Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: Z2Nx3JYJ0bT4oq9W5fuSdyW3UiXrOu70u1wQzEsH1/g=
Subject key identifier: CB:D9:69:5D:80:A8:62:4C:63:6E:2C:0E:1A:46:6D:60:A3:BC:AD:01
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 01A0EDE6C1714EC812D6FF93BECFF89357A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 0298
Signing time: Tue 29 Sep 2026 16:01:57 +0000
Manifest this update: Tue 29 Sep 2026 16:01:57 +0000
Manifest next update: Wed 30 Sep 2026 16:01:57 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: qPGn84FyM0d6UAtzKzABoOJdfCAba9gqgVOxrIvoLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:c1:71:4e:c8:12:d6:ff:93:be:cf:f8:93:57:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Sep 29 16:01:57 2026 GMT
Not After : Sep 30 16:01:57 2026 GMT
Subject: CN=cbd9695d80a8624c636e2c0e1a466d60a3bcad01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:b8:e6:04:fb:8e:36:04:1f:e0:fc:b9:8b:
4f:67:a0:7f:85:a6:56:57:d4:b7:0c:53:26:69:c9:
41:2b:ea:e9:9e:d9:1b:fc:32:1d:b8:95:86:77:9c:
9c:57:a7:34:52:f4:f0:6f:fd:43:fa:d7:34:99:0e:
27:ec:8e:d5:8b:6f:fc:6f:d5:60:86:13:88:28:ca:
4b:77:32:25:1d:15:da:7b:8e:14:ca:d1:1d:d4:27:
40:f5:88:43:99:79:ba:1d:93:d3:bf:5b:75:55:57:
69:7a:6d:38:57:46:6c:ee:eb:8d:83:50:f5:57:fa:
19:80:6f:3d:67:ce:35:f8:19:47:b0:1f:ec:b2:4c:
c5:be:cf:b7:6f:44:eb:82:ba:7c:03:25:49:9a:1d:
35:32:a9:46:af:e4:3c:b7:47:eb:5d:12:d1:77:14:
26:36:d8:5b:1f:98:45:b4:df:a1:13:a3:f4:6e:32:
33:e7:61:29:e7:fe:86:8b:df:62:39:e7:13:41:a8:
87:77:a7:bb:5d:20:7a:e2:69:a8:7d:47:8c:75:6f:
17:c3:1e:4b:ce:c9:49:c6:18:9e:32:6f:fc:60:0a:
26:8f:74:0d:14:e4:1b:a4:e2:82:86:99:2b:50:b3:
20:d5:e7:b7:67:50:2c:e6:e9:2d:ce:f4:67:86:6b:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:69:5D:80:A8:62:4C:63:6E:2C:0E:1A:46:6D:60:A3:BC:AD:01
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:63:1c:51:9b:3b:4d:8c:8d:81:8e:fa:f2:d2:a9:8b:5d:bf:
82:b4:26:43:b2:fa:67:56:67:17:59:48:97:55:c6:aa:d6:20:
01:e8:85:58:62:ee:9c:c2:ee:69:8a:0a:c3:f2:de:a0:f5:de:
c0:5d:46:78:c1:3e:44:3b:82:fb:ed:a9:2c:e4:a1:bb:c7:da:
91:14:36:4e:09:a1:3f:92:14:dc:17:b8:6b:aa:d6:05:f6:8c:
1c:06:27:6b:fe:3e:5f:9e:6b:1c:b8:b6:1a:c6:13:c3:43:2f:
4d:5d:f0:40:3b:f2:41:74:7f:39:cc:fb:fc:6c:dd:05:9d:cc:
4f:56:58:54:ff:82:07:20:eb:52:7d:32:5b:a0:60:43:73:45:
90:ca:48:0e:65:2e:81:09:03:9f:a4:b3:ce:6e:78:40:ac:54:
64:76:11:09:0e:df:58:70:a0:9c:3d:7a:33:f4:98:f9:e9:2f:
5f:9e:18:03:23:b6:95:55:45:ed:98:64:a1:c9:bb:34:9f:2f:
ce:74:2e:a3:10:f7:9d:16:46:7a:c2:77:5d:74:fb:29:31:80:
6f:9a:b8:29:5b:68:cb:d8:83:5b:65:dc:d3:77:bd:fb:91:0b:
8e:c8:34:97:e1:43:10:d8:1b:5a:2a:3d:90:3e:ef:a0:74:fd:
60:6f:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:58:33 2026 by rpki-client