Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: WnCG68EZvR4AzgnknbAdOhkyZUR54qvSJeE5OxEzugs=
Subject key identifier: 3E:7F:F5:2F:0D:EF:BB:10:1B:3A:11:22:20:BD:05:7A:9D:B4:FC:EF
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019D9E1AB7AAB073A2C3B9355B5948B5D471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: E1
Signing time: Sat 18 Apr 2026 01:00:44 +0000
Manifest this update: Sat 18 Apr 2026 01:00:44 +0000
Manifest next update: Sun 19 Apr 2026 01:00:44 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: ewoOk+1xHtV5XWM4zzaHeoct1PRyvrpCCv/tPjsUWnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1a:b7:aa:b0:73:a2:c3:b9:35:5b:59:48:b5:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Apr 18 01:00:44 2026 GMT
Not After : Apr 19 01:00:44 2026 GMT
Subject: CN=3e7ff52f0defbb101b3a112220bd057a9db4fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:c9:3b:76:5e:e7:95:01:42:e6:60:dc:c9:
d3:fb:9a:2b:86:0a:73:9d:bd:47:1b:fb:6f:b2:5e:
8e:01:0d:d4:b5:bf:f8:4c:08:0a:e6:95:be:5d:35:
c7:7b:1a:f8:ce:69:0d:89:f8:7a:4f:84:b0:f3:5d:
c3:66:d0:31:c9:0b:03:80:a6:cc:d8:a4:58:88:fc:
9c:7c:f7:3b:f3:2b:7e:3e:a9:ec:a7:36:6e:65:29:
e8:6a:43:a3:83:f6:b7:9d:27:0f:7a:54:8f:30:a8:
62:ae:0f:24:b4:bd:d7:6a:84:9b:47:c3:d6:de:12:
6b:6f:8d:2c:b5:f2:00:3d:17:ca:87:62:6c:e2:c1:
44:1b:c7:bb:1b:a6:86:1d:52:fa:28:36:03:76:07:
cc:64:ff:08:97:9e:52:63:d0:9e:6d:13:ef:90:5f:
02:2a:7b:1c:81:a3:23:73:b7:88:2a:0e:c0:3c:57:
d2:66:6e:83:cf:62:63:09:95:98:5d:c6:d0:60:fb:
c3:c5:86:88:1b:bb:24:a9:c2:1d:93:a8:ce:fb:b6:
45:d3:ef:62:92:b0:a6:c6:f9:b5:0c:1e:c9:22:77:
d7:d2:01:9b:b0:b0:49:87:6c:54:12:eb:bc:06:c3:
9b:6d:26:6a:81:d2:8f:8a:6c:bf:c9:d3:4d:7f:f4:
8a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:F5:2F:0D:EF:BB:10:1B:3A:11:22:20:BD:05:7A:9D:B4:FC:EF
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:c4:b3:f7:d2:97:80:c1:bb:5d:6d:98:e6:5e:0d:4c:bd:
8a:b2:ab:c0:63:7c:50:c7:23:69:26:c1:c6:e0:75:0f:9a:4e:
59:ad:c6:38:15:f4:6a:66:d5:c1:56:d8:d1:0a:08:0f:28:8f:
ff:b9:6a:36:16:43:4a:a9:0b:4b:54:a9:b0:cf:c8:74:7a:05:
e9:64:26:b2:5a:83:cf:56:6d:3e:fd:c4:f5:b9:b3:68:04:10:
c5:7b:4a:8b:0e:28:b8:85:5a:7c:83:1b:38:d8:a9:b4:f9:44:
d7:f1:28:81:81:c8:97:76:c3:af:49:7b:03:0c:62:51:12:a5:
92:34:50:66:65:26:a9:e5:b2:91:8b:9a:5d:27:88:6a:d6:5c:
28:3f:ff:bd:72:91:e9:69:7e:10:fe:71:bc:7a:ec:11:ad:fa:
b7:5e:c0:69:53:66:07:b7:31:78:0c:52:7a:a2:33:c6:99:16:
5b:90:f7:05:c9:45:42:b0:7d:7c:d6:13:ab:1a:7e:b0:0d:58:
7c:53:65:6a:cd:15:f0:c1:02:79:7f:7f:77:b2:75:71:05:2f:
ab:6e:cb:3d:11:c2:26:c2:19:8c:f0:ff:5e:34:e5:ca:ba:60:
8a:bd:fd:59:53:5a:1c:2e:0c:6e:8e:db:f7:df:5c:a0:ee:d5:
17:f5:ee:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:38:07 2026 by rpki-client