Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
File: VGLTx682xAGqlwlNPyOJ14ddFOw.mft (raw, json)
Hash identifier: h3QThg6RJR5MQgAP5za/5V5KNQUzEaTGlcBv7yrCcDg=
Subject key identifier: 3B:08:04:17:3B:C8:BB:28:43:AF:45:AF:A1:75:14:45:63:BE:FF:4C
Authority key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Certificate issuer: /CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Certificate serial: 019D382E15D360B13379AC1C7B8F18D3ADEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
Manifest number: 0596
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: VGLTx682xAGqlwlNPyOJ14ddFOw.crl (hash: 6tOyEqBw4RIp2LXu3jUz1YCuiE/ZysKptPU0Jy9Fn4c=)
2: nlvcTW_nRrqRgTtT7GPJoEY8zt8.roa (hash: NleUca8CC+8N3vwArPhRJ2zlLJElpiDe/ATFPORPOnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:15:d3:60:b1:33:79:ac:1c:7b:8f:18:d3:ad:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=3b0804173bc8bb2843af45afa175144563beff4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:9f:32:e0:c4:40:b4:4e:32:8a:b6:76:d0:
eb:e1:aa:29:92:9d:07:90:1c:7d:41:8d:d9:9b:bf:
c1:58:03:76:1e:00:5d:9d:56:78:bf:67:99:01:44:
6d:49:65:50:4b:aa:f7:4c:30:7e:1c:d5:54:51:8a:
2a:58:6e:82:31:81:23:db:6b:fe:d7:f8:4f:51:f0:
b2:b0:7b:c5:25:d7:dc:95:f8:50:57:61:bb:a0:2a:
6e:aa:5e:98:f8:4b:05:6a:38:8d:d0:03:fd:bb:32:
cd:72:ed:91:1d:f9:53:17:ed:2e:6f:21:4e:97:f1:
8b:62:cf:41:0a:a5:91:0a:55:8a:33:a5:c4:0b:1a:
a0:1c:82:a6:a3:6e:5b:9d:56:b3:38:b2:4e:e5:fd:
25:86:92:8d:8b:cf:09:a1:e3:a0:fc:cd:5b:e6:40:
fb:90:e5:4f:fa:34:53:8e:63:84:2d:46:92:c8:77:
05:21:da:3a:d5:58:ee:2d:07:a5:0e:ea:5e:1c:00:
98:57:5d:a2:26:3e:79:9c:a4:f2:7b:86:e2:fc:21:
fc:81:7e:14:6c:34:74:2d:a4:07:e7:b3:30:1b:26:
d0:ba:c4:8c:61:a8:c1:a9:87:5e:56:f6:73:19:84:
c7:6e:bf:8e:8d:dc:0e:47:ce:9d:79:9e:45:2f:9d:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:04:17:3B:C8:BB:28:43:AF:45:AF:A1:75:14:45:63:BE:FF:4C
X509v3 Authority Key Identifier:
keyid:54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f7:59:ef:82:ff:c7:22:c0:53:f0:80:9e:4b:33:88:5e:63:
69:21:67:46:e0:eb:85:fb:05:ae:cd:67:b0:3b:a0:29:8a:78:
a8:2a:5f:56:73:4d:c2:06:34:13:f3:c2:74:72:e5:e1:76:6c:
bd:29:9e:de:1c:0c:a7:cf:6a:14:05:ee:b8:32:8a:53:1d:c4:
97:c0:6f:c3:45:b9:11:c7:9d:aa:98:60:15:d9:c3:5e:3f:f9:
b2:64:a3:b2:44:db:16:63:d3:8f:b7:1b:1a:bb:13:61:df:3a:
06:57:0e:b0:25:f0:e0:6c:1c:91:63:ad:36:57:2e:32:89:42:
92:04:98:cf:f7:05:b6:58:a4:2f:fa:d4:6f:77:19:63:e6:59:
47:10:25:9d:b1:60:d6:31:5a:1f:1b:46:91:65:90:8e:fd:02:
3a:f7:be:c5:a2:53:f7:9f:55:20:00:94:ee:b6:d0:85:5d:74:
68:06:52:cf:9a:12:14:39:d2:88:6e:38:d9:e2:bf:a7:f4:19:
b5:39:fe:c7:2c:22:4d:54:b6:e0:fe:25:08:c9:29:59:26:2d:
ba:da:16:60:27:79:2a:9f:ce:55:6c:dc:2a:cf:9f:7f:7c:ed:
bb:5b:e7:a8:9b:10:fe:fd:2e:2c:13:f5:a4:dd:a2:74:c5:a7:
13:40:58:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LhXTYLEzeawce48Y063uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjJkM2M3YWYzNmM0MDFhYTk3MDk0ZDNmMjM4OWQ3ODc1
ZDE0ZWMwHhcNMjYwMzI5MDYwMDM3WhcNMjYwMzMwMDYwMDM3WjAzMTEwLwYDVQQD
EygzYjA4MDQxNzNiYzhiYjI4NDNhZjQ1YWZhMTc1MTQ0NTYzYmVmZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7KfMuDEQLROMoq2dtDr4aopkp0H
kBx9QY3Zm7/BWAN2HgBdnVZ4v2eZAURtSWVQS6r3TDB+HNVUUYoqWG6CMYEj22v+
1/hPUfCysHvFJdfclfhQV2G7oCpuql6Y+EsFajiN0AP9uzLNcu2RHflTF+0ubyFO
l/GLYs9BCqWRClWKM6XECxqgHIKmo25bnVazOLJO5f0lhpKNi88JoeOg/M1b5kD7
kOVP+jRTjmOELUaSyHcFIdo61VjuLQelDupeHACYV12iJj55nKTye4bi/CH8gX4U
bDR0LaQH57MwGybQusSMYajBqYdeVvZzGYTHbr+OjdwOR86deZ5FL50uIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsIBBc7yLsoQ69Fr6F1FEVjvv9MMB8GA1UdIwQY
MBaAFFRi08evNsQBqpcJTT8jideHXRTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUt
OGIzMTUyMjk3NTdkLzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xM2MwMmUtY2NhMC00ZGNkLTkxMjUtOGIzMTUyMjk3NTdk
LzEvVkdMVHg2ODJ4QUdxbHdsTlB5T0oxNGRkRk93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/dZ74L/
xyLAU/CAnksziF5jaSFnRuDrhfsFrs1nsDugKYp4qCpfVnNNwgY0E/PCdHLl4XZs
vSme3hwMp89qFAXuuDKKUx3El8Bvw0W5EcedqphgFdnDXj/5smSjskTbFmPTj7cb
GrsTYd86BlcOsCXw4GwckWOtNlcuMolCkgSYz/cFtlikL/rUb3cZY+ZZRxAlnbFg
1jFaHxtGkWWQjv0COve+xaJT959VIACU7rbQhV10aAZSz5oSFDnSiG442eK/p/QZ
tTn+xywiTVS24P4lCMkpWSYtutoWYCd5Kp/OVWzcKs+ff3ztu1vnqJsQ/v0uLBP1
pN2idMWnE0BYfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:00 2026 by rpki-client