Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: mfIY1m/Qp6JjWlc18pgk5oohFVImUQ09NhVLoy8kyLc=
Subject key identifier: 88:43:D3:3A:32:4E:E1:5F:A3:63:BC:22:7F:E2:98:51:F3:0F:39:8E
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019FCC38FEAD10417FF7627AB23411FE417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 0202
Signing time: Tue 04 Aug 2026 10:01:55 +0000
Manifest this update: Tue 04 Aug 2026 10:01:55 +0000
Manifest next update: Wed 05 Aug 2026 10:01:55 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: Vg+0aaNZGlBB7nSm9e0ubnGbQwsDoX0k/WkOimh69zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:38:fe:ad:10:41:7f:f7:62:7a:b2:34:11:fe:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Aug 4 10:01:55 2026 GMT
Not After : Aug 5 10:01:55 2026 GMT
Subject: CN=8843d33a324ee15fa363bc227fe29851f30f398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:1a:59:f0:b2:d7:ab:f9:03:21:f3:ea:30:
b7:bc:17:c8:01:b9:76:f3:72:20:d1:43:9f:86:e3:
a7:2b:cc:da:1e:43:bd:ac:28:81:d2:f0:aa:f1:5f:
10:23:a0:05:00:bf:16:5e:3c:d0:a6:7e:2e:5d:da:
cb:44:11:13:1f:22:9c:c0:8e:31:51:91:82:1a:59:
60:28:8d:43:90:f4:db:20:f7:3b:79:13:f2:84:21:
e0:e2:88:2a:34:6f:7d:95:76:3e:1e:14:ec:8b:08:
eb:6a:8d:e3:44:3c:c3:2a:1e:53:8d:e5:c2:13:bf:
ee:e9:0c:ef:37:f1:fc:db:bc:8d:d8:16:07:2a:18:
eb:12:28:4c:d1:ac:c8:f6:41:fd:36:bf:dd:1c:a6:
ab:5f:06:bf:fd:82:3b:a0:6c:ed:fb:2e:84:cc:5c:
85:e3:4a:04:cc:fa:3c:1a:1e:3b:34:6c:8b:ac:c7:
bd:82:d8:17:6c:e2:3f:fc:ec:c4:86:7f:79:95:bf:
ed:80:f5:f1:e0:2f:5b:d7:af:cf:fa:5f:4e:af:cb:
ce:5e:01:c6:7a:af:59:77:91:f6:bf:56:78:7c:ce:
73:db:5c:e8:45:5c:1c:81:d9:d0:40:2e:15:ae:95:
20:a6:84:d9:f6:29:61:1b:38:c5:e6:de:77:e5:4c:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:D3:3A:32:4E:E1:5F:A3:63:BC:22:7F:E2:98:51:F3:0F:39:8E
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:ea:1c:0f:a8:09:cf:5b:4f:38:94:a9:bb:7f:fc:b2:33:
d3:17:8b:30:98:e9:e4:8c:e1:0f:2e:16:a5:35:86:64:74:42:
28:0b:8e:23:b6:28:86:93:51:96:40:1c:f0:98:61:c5:34:af:
6d:7f:b5:e1:f0:75:3f:6e:fa:a3:de:f8:ff:0a:73:fb:0b:76:
5d:a6:e7:98:ef:af:b8:e8:9f:cb:99:71:48:10:63:0c:9e:6b:
dd:54:85:aa:24:3b:3e:ae:80:8b:8a:74:6c:5b:c9:81:5c:d7:
8c:db:c1:1c:fa:08:14:40:ae:b5:11:de:06:a1:75:4e:a6:59:
cf:d6:c9:50:bd:62:0c:a4:13:9a:a0:38:65:a0:d5:7c:8d:ce:
4f:42:8b:4e:95:5b:cf:11:88:49:1c:6e:3f:45:15:9a:02:0a:
92:81:92:2f:85:5b:43:e4:e3:35:4a:d4:be:ff:6f:b1:da:ad:
9e:f5:07:95:c4:e1:b7:97:15:56:8e:c0:96:50:db:c4:af:23:
a1:df:7a:ed:ef:03:b1:dd:58:79:51:31:14:9c:5b:87:32:67:
0a:8d:3e:16:8d:29:15:42:94:07:82:e7:31:68:2e:7c:0a:28:
da:43:43:4c:24:08:b0:6b:d0:3c:60:41:83:40:a3:88:d7:6a:
3d:35:88:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/MOP6tEEF/92J6sjQR/kF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDgyNWVjN2JkMzNhMDIyMDRjZDFiYzE1MzVmYzFjYTIx
NTA5NTAwHhcNMjYwODA0MTAwMTU1WhcNMjYwODA1MTAwMTU1WjAzMTEwLwYDVQQD
Eyg4ODQzZDMzYTMyNGVlMTVmYTM2M2JjMjI3ZmUyOTg1MWYzMGYzOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJYaWfCy16v5AyHz6jC3vBfIAbl2
83Ig0UOfhuOnK8zaHkO9rCiB0vCq8V8QI6AFAL8WXjzQpn4uXdrLRBETHyKcwI4x
UZGCGllgKI1DkPTbIPc7eRPyhCHg4ogqNG99lXY+HhTsiwjrao3jRDzDKh5TjeXC
E7/u6QzvN/H827yN2BYHKhjrEihM0azI9kH9Nr/dHKarXwa//YI7oGzt+y6EzFyF
40oEzPo8Gh47NGyLrMe9gtgXbOI//OzEhn95lb/tgPXx4C9b16/P+l9Or8vOXgHG
eq9Zd5H2v1Z4fM5z21zoRVwcgdnQQC4VrpUgpoTZ9ilhGzjF5t535UwewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhD0zoyTuFfo2O8In/imFHzDzmOMB8GA1UdIwQY
MBaAFFQIJex70zoCIEzRvBU1/ByiFQlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYt
NWYyZjE1YmUyN2M0LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYtNWYyZjE1YmUyN2M0
LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFXqHA+o
Cc9bTziUqbt//LIz0xeLMJjp5IzhDy4WpTWGZHRCKAuOI7YohpNRlkAc8JhhxTSv
bX+14fB1P276o974/wpz+wt2XabnmO+vuOify5lxSBBjDJ5r3VSFqiQ7Pq6Ai4p0
bFvJgVzXjNvBHPoIFECutRHeBqF1TqZZz9bJUL1iDKQTmqA4ZaDVfI3OT0KLTpVb
zxGISRxuP0UVmgIKkoGSL4VbQ+TjNUrUvv9vsdqtnvUHlcTht5cVVo7AllDbxK8j
od967e8Dsd1YeVExFJxbhzJnCo0+Fo0pFUKUB4LnMWgufAoo2kNDTCQIsGvQPGBB
g0CjiNdqPTWIlw==
-----END CERTIFICATE-----
Generated at Tue Aug 4 18:33:47 2026 by rpki-client