Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier: fKs7W6B4M6fGNakblQX6dhOEoX/sbDjIr85AunliYTo=
Subject key identifier: 0E:3E:3F:AE:23:24:05:91:0A:16:E3:AA:28:CF:23:FB:F4:B1:37:D2
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 019CAB347BEB17E2946E699D0D95A2ABF42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number: 054D
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: tF7EwnWfB+1lfB6nwthSASuJuFlZgkZFcZ0XIupu37g=)
2: nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa (hash: NleUca8CC+8N3vwArPhRJ2zlLJElpiDe/ATFPORPOnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7b:eb:17:e2:94:6e:69:9d:0d:95:a2:ab:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=0e3e3fae232405910a16e3aa28cf23fbf4b137d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:59:c6:60:08:ce:d7:58:94:1d:16:b0:e6:
5a:1f:0e:e9:05:48:97:f7:44:4f:c3:0c:b5:f3:2e:
74:21:b7:22:79:74:15:c6:5c:ec:ab:7e:10:ec:81:
29:a9:21:f6:7d:23:61:bb:2e:51:df:b6:5f:d0:3b:
a5:4f:8f:fe:e0:f5:bf:09:70:7e:44:0d:81:8f:12:
57:24:eb:36:db:23:e2:96:24:b5:d9:ca:49:66:64:
d3:f4:24:af:8f:25:7a:cd:48:01:43:8a:4c:47:b4:
88:9f:84:77:c0:fe:bd:7e:dc:0a:ed:38:f7:1e:3f:
c6:bd:99:74:f4:b8:31:2b:47:7d:6a:49:58:7a:6e:
d5:44:03:26:6e:6a:ca:34:5b:d5:b9:e0:3b:40:55:
91:28:b9:34:8a:06:2b:89:6e:a7:96:02:48:ad:cd:
1e:8e:41:b4:47:70:30:cb:8e:2c:06:c4:58:96:c8:
18:bd:0d:3b:7b:75:dc:c8:91:1f:92:6a:e9:0c:ca:
73:0b:04:ed:62:57:4b:fa:a3:cc:b4:5a:a8:f3:9e:
60:d4:e0:b0:92:d3:a4:f7:9e:75:cc:44:15:6f:c1:
46:3c:a1:a7:a7:b8:18:eb:c2:96:77:ce:54:73:93:
5d:6a:12:2a:6e:b9:19:00:2f:4a:05:47:5a:c2:19:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3E:3F:AE:23:24:05:91:0A:16:E3:AA:28:CF:23:FB:F4:B1:37:D2
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:44:a6:08:78:ad:ea:fa:69:51:88:f1:39:50:65:55:52:
11:40:8a:10:18:66:64:58:b1:2c:7a:29:15:f4:54:1c:53:56:
e3:03:4d:2d:dc:2b:fc:44:9d:87:63:df:4f:fb:53:b9:d0:89:
f0:17:4c:c9:40:ed:b8:8b:aa:76:e3:c8:f7:5d:35:0e:01:c2:
47:ce:66:2b:dd:dc:1b:99:c6:5e:f7:61:38:f6:82:17:04:13:
f7:3a:f0:7c:28:a2:9f:23:58:a9:ed:42:76:5d:b0:06:e6:bc:
bd:9d:f3:aa:e4:31:ab:71:fc:68:00:8d:2e:67:d2:0d:a8:ed:
b1:6e:5c:4a:5b:5e:0d:5b:f2:46:16:f6:ca:0c:b2:d3:40:37:
15:9e:a5:d3:34:41:b1:16:0d:48:47:f1:5b:53:c2:c4:b7:62:
5f:6e:7e:ca:19:96:77:5c:1c:5d:41:dd:39:fa:27:b7:db:56:
6d:8c:5e:79:32:b8:e0:a3:9f:f4:62:30:09:51:2d:e3:36:04:
c9:f4:7f:e1:5e:45:9c:6c:4a:e6:09:6a:7c:d1:e0:44:d9:e9:
b9:0f:b5:75:a7:45:6b:af:4f:ed:e4:87:c3:8a:91:b7:70:35:
81:de:23:45:41:48:de:45:e9:d7:ee:33:45:67:95:bf:51:a6:
53:74:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:06 2026 by rpki-client