Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: zGnltu0cwKUZYyAjj1pBCy644PFkX1ESdl2sSf6uxDc=
Subject key identifier: 37:2D:22:F8:A0:41:AC:97:61:FD:3D:64:24:0B:CF:EA:BE:24:0E:1A
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 01A0016F4CB108A70F4B5FC9B62FF8EF6C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 030A
Signing time: Fri 14 Aug 2026 18:01:06 +0000
Manifest this update: Fri 14 Aug 2026 18:01:06 +0000
Manifest next update: Sat 15 Aug 2026 18:01:06 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: 1hqjjf/AljScB6z1bIoZ8TMCupWzCKCP2LRhXwM1jnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:4c:b1:08:a7:0f:4b:5f:c9:b6:2f:f8:ef:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Aug 14 18:01:06 2026 GMT
Not After : Aug 15 18:01:06 2026 GMT
Subject: CN=372d22f8a041ac9761fd3d64240bcfeabe240e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:bf:2f:63:6c:16:d8:35:ef:a0:21:76:ba:
57:f0:8e:67:29:b0:d7:5d:d7:c2:94:bc:bb:f1:3e:
df:f7:1e:0e:50:9e:f5:53:90:8d:dc:8f:8c:b7:c1:
90:3d:01:4d:b2:f2:3b:0f:ea:cf:bf:12:4d:70:6d:
b6:b9:31:bb:b3:53:7c:86:46:e5:2b:62:b0:f4:07:
c8:cc:74:cf:dc:2d:95:e1:42:64:38:65:c9:14:b6:
6b:cf:86:a6:a8:d4:af:27:24:a2:06:24:7f:cc:20:
cf:23:a9:c0:35:c2:6c:c3:e1:2c:a7:52:47:71:88:
84:d6:dd:0a:e0:d1:a7:8d:6d:74:c6:75:89:ce:09:
63:b2:28:36:a7:3e:9f:fd:c9:a9:36:ce:60:2a:85:
2a:b2:d2:b4:b2:5b:5a:c9:ec:37:7c:7e:fc:e8:71:
ef:b3:6a:7b:0b:e1:f8:6d:15:91:e8:90:73:16:ad:
2e:60:50:0c:cc:59:1b:c3:51:37:3a:3c:db:cb:a7:
ed:fd:c2:87:fe:73:34:ac:75:a5:c5:95:8d:fd:ce:
fe:04:9e:36:44:13:99:56:17:52:61:25:58:04:d3:
c1:fa:3f:d2:6b:eb:6a:3a:0c:54:cf:01:44:05:db:
cb:c8:31:4a:02:f7:ee:8d:d9:cd:61:79:6f:b4:69:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:22:F8:A0:41:AC:97:61:FD:3D:64:24:0B:CF:EA:BE:24:0E:1A
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:af:d8:c6:ce:af:26:dd:c6:e0:9f:48:25:19:09:26:ba:4d:
e0:0d:21:b6:95:57:55:ee:98:d9:42:23:c1:ab:07:b2:c2:e8:
59:8c:bf:f9:12:e7:00:c5:c0:01:3d:c4:70:8e:19:44:38:ba:
8e:6e:58:8f:36:0c:7b:4d:b7:eb:12:fd:c1:e2:24:00:fc:c6:
3e:16:a4:cb:8d:58:fe:98:fb:27:c1:25:22:6f:54:30:2e:fa:
a6:df:0f:82:ce:ff:84:da:8a:a5:3a:37:33:78:50:af:88:71:
dd:c2:77:46:b0:65:08:d7:5f:54:13:e5:34:01:fa:65:9a:d1:
91:c3:76:c1:a2:cb:ab:81:f3:57:85:2c:56:26:09:20:42:13:
e3:2f:70:f1:24:c3:75:b6:ca:40:25:f4:f3:47:e1:11:78:0c:
90:c5:a1:78:52:2f:d7:48:bc:a7:c6:c0:89:15:80:76:6e:ad:
6c:66:9c:8f:50:b8:57:2c:03:90:a6:ad:4f:40:d9:8a:9d:01:
29:33:50:6e:b8:92:a9:21:37:f7:92:e5:4a:f4:cb:f1:6d:66:
e7:35:6d:d1:db:b0:b5:99:e0:bc:6c:3d:9f:74:e2:72:bb:9c:
14:c8:b8:3e:7a:d3:5b:68:fc:8d:19:05:99:92:23:a0:5d:57:
db:69:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:38:17 2026 by rpki-client