Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: PYRsuEKducnPxpWjXuQpoOgQy9rna58o0RzNhp4c3vg=
Subject key identifier: F0:1C:21:7B:E6:3A:45:33:B9:B1:44:C9:59:FF:62:A2:E3:53:AF:C4
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 01A0D4CB737794C5DD3ED7EBAE2377E13C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 028B
Signing time: Thu 24 Sep 2026 19:01:38 +0000
Manifest this update: Thu 24 Sep 2026 19:01:38 +0000
Manifest next update: Fri 25 Sep 2026 19:01:38 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: z0GDpvT51j79/TaYup3R0TrIBN/PHKvZmchTNu9bM9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:73:77:94:c5:dd:3e:d7:eb:ae:23:77:e1:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Sep 24 19:01:38 2026 GMT
Not After : Sep 25 19:01:38 2026 GMT
Subject: CN=f01c217be63a4533b9b144c959ff62a2e353afc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:85:1e:00:3c:ef:90:19:e7:3c:a3:40:ef:
a5:6c:87:2c:57:04:73:8e:82:51:dc:83:72:c0:79:
08:72:10:e7:0d:77:06:54:bb:8a:e3:af:17:be:14:
0a:c8:20:13:ee:6d:a5:91:80:b0:26:10:a2:78:83:
52:70:73:87:6a:54:0b:89:33:78:7f:a3:8c:ce:9d:
e3:0f:f2:66:7b:a5:cf:ff:b3:c5:86:ad:5c:5f:40:
d5:b2:f6:aa:b5:94:a2:b8:37:bc:eb:2f:12:39:34:
67:65:47:b8:59:ba:54:69:e7:29:96:c5:84:b1:41:
7f:b1:20:f2:7e:8e:9d:ef:79:c8:40:cf:95:8f:b7:
37:1b:28:63:14:dd:4c:80:4c:00:29:53:fa:a6:19:
48:df:8d:3d:ce:98:04:2c:b9:b8:45:bc:bf:aa:d9:
d2:3d:b3:69:3d:92:4f:a5:0c:94:04:96:fd:00:a6:
88:50:ca:23:6d:8d:96:24:ff:9a:7c:f4:ca:8d:ab:
1e:7f:0c:65:2a:62:7a:cd:81:35:58:3e:28:4a:12:
f4:10:c9:23:89:55:65:e4:04:7d:5e:e9:8c:6d:5a:
3a:93:42:b2:7e:3a:83:0d:30:b5:bb:27:0f:ab:cb:
93:1c:27:62:bc:bd:36:dd:fc:35:95:c0:30:c5:5d:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:21:7B:E6:3A:45:33:B9:B1:44:C9:59:FF:62:A2:E3:53:AF:C4
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:c2:f2:df:c8:9b:59:3c:49:c1:11:4c:2a:c0:e0:22:ff:
6d:e0:d3:84:39:17:88:22:78:ad:ef:20:71:9a:4c:d5:88:59:
c0:a0:d3:52:51:8a:42:1f:59:76:07:2c:db:30:b0:8f:de:63:
d6:08:9a:d7:cd:d5:9b:17:ed:5d:82:27:23:d6:39:41:8a:4f:
f0:6c:01:52:de:06:23:de:94:d6:48:fd:fe:b3:4f:29:14:81:
04:a5:85:c5:af:2e:9e:39:49:35:2c:89:7d:af:32:cb:15:bb:
98:69:fa:04:e0:f0:d3:1c:79:a8:24:91:41:ec:cc:dd:9a:82:
5b:30:4e:3b:04:a5:c4:0b:eb:aa:cd:47:81:af:79:a0:a9:25:
52:b9:1b:0b:31:1c:9f:b9:43:80:35:a5:6e:b8:0c:7a:fb:af:
a9:09:22:10:0a:b9:fa:48:c2:e2:ca:46:0c:1f:12:df:7c:9c:
7e:dd:0c:eb:d6:79:31:4e:68:45:6e:e2:d7:14:89:5e:25:74:
46:8e:8e:dd:3d:c2:45:a3:7e:f1:e0:7f:92:16:64:32:f0:4f:
92:22:19:24:8d:a8:e5:1b:40:7d:df:d3:60:85:65:39:ba:35:
3c:0d:b3:aa:f7:71:b3:55:42:77:00:d3:98:a0:d6:d9:27:91:
ad:7b:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:46:01 2026 by rpki-client