Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: kBSda+yoSbX7JwOzvVjg6mSmTRDSmLZS5ms/RjHoSH4=
Subject key identifier: 19:CD:E3:E0:86:3C:13:65:5B:E7:58:5C:29:08:7E:46:D3:5B:1C:1D
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019CAAC6A7AAF0B0EE7C03A95EBFA645FA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 63
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: xcWIgdSvLd7UIShNpFK+aHRuFKPkmDmNVMxXXOpELtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a7:aa:f0:b0:ee:7c:03:a9:5e:bf:a6:45:fa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=19cde3e0863c13655be7585c29087e46d35b1c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:3a:d3:d1:62:01:b9:8a:60:0b:d4:a5:13:
a1:77:82:b8:da:e0:94:36:9c:52:59:8a:60:b0:58:
90:0e:37:57:bb:94:0a:8d:0a:57:d6:73:67:64:9b:
05:af:1a:aa:5d:b0:5b:36:fb:35:de:d9:57:d7:dd:
a3:64:ff:f8:12:67:0d:b7:99:e3:4f:01:56:f1:48:
f4:07:3e:c0:66:17:9b:bb:b6:63:43:cd:54:0e:ca:
38:c0:10:5d:cd:59:17:44:9d:da:f4:e4:84:ba:33:
94:70:85:ea:fd:28:dd:d0:98:22:1f:85:14:a5:32:
98:d5:fc:c0:7c:9a:67:62:39:5a:90:7f:89:cb:e2:
fc:40:b3:a3:17:b4:8f:3c:02:1a:60:08:7b:d0:12:
27:06:76:69:ee:70:c4:04:c6:1f:91:92:6f:35:77:
22:7c:2e:0c:9e:aa:e8:f8:f2:ee:14:94:b7:89:b9:
7c:d8:78:84:c2:b5:a2:ba:a9:7d:b6:f6:3b:b2:f4:
86:99:0e:87:20:22:bb:1b:cf:3d:17:2f:54:1c:b5:
20:86:80:db:55:5e:74:2e:41:b8:93:c6:83:6c:9f:
b6:76:80:29:6e:21:30:61:85:ca:77:48:2a:46:72:
31:ed:fa:dd:91:91:2e:6c:3d:3f:58:06:57:0a:79:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:E3:E0:86:3C:13:65:5B:E7:58:5C:29:08:7E:46:D3:5B:1C:1D
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:e0:33:3c:df:08:9f:84:08:7d:d4:f9:da:46:05:d7:dd:
82:6a:7f:1d:d9:35:7b:65:dd:5b:68:c5:43:f9:a5:65:33:5a:
b7:05:31:43:46:e8:e2:41:3b:1f:1d:af:02:6c:b4:eb:05:d8:
df:d9:61:08:b3:71:58:f7:d7:7e:f4:00:2b:81:ea:da:61:cd:
de:93:77:ad:c0:f0:b2:c4:6f:f4:12:7a:6d:f4:68:cf:ea:9c:
6a:2e:b1:53:a1:1c:4d:41:be:f3:4c:df:be:70:af:b2:14:23:
40:e7:f5:be:05:c7:c5:b3:ba:66:45:a2:4e:69:7d:40:e0:d4:
d9:38:9c:e6:e2:74:d6:e3:e6:dc:d8:62:c3:c8:b0:28:82:31:
80:01:36:2b:45:4d:99:fa:ac:10:1d:e5:76:95:31:f9:b7:d3:
87:1a:30:2c:51:b7:7e:bf:ca:ae:25:16:3b:86:c0:57:b0:79:
c1:da:36:8f:55:4a:27:a8:66:44:1e:58:0c:41:b1:64:bc:bf:
f7:93:f9:77:4c:3a:20:d3:86:33:22:d2:d4:a1:6c:e6:fa:47:
3f:6a:61:be:08:c7:3f:8f:76:52:16:74:6e:71:46:1e:d3:c5:
e6:ea:9d:51:6b:ab:b7:2f:d7:15:7f:95:56:17:2d:44:fa:28:
2e:f4:3f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqeq8LDufAOpXr+mRfqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDgyNWVjN2JkMzNhMDIyMDRjZDFiYzE1MzVmYzFjYTIx
NTA5NTAwHhcNMjYwMzAxMTkwMTExWhcNMjYwMzAyMTkwMTExWjAzMTEwLwYDVQQD
EygxOWNkZTNlMDg2M2MxMzY1NWJlNzU4NWMyOTA4N2U0NmQzNWIxYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Q609FiAbmKYAvUpROhd4K42uCU
NpxSWYpgsFiQDjdXu5QKjQpX1nNnZJsFrxqqXbBbNvs13tlX192jZP/4EmcNt5nj
TwFW8Uj0Bz7AZhebu7ZjQ81UDso4wBBdzVkXRJ3a9OSEujOUcIXq/Sjd0JgiH4UU
pTKY1fzAfJpnYjlakH+Jy+L8QLOjF7SPPAIaYAh70BInBnZp7nDEBMYfkZJvNXci
fC4Mnqro+PLuFJS3ibl82HiEwrWiuql9tvY7svSGmQ6HICK7G889Fy9UHLUghoDb
VV50LkG4k8aDbJ+2doApbiEwYYXKd0gqRnIx7frdkZEubD0/WAZXCnlMUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnN4+CGPBNlW+dYXCkIfkbTWxwdMB8GA1UdIwQY
MBaAFFQIJex70zoCIEzRvBU1/ByiFQlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYt
NWYyZjE1YmUyN2M0LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYtNWYyZjE1YmUyN2M0
LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCXgMzzf
CJ+ECH3U+dpGBdfdgmp/Hdk1e2XdW2jFQ/mlZTNatwUxQ0bo4kE7Hx2vAmy06wXY
39lhCLNxWPfXfvQAK4Hq2mHN3pN3rcDwssRv9BJ6bfRoz+qcai6xU6EcTUG+80zf
vnCvshQjQOf1vgXHxbO6ZkWiTml9QODU2Tic5uJ01uPm3Nhiw8iwKIIxgAE2K0VN
mfqsEB3ldpUx+bfThxowLFG3fr/KriUWO4bAV7B5wdo2j1VKJ6hmRB5YDEGxZLy/
95P5d0w6INOGMyLS1KFs5vpHP2phvgjHP492UhZ0bnFGHtPF5uqdUWurty/XFX+V
VhctRPooLvQ/zw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:24 2026 by rpki-client