Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: AHNvbvZGjM99XVEyIJWwbbcQBjXAioDbjDRtAMP/OTA=
Subject key identifier: B7:C0:04:8E:23:D7:24:AD:94:00:E7:B9:42:09:2A:2E:9B:3B:0F:FE
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019EBFC87F588BAB5722BDDAF40BE76DB2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 0177
Signing time: Sat 13 Jun 2026 07:00:48 +0000
Manifest this update: Sat 13 Jun 2026 07:00:48 +0000
Manifest next update: Sun 14 Jun 2026 07:00:48 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: flSU1Phqk/7DqoU3YzRIKFcG3rAwUNFU0LnREsAP9tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:7f:58:8b:ab:57:22:bd:da:f4:0b:e7:6d:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Jun 13 07:00:48 2026 GMT
Not After : Jun 14 07:00:48 2026 GMT
Subject: CN=b7c0048e23d724ad9400e7b942092a2e9b3b0ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:1f:9f:04:32:e2:db:20:4d:65:8b:05:9f:
48:6f:59:a0:a0:c3:f1:60:d6:54:4c:47:42:f3:56:
97:ac:68:b4:53:ac:db:a3:2c:31:9a:81:07:a6:6d:
c3:c0:46:44:f4:c2:88:a0:7e:af:84:d6:75:ee:c4:
1e:ba:a4:01:01:5f:35:8f:f3:3f:d7:16:77:cf:81:
39:10:f8:18:9f:fb:f9:b2:26:14:3e:df:f9:84:39:
26:94:df:95:04:6b:80:aa:b9:6b:5d:a8:ec:ac:93:
35:e2:11:9a:b7:9d:11:3e:ae:6c:14:db:2c:df:86:
2f:a4:75:3b:85:f6:34:29:c6:87:04:2c:56:80:68:
18:41:ad:e3:c0:48:35:eb:b4:d3:1f:6d:8f:9f:10:
09:6a:9e:c3:24:d2:05:ca:75:03:27:7a:2f:8a:bd:
f8:6a:12:70:0e:2d:3c:bc:d1:5b:63:9e:5c:bf:be:
55:43:ec:6e:89:9d:b9:2b:3a:c6:0f:1a:94:39:10:
d7:ea:e9:32:d5:1d:e1:c8:9d:34:b5:27:fe:3b:bf:
ad:0e:49:2e:a9:bb:a0:35:01:cd:91:f0:f1:8f:36:
4e:82:ea:d5:26:0c:44:9c:d8:bf:6c:b2:38:aa:50:
0f:b9:23:bc:cc:c0:d7:7a:ae:69:e2:d9:96:67:ef:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:04:8E:23:D7:24:AD:94:00:E7:B9:42:09:2A:2E:9B:3B:0F:FE
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:69:59:4f:78:04:fb:16:f7:df:85:82:d6:7f:ff:9c:9a:3a:
46:be:e2:9b:f8:4a:7b:5f:c5:3d:f7:1f:13:cb:1b:a9:e0:38:
40:1c:3d:5e:53:ea:16:23:3f:00:03:21:00:b2:98:9a:58:97:
39:4d:c6:bd:c1:8e:9a:6e:66:d9:4c:ec:85:cd:6c:54:8a:ad:
48:64:4c:af:11:9e:b8:cb:9b:19:40:3a:5a:c3:15:7e:60:13:
0a:54:59:0f:99:75:31:cf:e6:92:80:d5:f1:3e:5c:f7:5e:79:
0c:91:9d:99:3e:9a:a1:1d:b9:8e:7a:a3:a3:69:14:13:28:44:
b2:b5:a0:3d:91:87:ee:b6:9b:3d:92:3a:d8:02:6a:6d:cf:32:
1c:c5:b9:b7:bc:93:5f:1e:11:99:30:01:4b:f3:6c:0c:28:13:
79:e0:8f:e3:35:b6:fb:3e:db:b6:e5:98:00:8e:d3:a7:45:35:
ef:31:53:fa:0d:39:a4:6f:81:7a:97:85:f1:16:f3:5d:97:36:
d9:8c:d4:82:52:59:48:73:1f:41:ed:b4:17:d2:bf:b9:2a:9e:
b7:c9:cf:fc:42:a1:23:dc:11:bf:17:10:42:b9:5c:7d:92:46:
0c:be:53:4c:8c:11:f2:1f:37:d7:77:c6:ab:c2:f7:c3:05:d7:
af:1b:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:02 2026 by rpki-client