Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: 2RjYPC7HkqOxGOb2Qe+RzFtKsCKsLQyHJCNCeCBEz/c=
Subject key identifier: 25:61:71:1F:C7:BF:8D:39:21:83:F5:1A:52:7F:E2:22:48:B2:31:A8
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 01A0D2DE73338BC29A2BF44E08420927AB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 028A
Signing time: Thu 24 Sep 2026 10:03:08 +0000
Manifest this update: Thu 24 Sep 2026 10:03:08 +0000
Manifest next update: Fri 25 Sep 2026 10:03:08 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: kisVJl7PeDCCcsloeKG5QEW+jFIU8vgNeBDBHbwB+G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:73:33:8b:c2:9a:2b:f4:4e:08:42:09:27:ab:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Sep 24 10:03:08 2026 GMT
Not After : Sep 25 10:03:08 2026 GMT
Subject: CN=2561711fc7bf8d392183f51a527fe22248b231a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:e5:b6:d5:0c:c0:d6:fa:70:80:8e:da:a5:
b6:ca:c5:11:ab:b3:3d:d9:95:89:0a:96:16:ab:55:
72:c6:b7:d2:96:1b:4c:97:6e:d0:01:3c:72:75:3b:
63:49:18:a3:18:9f:96:db:ba:5c:6a:02:db:c3:e0:
ab:7a:6c:d9:c7:2e:ab:e6:e4:a5:fa:4d:d6:b9:8c:
87:0d:a2:5b:c8:86:bb:c8:ac:21:49:06:01:1e:a5:
d9:b5:93:d5:18:89:38:18:cc:87:a2:19:66:14:e8:
0f:df:7f:30:c4:9b:95:2d:44:99:c7:87:89:01:d2:
82:a9:4a:7d:78:db:4a:67:2c:a3:fa:15:e6:08:67:
29:83:d4:8c:2b:84:f3:21:b4:57:f8:61:fe:c6:3b:
af:a7:84:d7:0b:65:79:2a:b6:e4:d7:1b:ea:1c:40:
bd:9c:d6:35:60:c9:b3:08:fc:bf:41:10:13:5b:90:
d4:25:dc:ae:dc:b7:04:3e:4f:64:66:50:98:11:23:
b9:a4:5a:8e:cb:70:15:aa:ad:ec:fe:30:28:f0:ce:
d5:ca:d6:c8:e6:60:14:8c:01:e0:ca:ea:da:da:3c:
d0:d7:c5:81:91:56:49:df:3e:4d:50:58:8c:b3:a9:
d9:f1:f6:5f:4e:ec:68:39:c4:0e:b2:29:55:8c:c4:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:71:1F:C7:BF:8D:39:21:83:F5:1A:52:7F:E2:22:48:B2:31:A8
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4d:b2:46:34:c1:43:0c:e6:3a:67:1a:ac:95:cf:cb:72:67:
58:99:45:23:d5:72:cd:e8:d4:52:ad:7c:d8:7c:e7:2c:fa:6e:
b9:d4:85:44:d1:c5:65:02:8d:21:81:3a:b3:65:97:ce:ce:9e:
37:d6:6b:1a:15:32:7f:16:b0:29:61:dc:4e:02:11:fa:cf:01:
e2:af:62:35:bd:24:de:8f:08:6f:5a:8c:a0:65:ac:6f:b4:1a:
a4:16:f8:ef:eb:3d:3b:5f:00:2e:00:9c:02:11:d1:38:06:aa:
78:83:ae:11:fe:ad:06:7e:90:6d:88:57:83:f0:11:07:81:96:
c3:c6:a3:1e:60:4e:00:04:57:8c:84:15:27:4d:25:3a:7d:8a:
63:d5:d8:80:f5:3c:8a:f2:0f:9e:c7:ca:ad:3b:53:fe:91:12:
2b:3c:ca:40:89:4c:14:7f:81:17:f7:89:aa:2d:a3:ab:cb:ac:
19:a9:66:b7:4b:91:7d:ee:f4:e3:4b:df:80:36:65:42:02:52:
9f:1b:dc:4d:96:e7:c4:02:43:b5:43:d6:8b:2e:e1:0b:9c:58:
c3:f2:42:2d:40:e3:d5:36:8f:8d:0b:28:ab:6d:0a:32:bc:43:
4c:0c:a8:fc:c6:69:b1:bb:17:0b:05:09:e2:26:a7:bc:dd:7d:
75:b6:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:22:15 2026 by rpki-client