Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: 94J95M+1OUAKdHA8BTt+ktu/JRG3yDSSRJfzW/9yA4Y=
Subject key identifier: 98:A5:75:B7:ED:EC:D6:04:99:9F:93:9E:0D:97:3E:55:75:D7:75:EB
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019DFACD35674C4B3574F63466937609626A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 0111
Signing time: Wed 06 May 2026 01:00:45 +0000
Manifest this update: Wed 06 May 2026 01:00:45 +0000
Manifest next update: Thu 07 May 2026 01:00:45 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: yPYj72xJzmuI8CGOJn0Cql6RRGSmRftgqhBmc6YNGV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:cd:35:67:4c:4b:35:74:f6:34:66:93:76:09:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: May 6 01:00:45 2026 GMT
Not After : May 7 01:00:45 2026 GMT
Subject: CN=98a575b7edecd604999f939e0d973e5575d775eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:4d:7f:28:07:d0:85:93:af:a7:08:0f:bf:
c9:82:4e:b1:1e:dc:f6:ec:25:9c:d1:8d:f5:15:42:
c4:07:cd:48:7a:62:c5:31:a3:da:10:ef:dd:70:6a:
4c:5d:1d:07:ae:e8:d1:36:0b:44:74:62:dd:5e:e6:
74:f6:a6:75:0a:db:64:39:b0:c9:75:40:2d:50:9f:
be:18:1b:71:b0:8b:5f:f1:4e:a6:ba:ee:9c:1d:41:
27:ad:66:b4:00:a5:c3:92:b9:92:17:dd:e7:b2:82:
56:a9:5c:41:a2:c6:6a:44:6e:ce:54:8c:91:95:3a:
7a:b2:aa:ab:8d:58:f6:71:a6:a5:b0:78:62:42:82:
2a:96:22:56:57:f1:ea:25:17:0c:36:1b:78:a7:b1:
ef:bd:8f:8a:d0:2d:1b:9e:17:c1:29:f6:e8:5a:68:
d5:2b:bc:8f:7b:b5:06:73:e8:c5:c7:d7:98:5b:be:
2c:41:77:6b:00:72:63:d1:c8:c2:f5:3e:dd:df:83:
d3:ff:e2:99:89:e2:94:92:34:ff:e6:c7:f5:d5:de:
56:27:5f:50:d5:14:93:76:ec:22:a5:84:6e:33:15:
88:40:5e:44:60:e7:f9:ef:97:6b:0e:df:bb:3f:58:
18:59:a1:27:a3:22:3c:65:12:85:63:8d:47:5f:bb:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:75:B7:ED:EC:D6:04:99:9F:93:9E:0D:97:3E:55:75:D7:75:EB
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dc:c3:dd:9c:bc:8d:94:55:90:60:c3:67:d7:89:d8:76:3e:
87:51:56:34:54:f4:f3:75:45:5f:97:b7:3c:4b:24:05:97:a9:
ae:32:cb:af:37:d0:9f:58:c6:59:41:81:87:4a:d6:dd:71:fd:
d5:97:f3:b2:78:3e:57:43:a2:99:ac:8a:00:2e:34:e3:42:96:
2a:ba:db:16:b6:23:fa:c9:25:73:7e:7e:78:4a:8e:3f:2a:c0:
85:31:1c:c7:3b:8b:18:27:7e:f1:88:22:89:73:62:86:c2:5a:
bd:9e:f9:9d:da:bb:57:9c:33:14:ea:7a:82:7f:b2:dc:1a:c2:
45:1e:7f:89:b8:71:83:09:f3:81:03:43:33:e7:84:34:a0:7f:
fc:9a:b4:70:2d:74:4e:6b:f6:cc:05:59:16:aa:a0:da:d1:73:
ff:bb:05:0f:80:dc:e5:37:52:b0:73:8a:04:65:e0:a7:62:77:
b2:5c:db:04:91:2e:39:db:b1:da:05:90:8c:59:5b:16:0d:ed:
f8:13:16:5b:7f:46:0d:84:be:27:57:09:b3:d3:9e:96:71:b0:
dc:4f:3d:48:fb:c2:83:27:18:55:c9:76:47:83:6b:f3:67:68:
98:f7:33:b2:7b:8a:78:9c:05:bb:f6:61:da:c8:47:ef:d4:4b:
e8:21:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:27:51 2026 by rpki-client