13 00:01:37 2026 GMT
Not After : May 14 00:01:37 2026 GMT
Subject: CN=1bb8dd19e454c746e2be9c51d8a2687876c6b934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:73:f5:ff:7f:38:c0:31:b2:20:94:4a:cd:
f5:80:40:e2:22:40:0f:a2:68:f9:49:fb:05:e0:c0:
f8:26:5e:e3:c2:73:0b:0f:ae:6a:e9:ef:d3:eb:f3:
f7:d0:8c:7e:c4:a9:82:6e:97:80:7c:a0:62:f5:ee:
81:a2:81:83:19:b5:a1:5e:82:00:7c:c9:25:e3:b9:
68:0b:d1:5b:93:ac:df:ef:08:c3:0e:a1:e1:72:69:
8c:30:86:bc:0d:33:cd:db:9b:d8:30:9e:16:2d:f6:
6e:73:03:68:de:1b:0e:e7:f3:0b:02:5f:5a:2f:2e:
68:ec:98:f0:ac:4c:7d:f2:9d:1e:c8:08:42:9d:6c:
42:83:51:a9:42:b2:c3:57:d6:11:28:aa:e7:fc:25:
5a:24:7e:eb:d3:70:7c:0e:34:41:aa:73:88:90:8b:
d9:ba:0c:cc:18:aa:8f:9d:60:79:82:ca:4b:c3:a4:
94:e3:73:c4:9b:2a:2e:e0:91:86:c0:55:b3:04:c1:
de:3b:ea:9b:5c:99:71:f9:43:bb:9d:b4:1a:7e:df:
07:a3:75:01:af:c5:8f:46:8f:ab:d9:83:66:e0:18:
ef:e8:ef:f5:24:ed:eb:c0:c7:f8:61:39:0e:02:66:
7b:e8:09:1f:77:20:8b:2e:78:a2:1e:eb:c9:51:c4:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:DD:19:E4:54:C7:46:E2:BE:9C:51:D8:A2:68:78:76:C6:B9:34
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:64:76:a1:a8:63:61:1a:0e:09:50:ee:f9:6e:27:e5:fa:1e:
5b:02:9b:55:e7:43:0a:b5:85:71:2f:1b:79:24:80:32:6c:26:
cc:b0:8e:75:5e:13:30:6f:eb:97:ab:98:be:29:9b:b8:83:08:
79:f1:ae:c3:30:f6:63:f2:f2:a7:08:b0:7f:29:e3:68:ba:ee:
c0:b3:09:d6:13:a5:77:de:33:e9:5c:e7:b9:f8:3b:82:59:22:
00:f9:14:4f:65:34:ce:bf:fe:14:20:e4:f1:0e:ef:05:4f:f5:
b2:38:9e:fb:b9:62:c1:c4:94:ff:7b:41:78:9e:a7:61:02:2c:
19:96:a6:f2:ec:5e:b1:bc:cf:dd:72:84:ce:0c:56:87:22:80:
72:6b:e2:e3:a6:b1:5e:88:bd:7c:0b:80:a6:40:33:a6:d1:68:
a7:2e:bd:9a:e3:21:32:4c:14:7f:9a:f0:3c:52:a3:05:77:15:
d1:e5:8a:72:37:10:91:bb:63:7f:aa:27:6c:b8:4c:38:24:00:
63:d2:79:f4:17:0b:29:c9:b6:c3:c7:97:b8:95:ea:2c:0f:86:
f4:ee:72:13:19:e8:dd:e9:fd:61:ec:8b:7b:93:a5:e1:92:f1:
35:e9:4f:3b:a7:f7:92:63:44:61:4e:1d:9b:6c:cb:7a:b9:27:
dc:12:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:47 2026 by rpki-client