Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: XiKBCStAM1IDAFJTOPxaLc2OaSueDQy5770yTuCdA38=
Subject key identifier: C9:05:64:0E:65:82:47:29:A7:33:40:39:E8:3B:7B:16:80:75:BF:67
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019FA975528A4DA4BD1358A26C801EF0BC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 01F0
Signing time: Tue 28 Jul 2026 16:01:05 +0000
Manifest this update: Tue 28 Jul 2026 16:01:05 +0000
Manifest next update: Wed 29 Jul 2026 16:01:05 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: p39UNCvZObV39UAuXrl8jBW3jAgC9polqDix6F4Kjes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:52:8a:4d:a4:bd:13:58:a2:6c:80:1e:f0:bc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Jul 28 16:01:05 2026 GMT
Not After : Jul 29 16:01:05 2026 GMT
Subject: CN=c905640e65824729a7334039e83b7b168075bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:5f:17:da:f1:a3:8e:82:c8:79:65:d4:bf:
95:d4:da:99:03:b6:84:c7:24:17:ad:ba:e9:5c:ce:
31:17:f6:62:2b:00:88:e7:81:32:32:2d:15:3c:87:
8b:f7:ec:8e:a1:2a:e4:6b:4f:5e:66:aa:9f:88:db:
45:42:74:61:13:1e:df:d7:2a:28:40:ae:9a:6b:97:
68:63:23:4b:57:9a:34:5f:18:af:d5:6f:22:ff:b5:
ed:2d:f8:64:00:4c:30:77:71:be:d4:d1:c2:c7:82:
3e:f0:48:74:12:60:2f:39:93:16:21:8f:97:52:11:
78:3c:0d:dc:66:0f:b8:0d:ac:13:fc:8b:d8:3c:8b:
80:c2:fc:fc:3b:87:bf:45:91:f6:55:f4:fc:b0:f9:
ff:35:7d:88:97:90:93:32:f6:c5:d0:62:f7:79:96:
3a:b3:11:51:d8:05:8b:5d:42:aa:11:62:22:a8:e8:
ee:2d:39:c2:e2:e2:9e:11:60:d5:ec:60:bf:8a:96:
a6:c6:a9:76:94:15:d6:be:58:72:ae:48:d0:3a:4b:
1b:82:10:aa:45:48:94:b1:c0:db:01:ba:7d:be:1d:
7d:ae:13:51:69:62:c3:02:17:00:1c:bf:7d:6c:4f:
b5:e9:03:c9:32:5f:da:60:c0:a5:ee:9f:4a:c0:42:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:05:64:0E:65:82:47:29:A7:33:40:39:E8:3B:7B:16:80:75:BF:67
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3f:74:79:e5:2c:a3:67:0c:24:25:58:54:de:0f:a8:bd:36:
35:ad:4d:fe:e7:f3:cd:fe:7c:57:42:76:00:b5:a3:e9:df:17:
1f:7e:8b:00:d6:4f:35:a9:c7:ee:59:48:4d:70:f7:a2:5e:a2:
8f:c1:9b:89:6f:95:26:e9:15:0e:84:8a:35:52:d8:6c:f3:a8:
45:a6:13:28:db:84:44:77:e2:07:38:e6:c9:65:29:fe:5e:71:
83:a2:54:3a:9f:06:21:a7:48:a1:16:ae:7a:44:8f:ac:1c:6f:
8b:b4:51:1c:36:24:93:76:4d:e5:cd:27:1e:de:aa:19:32:23:
9b:9d:3e:a7:d6:38:c2:71:2b:25:3f:64:af:25:bc:73:01:fd:
81:7a:c7:52:25:86:37:66:9c:81:6e:43:cd:e9:6d:2c:ef:4c:
4d:81:20:da:94:c3:ce:7c:2a:07:f6:fb:2e:d1:f3:9b:ca:6c:
e7:63:29:19:17:73:d1:47:bc:3f:33:8b:53:5d:d5:d4:75:84:
58:5f:d4:e6:dc:7b:dd:3d:7b:db:17:1b:6f:84:f5:66:1c:24:
b6:57:c3:e8:00:a6:c8:24:f3:f4:af:5e:22:fa:a6:5b:83:09:
5e:6b:be:f3:9d:cf:78:e1:4a:4e:76:b9:81:97:d4:2a:91:d8:
e8:e6:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:14 2026 by rpki-client