Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json)
Hash identifier: 4yDSUUj9lHEQKZza6+uoTtbTsypuZZPh0maEY6bQDa4=
Subject key identifier: 84:6E:88:08:59:D8:F6:A6:B8:1A:61:B0:D9:E8:AD:17:CC:2F:05:F9
Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Certificate serial: 01A1555328B1D85FFCE2E1AB871DEAC4617B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
Manifest number: 03BA
Signing time: Mon 19 Oct 2026 18:01:15 +0000
Manifest this update: Mon 19 Oct 2026 18:01:15 +0000
Manifest next update: Tue 20 Oct 2026 18:01:15 +0000
Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=)
2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: 3ucSRhWgkHeDxmFbeh/5vdu4fZTBMhqiaa3Xz1C8fCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:28:b1:d8:5f:fc:e2:e1:ab:87:1d:ea:c4:61:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc
Validity
Not Before: Oct 19 18:01:15 2026 GMT
Not After : Oct 20 18:01:15 2026 GMT
Subject: CN=846e880859d8f6a6b81a61b0d9e8ad17cc2f05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:14:41:36:c6:b5:4f:94:6e:49:94:9e:87:
96:08:e0:72:60:fc:ef:a3:a3:78:db:2f:0e:4d:3f:
2d:35:9d:7e:18:96:e8:77:c5:b6:e9:ba:fb:d4:9c:
fa:36:ee:63:25:8e:b1:ab:cc:63:15:e4:56:18:6e:
0c:23:a0:1e:d0:61:09:55:15:12:10:5c:a7:f8:01:
54:a8:5f:78:e2:ca:60:61:2a:62:6c:57:b9:4e:5c:
2a:7f:24:0e:5b:7a:a2:08:c4:ff:5e:c5:09:17:69:
52:e0:9c:d6:af:1e:37:3b:18:b8:f9:70:fa:24:54:
2e:13:dd:08:a9:80:12:b3:01:06:d9:f5:7b:94:5a:
db:3f:5a:d0:38:25:a6:07:09:f7:00:fe:2e:72:6d:
9a:b4:f8:10:e4:e0:5e:60:86:3e:18:1b:f4:cc:56:
80:e4:a1:3f:53:25:db:b7:36:fe:90:24:a8:69:c6:
f2:b5:9a:9e:8c:a0:e8:69:cf:78:6a:d6:b4:90:47:
07:5e:d0:45:33:27:91:1c:3b:2c:b7:f7:32:3f:af:
ab:bd:18:bb:c6:28:df:3b:3b:66:42:a5:4b:ce:83:
a2:46:73:74:59:72:05:ed:62:e2:fa:c2:a8:c9:d3:
23:70:b5:fe:29:ba:16:54:93:49:eb:e4:e6:5d:68:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:88:08:59:D8:F6:A6:B8:1A:61:B0:D9:E8:AD:17:CC:2F:05:F9
X509v3 Authority Key Identifier:
keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2f:7a:8a:21:0a:9f:1a:df:d0:ce:d8:ad:42:c5:44:a8:29:
e8:fd:d5:fa:cc:b6:64:0a:5d:d2:23:0e:d0:3b:20:4b:6e:3c:
87:bd:67:46:34:81:8b:89:e0:57:09:82:c4:e3:c3:8f:05:48:
67:ab:3a:2f:c1:1f:99:ad:26:df:53:ce:da:c8:2b:1d:d5:9e:
6f:f0:ee:3b:a3:2a:5b:01:fc:63:55:bf:b0:37:c6:70:68:06:
6b:5e:b5:38:e2:2e:76:71:e3:9b:df:8b:c7:bd:e7:0b:01:df:
b6:b4:ee:33:07:d2:37:84:71:a3:0d:91:27:f5:c2:0f:28:96:
d4:34:28:7c:55:15:b1:ab:44:0b:f6:fe:7f:4d:c5:17:0c:f9:
98:60:0e:1e:57:69:db:95:f0:ea:e1:89:e2:68:a0:b6:5f:98:
d8:cb:a0:43:13:b7:3a:ac:9d:61:82:27:67:1f:7a:88:e0:40:
f5:b7:60:7b:51:90:ca:c4:8a:f7:84:16:f1:b1:04:6b:51:fd:
ae:43:54:59:32:81:39:d0:da:36:1f:3b:31:a2:66:83:20:7b:
42:90:27:88:6f:84:f1:d5:05:e3:80:be:f9:67:2c:48:ca:cd:
89:34:b0:bb:90:2c:a9:df:f7:63:91:ad:28:64:cd:40:93:45:
5c:93:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:02 2026 by rpki-client