Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: rXK92/YOWBAv+z/ePCBk0Mu3NZ+V4t0uFcA43RV1qSk=
Subject key identifier: CF:CC:ED:6D:8E:75:95:99:71:D8:94:BF:F8:81:78:06:C8:42:6F:8F
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 01A0B5E448888D33B2D947F14F7BC65326FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 027B
Signing time: Fri 18 Sep 2026 19:00:31 +0000
Manifest this update: Fri 18 Sep 2026 19:00:31 +0000
Manifest next update: Sat 19 Sep 2026 19:00:31 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: ksUow9MB9qOiIitOLFKGQgmWy1OQw/WD2dmJOSiizCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:e4:48:88:8d:33:b2:d9:47:f1:4f:7b:c6:53:26:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Sep 18 19:00:31 2026 GMT
Not After : Sep 19 19:00:31 2026 GMT
Subject: CN=cfcced6d8e75959971d894bff8817806c8426f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:64:5a:98:c8:e9:d2:07:d1:84:f0:84:cd:
7f:be:5b:65:c5:69:e0:d7:cf:66:23:07:7c:7f:c4:
27:fa:9c:4e:5b:e3:74:b5:70:74:07:20:73:1a:25:
2d:a9:fd:54:81:b3:6e:5d:ad:04:b2:c9:b4:87:8d:
1c:f9:57:34:24:67:8c:8c:52:44:f9:f8:f5:7f:d8:
25:2a:e8:bd:b4:be:b2:f6:a6:0d:70:36:1c:e4:5b:
97:87:26:e2:46:22:49:2b:22:ce:c6:ff:e8:76:76:
67:a7:76:4f:ee:77:85:84:35:6d:2c:38:2f:b1:9e:
75:73:c8:6e:d4:8e:2c:f0:de:0a:d9:9a:db:88:4c:
cb:de:98:df:34:d7:ac:38:8a:de:53:41:90:ab:ed:
dd:ae:b8:96:9b:48:c2:5f:15:fb:af:9d:e2:73:fe:
d5:9b:69:25:48:e7:8e:66:14:db:53:8a:6c:d5:ba:
a0:f1:2f:e0:e4:6c:33:f5:d6:c1:dc:ac:2b:98:bd:
b5:13:70:1f:44:ef:c0:65:db:de:1c:35:85:13:9b:
03:1a:47:25:2f:28:7c:74:7a:e3:76:48:d0:ff:7f:
04:5f:2a:fe:43:33:4c:a8:12:e4:c8:0b:2d:b3:18:
00:67:a4:7f:a8:e2:a8:c8:74:c1:a1:52:5f:97:80:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CC:ED:6D:8E:75:95:99:71:D8:94:BF:F8:81:78:06:C8:42:6F:8F
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ff:cd:34:9c:50:5d:ad:6a:a2:0f:e8:2a:3c:8b:bd:de:e4:
27:7d:ef:0b:e5:ae:74:6a:37:e5:1b:de:89:ce:b8:6c:4c:f4:
bb:bd:ff:b1:ea:f5:d1:78:0a:09:0f:a8:53:73:54:ae:df:b4:
ca:62:00:80:e6:ed:94:cd:ac:d6:b0:b5:0f:85:01:c6:a6:fe:
11:cb:db:a2:74:4f:5d:bd:4f:94:6b:29:39:55:31:fc:ec:08:
7f:0c:bd:55:3a:7e:39:a8:2e:72:18:10:f0:2f:92:dd:8c:dd:
18:20:6b:18:58:47:5e:36:fa:9a:f0:3e:df:fb:22:05:64:60:
c5:cf:5f:a5:e7:c0:ef:5f:09:5d:c8:ff:34:57:87:a3:70:ba:
c7:59:52:f1:13:e3:7c:a9:84:f1:e1:1a:0c:c7:28:33:83:fc:
89:ce:9c:8b:f5:79:26:a7:f1:7d:d6:2f:b7:d3:20:dd:2a:68:
b3:5e:c3:ea:6d:7f:05:dc:71:ca:59:21:c7:1f:53:24:04:c2:
82:26:6a:49:82:b3:98:c7:bf:11:5e:cf:15:ba:a9:15:24:93:
8a:ed:db:c3:7a:76:13:18:9f:28:6a:fc:8e:cf:b8:15:c6:c6:
15:d4:2c:92:82:67:bf:f3:6e:27:38:79:97:2f:db:fd:18:ba:
fb:c8:ea:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC15EiIjTOy2UfxT3vGUyb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDgyNWVjN2JkMzNhMDIyMDRjZDFiYzE1MzVmYzFjYTIx
NTA5NTAwHhcNMjYwOTE4MTkwMDMxWhcNMjYwOTE5MTkwMDMxWjAzMTEwLwYDVQQD
EyhjZmNjZWQ2ZDhlNzU5NTk5NzFkODk0YmZmODgxNzgwNmM4NDI2ZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqZkWpjI6dIH0YTwhM1/vltlxWng
189mIwd8f8Qn+pxOW+N0tXB0ByBzGiUtqf1UgbNuXa0Essm0h40c+Vc0JGeMjFJE
+fj1f9glKui9tL6y9qYNcDYc5FuXhybiRiJJKyLOxv/odnZnp3ZP7neFhDVtLDgv
sZ51c8hu1I4s8N4K2ZrbiEzL3pjfNNesOIreU0GQq+3drriWm0jCXxX7r53ic/7V
m2klSOeOZhTbU4ps1bqg8S/g5Gwz9dbB3KwrmL21E3AfRO/AZdveHDWFE5sDGkcl
Lyh8dHrjdkjQ/38EXyr+QzNMqBLkyAstsxgAZ6R/qOKoyHTBoVJfl4CdYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/M7W2OdZWZcdiUv/iBeAbIQm+PMB8GA1UdIwQY
MBaAFFQIJex70zoCIEzRvBU1/ByiFQlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYt
NWYyZjE1YmUyN2M0LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYtNWYyZjE1YmUyN2M0
LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkP/NNJxQ
Xa1qog/oKjyLvd7kJ33vC+WudGo35Rveic64bEz0u73/ser10XgKCQ+oU3NUrt+0
ymIAgObtlM2s1rC1D4UBxqb+EcvbonRPXb1PlGspOVUx/OwIfwy9VTp+OaguchgQ
8C+S3YzdGCBrGFhHXjb6mvA+3/siBWRgxc9fpefA718JXcj/NFeHo3C6x1lS8RPj
fKmE8eEaDMcoM4P8ic6ci/V5JqfxfdYvt9Mg3Spos17D6m1/Bdxxylkhxx9TJATC
giZqSYKzmMe/EV7PFbqpFSSTiu3bw3p2ExifKGr8js+4FcbGFdQskoJnv/NuJzh5
ly/b/Ri6+8jqnw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:02:23 2026 by rpki-client