Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: 2Lqg1b2McqvhiNswW3N0xZ5GF6pzjNUZ0WHnxRKR91A=
Subject key identifier: 3F:88:FC:BC:1B:31:5E:3E:02:56:A8:2C:81:63:AB:D4:43:5A:49:F6
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 01A0D5DD7D39BA0C906911C5D4C5CCC5F2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 0378
Signing time: Fri 25 Sep 2026 00:00:57 +0000
Manifest this update: Fri 25 Sep 2026 00:00:57 +0000
Manifest next update: Sat 26 Sep 2026 00:00:57 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: qQ4ZBzcjuvUUnSwneHcIv1ioO68rsCH/6Jc3vlyldkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:7d:39:ba:0c:90:69:11:c5:d4:c5:cc:c5:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Sep 25 00:00:57 2026 GMT
Not After : Sep 26 00:00:57 2026 GMT
Subject: CN=3f88fcbc1b315e3e0256a82c8163abd4435a49f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:63:2c:9e:d2:bc:43:5d:a8:72:e0:80:d9:
14:2e:78:d1:7c:95:40:ec:d2:3b:19:6b:1c:48:b5:
5e:2b:6b:ee:6f:6f:4d:e2:5e:4d:36:e6:b3:f6:36:
d3:87:dd:20:c8:1c:8a:49:23:54:3e:b0:5f:c8:73:
64:c0:0b:ed:fa:ca:95:62:c4:b5:36:7f:60:10:d1:
31:db:88:a8:78:51:88:c8:de:b3:59:db:70:fa:ee:
01:c6:15:cd:cf:b8:20:c2:3b:ff:45:99:2a:d0:2e:
fa:b8:3f:41:38:db:f4:6b:7a:8f:cf:a2:b4:54:ba:
af:c0:5c:34:ba:ae:3c:31:11:48:e7:a7:f9:b8:0b:
39:b4:4d:dd:84:5a:5a:7a:05:f4:14:d9:2a:2b:a1:
6e:3d:c5:5f:08:1e:09:d4:0d:79:fd:b9:09:bf:16:
06:2b:0b:67:15:7f:1e:c2:3a:f8:08:f3:14:89:6e:
3a:47:04:c3:11:b9:80:80:c1:b3:e7:4e:5a:23:fc:
94:9c:0e:a7:dc:0c:27:37:5a:5e:11:ac:ea:64:fd:
ba:0c:9b:06:c7:4b:82:0d:88:c7:00:50:01:0b:45:
ce:f4:cf:bc:52:33:87:17:e0:38:ed:96:a1:6a:c8:
b1:11:0d:76:02:d7:dd:97:85:47:ea:1e:18:43:3d:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:FC:BC:1B:31:5E:3E:02:56:A8:2C:81:63:AB:D4:43:5A:49:F6
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:31:5c:a1:09:ce:96:75:eb:b2:4f:12:45:9c:dc:0d:dc:0a:
56:b5:cc:70:ad:fb:d2:3d:12:77:ae:bd:a7:b8:b7:8c:f0:e6:
f4:39:c7:8a:b9:9c:c1:16:46:11:6a:7e:93:9b:0f:dd:8b:1b:
9a:08:8c:6f:87:d3:55:f4:cd:31:fe:90:53:78:ca:e9:41:9a:
d1:c1:3d:60:21:78:74:d7:e3:99:02:ea:3c:80:ba:e8:2e:f2:
a5:e0:db:5a:e3:d5:67:a0:2d:b3:b3:af:50:38:3b:8c:5f:a7:
95:9e:d5:36:50:a3:dd:f6:e0:92:b8:af:87:d6:b2:59:dc:5c:
64:47:07:32:55:24:90:66:3a:19:06:b9:8b:dd:5c:66:74:5a:
99:5f:e9:ed:f3:26:0b:f3:f6:f3:dc:cc:00:3a:de:3d:f3:b2:
88:fb:3e:cc:a4:2f:ae:49:e6:94:23:b5:f3:cc:3d:fe:8b:ba:
5b:72:c5:1a:20:95:8a:66:6b:7c:a7:e3:15:fa:13:c6:20:c5:
50:cc:dd:71:ff:31:4b:b0:0c:9e:cf:75:fb:f8:86:b1:77:39:
c0:15:8f:2b:db:bc:d0:44:76:6d:22:ce:56:f5:ac:39:26:5b:
9c:95:0b:52:ef:f5:8f:65:c2:74:99:1b:38:91:75:18:44:e0:
97:a7:c9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:02:34 2026 by rpki-client