Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier: GD7jWzW68w9eO2BAzKi7of1odngv7eunHx9fK9j0GgI=
Subject key identifier: AB:5D:EC:B2:EA:51:97:2B:69:D4:78:90:07:F5:F3:56:5C:15:61:6D
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 019D28BBD51FB52328962B048C0E2E54CE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number: 058E
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: hvy1i0OtL7pp700YeXojkoG+CaE9Hxh8E+z+3HRhfIs=)
2: nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa (hash: NleUca8CC+8N3vwArPhRJ2zlLJElpiDe/ATFPORPOnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d5:1f:b5:23:28:96:2b:04:8c:0e:2e:54:ce:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=ab5decb2ea51972b69d4789007f5f3565c15616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:ef:de:fe:31:11:12:54:91:03:5c:cc:24:
aa:b1:dc:26:20:32:79:46:f2:ed:9e:e3:9a:21:73:
1d:68:58:0a:dd:0a:72:be:81:4f:b2:d8:22:77:6e:
a1:90:f3:25:3d:86:fc:03:2b:65:41:20:03:4e:61:
ed:fc:b8:d7:83:00:79:74:a8:cf:14:aa:85:02:43:
9b:ed:1c:2b:d4:32:39:ac:2b:ad:ec:60:4e:86:1c:
b2:ae:16:bc:f7:17:cb:0a:b6:5c:b3:8d:97:cf:34:
91:73:ff:c0:7a:eb:d7:2c:5c:28:1b:20:57:e9:4f:
c2:9e:22:bd:ea:91:d9:d4:e5:de:5b:e0:e0:ad:67:
1f:0e:5f:d0:65:5a:d2:eb:6c:b3:cb:93:79:a2:76:
af:e1:91:8c:ff:9d:2f:9c:e8:eb:91:21:06:56:70:
d1:dd:dc:07:20:28:4b:80:3f:56:b4:c4:e5:6b:d6:
bd:a6:53:9c:45:3e:46:8c:b5:2c:5d:e4:4b:73:35:
71:31:0f:9b:4b:d3:a2:b8:07:77:6b:1c:7d:c3:10:
9f:43:a5:30:18:4f:37:fe:c5:8f:56:fd:f4:da:81:
65:cd:b6:71:7d:43:1b:5b:2e:5a:22:2e:fc:38:9e:
40:fe:de:59:86:35:a0:fb:62:46:35:57:bb:cc:91:
f7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:EC:B2:EA:51:97:2B:69:D4:78:90:07:F5:F3:56:5C:15:61:6D
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:09:70:cb:df:56:06:53:c5:d4:66:6a:7b:7b:7a:13:82:
aa:34:b9:d6:c7:39:50:b5:53:09:08:7f:19:d9:60:d5:d0:eb:
1e:82:2e:c3:fc:e3:f7:13:48:00:6d:e1:aa:af:f2:9f:84:33:
66:2a:b3:01:3b:93:49:f0:93:c0:43:cb:fb:92:21:73:17:73:
86:27:df:b8:01:73:a2:46:7f:e3:03:f9:52:6d:e3:96:69:78:
a2:43:6b:c7:23:95:45:cd:d3:3e:36:76:24:e2:5b:c5:31:2c:
1a:f5:bf:1f:e8:ab:cb:a2:a4:4c:f0:22:07:06:90:83:27:06:
44:44:99:ba:fa:74:ab:00:23:7f:2d:f6:e3:58:f5:6c:91:1d:
b9:7b:85:21:ed:a6:66:2a:17:da:07:09:68:de:2f:ba:07:c0:
cf:d0:3a:b2:09:6c:1e:3c:08:34:8a:e4:7f:87:87:68:e8:6c:
86:43:3c:67:a0:51:ca:9b:8c:63:06:26:53:18:55:be:68:73:
1b:27:81:12:b9:c4:d7:9c:2c:25:30:2c:ec:91:d2:81:ed:f0:
e8:1a:d5:b5:31:12:1d:d9:bd:23:0a:69:1e:31:ac:31:65:d9:
e2:f0:77:78:ab:8a:ff:0f:02:cc:92:cd:51:70:fc:25:3c:f0:
12:55:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:12 2026 by rpki-client