Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
File: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft (raw, json)
Hash identifier: B8oIO0aGcnzJWmujDMB3DAWXFS1Xv7oOOCSSjriH2sU=
Subject key identifier: F0:4A:57:D5:F6:D3:71:45:44:8D:1C:EF:24:A2:EC:E2:30:FD:11:46
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 01A1DC82214BDB274AB186FB5FB3E507BABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 00:01:18 +0000
Manifest this update: Sun 15 Nov 2026 00:01:18 +0000
Manifest next update: Mon 16 Nov 2026 00:01:18 +0000
Files and hashes: 1: 6CXf0Qte70UcGw2sCzSFKSm4wF4.roa (hash: qMdOB3YMaPu1vZa6PtvMLCo+SZXp36O5lNGzdlEye9w=)
2: VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl (hash: tX96RLPOxj+DvkkcuEHYRLRV2s1IbyL3q6gUfVn03hA=)
3: mgOOOuVNV7MiGLp-CEOWEBJLcvg.roa (hash: Hpy4oqYgeXBaWnETXpdB+jmt4iNAOroBspo32HVLQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:21:4b:db:27:4a:b1:86:fb:5f:b3:e5:07:ba:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Nov 15 00:01:18 2026 GMT
Not After : Nov 16 00:01:18 2026 GMT
Subject: CN=f04a57d5f6d37145448d1cef24a2ece230fd1146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:a5:a8:4a:00:f3:42:28:8d:12:ef:fc:3f:
00:80:1e:d2:12:f7:23:cf:10:91:7a:29:f3:7f:23:
c0:bb:dd:dc:fa:09:84:c4:d9:4a:68:53:fe:83:b9:
c5:78:43:c4:74:47:b6:f1:89:0b:07:19:2e:ac:5c:
fd:cb:38:8a:9a:50:15:74:14:70:a8:cc:36:14:20:
f7:13:f6:6d:f4:15:f3:8a:14:13:3b:4a:f1:75:93:
c8:56:95:64:80:5e:b9:78:7a:20:e1:33:f4:d3:0e:
b6:b5:f6:bd:c9:64:f7:ff:f9:9e:00:a1:f2:f9:cb:
eb:ae:ef:6f:a9:cd:9e:68:89:f5:4a:59:91:9c:00:
46:45:67:51:b6:12:f4:06:b1:32:d4:a2:c4:37:fb:
db:7d:ec:04:78:92:f0:4a:99:5e:b2:6e:bb:6c:75:
83:2b:0e:47:77:16:b2:e0:d2:5a:a9:9f:ad:16:d2:
53:28:79:78:1a:83:e5:a0:1a:24:a9:85:a0:38:2c:
13:1d:8b:85:d9:71:18:52:1e:ee:b9:e6:cd:5c:6b:
ce:f9:7f:41:87:0b:af:7c:f8:92:51:80:89:fe:88:
63:6e:38:55:56:0c:5a:ab:e1:d2:25:68:5b:49:2c:
87:80:df:19:c2:97:96:d1:b9:f8:41:e7:12:2d:02:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:57:D5:F6:D3:71:45:44:8D:1C:EF:24:A2:EC:E2:30:FD:11:46
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:83:b4:3a:8a:72:9b:32:c3:00:2d:2e:fc:91:20:42:65:63:
bb:00:a5:1b:70:e7:ad:ed:0d:dd:2c:c1:0c:11:9a:f9:c4:05:
5a:27:66:14:6b:05:a6:4d:54:47:4a:23:cf:98:bb:34:23:11:
02:20:34:f2:98:1f:d1:f6:61:80:69:76:61:41:c3:1d:11:17:
01:75:48:db:bf:0e:de:69:73:3b:4a:8e:b8:ac:19:ed:88:bf:
7e:a7:32:f1:95:36:83:f7:0c:6b:34:4d:d2:e5:61:bf:26:bc:
f7:fc:f5:09:ac:51:12:39:93:c6:6c:a7:69:7c:9a:82:74:c5:
91:32:d2:44:6c:aa:5d:63:c5:d2:95:33:8c:f8:51:90:27:db:
0b:c8:12:e2:67:82:7c:8a:01:37:15:81:23:3b:f6:0b:0e:09:
e6:f1:2b:35:c1:b6:45:8e:02:4d:8a:cd:fe:27:a4:13:79:dd:
3e:af:ad:df:9f:e0:91:6f:26:5d:56:30:9d:ad:5d:bd:12:f4:
40:3c:da:6a:87:56:f7:24:e6:6f:fe:68:4c:bf:9f:c6:71:2e:
72:31:fd:1e:23:fd:61:4c:51:a1:68:3d:09:a5:e7:90:f3:5d:
b8:42:3e:f9:6e:48:62:e5:0f:e2:f6:ca:08:b0:fe:99:f5:d7:
64:e0:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:58:38 2026 by rpki-client