Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: 46sFgahUtabo4flhSTohgtpxlKYMZzuaPvf3ErwSVh8=
Subject key identifier: 0F:0D:12:25:EE:C5:94:6C:B6:14:FE:6F:38:38:69:57:EF:37:6A:83
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019D0F327B8BBBDD37B21B76F61B0F94FF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 97
Signing time: Sat 21 Mar 2026 07:00:59 +0000
Manifest this update: Sat 21 Mar 2026 07:00:59 +0000
Manifest next update: Sun 22 Mar 2026 07:00:59 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: c7Rp5guhMUS6cfpAf2JpZGSY2aqzu6IYY96uxQ9cLeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:32:7b:8b:bb:dd:37:b2:1b:76:f6:1b:0f:94:ff:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Mar 21 07:00:59 2026 GMT
Not After : Mar 22 07:00:59 2026 GMT
Subject: CN=0f0d1225eec5946cb614fe6f38386957ef376a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:85:b4:f6:a6:c5:70:30:18:3e:82:f0:1d:
86:9c:14:c1:d2:3b:38:f5:28:47:e4:c0:dc:8e:87:
49:54:71:a8:43:fc:e0:4f:65:15:6f:96:2c:f1:f3:
ab:7c:51:6c:e7:97:21:9f:ab:24:74:d2:33:5f:39:
a7:9e:94:e8:66:a9:32:d9:df:5a:a7:63:66:22:b7:
a7:dc:f6:40:88:86:68:71:cf:fd:ec:68:0a:2e:7c:
6d:73:19:a1:03:8d:30:7f:03:2a:04:a5:7f:4b:ad:
4c:18:4b:b0:a4:c1:8e:f9:46:d5:94:93:1c:1c:c8:
2f:b9:eb:df:e8:fb:94:c8:cd:31:08:e1:c3:ee:c4:
ce:bc:72:1c:ff:4e:50:dc:27:f0:5f:05:2c:4c:36:
8d:a2:9a:24:94:2c:b2:dc:67:9a:c6:31:8d:c4:60:
bb:48:b7:4f:91:a3:e1:cd:96:98:fc:07:4c:e5:5a:
72:bc:68:a9:a0:6e:47:04:02:15:bb:d4:bd:d2:c7:
8f:79:89:64:ce:6d:c6:4a:b1:70:52:1f:7d:37:c4:
6d:57:10:c0:cb:e1:47:07:0c:54:66:ff:fa:9a:ed:
a1:59:fd:70:94:61:ef:ec:55:cb:62:fc:76:13:c4:
9a:7f:d2:1f:43:88:62:77:d1:0b:8d:75:df:71:6c:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0D:12:25:EE:C5:94:6C:B6:14:FE:6F:38:38:69:57:EF:37:6A:83
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:75:e5:a9:aa:ad:7e:bc:c8:57:13:a6:ac:db:d9:4e:c3:58:
67:5f:0b:6e:81:50:95:38:d4:46:32:ac:c6:d5:47:b8:36:6d:
cc:58:09:a1:f5:8c:6d:6b:34:73:cd:ac:53:6d:86:26:52:52:
46:8e:7e:a1:71:68:ac:c4:72:35:2e:61:12:70:92:9d:90:58:
23:af:d1:d7:0d:00:08:99:e7:ec:f9:c9:36:32:38:f4:82:36:
aa:73:39:d4:d3:0d:7c:5f:8d:e5:b6:35:fd:76:25:9a:0b:90:
72:40:ff:0c:b3:05:ba:26:b6:02:2b:0f:ea:03:4c:7c:dd:45:
d8:0f:17:e7:6d:66:9c:62:a5:70:c4:8e:cf:da:94:b1:b3:f5:
31:64:25:92:f1:73:35:be:9a:08:2f:41:a2:94:56:96:8e:b9:
23:38:6b:66:d2:55:f4:43:d6:e2:80:80:f9:12:87:6b:fb:46:
e4:40:55:03:3f:67:b3:ae:8e:97:67:4c:f3:32:ac:4d:78:69:
2e:bc:74:22:73:f3:26:bd:d0:73:5c:6f:a2:16:7e:1d:c5:db:
9e:45:a1:c6:0d:66:f2:39:bb:28:5e:db:a9:8f:ff:43:ab:17:
03:a6:8b:75:63:02:4b:b2:96:d4:05:c1:e6:ea:f2:22:3a:2a:
7a:18:e5:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0PMnuLu903sht29hsPlP9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDgyNWVjN2JkMzNhMDIyMDRjZDFiYzE1MzVmYzFjYTIx
NTA5NTAwHhcNMjYwMzIxMDcwMDU5WhcNMjYwMzIyMDcwMDU5WjAzMTEwLwYDVQQD
EygwZjBkMTIyNWVlYzU5NDZjYjYxNGZlNmYzODM4Njk1N2VmMzc2YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00GFtPamxXAwGD6C8B2GnBTB0js4
9ShH5MDcjodJVHGoQ/zgT2UVb5Ys8fOrfFFs55chn6skdNIzXzmnnpToZqky2d9a
p2NmIren3PZAiIZocc/97GgKLnxtcxmhA40wfwMqBKV/S61MGEuwpMGO+UbVlJMc
HMgvuevf6PuUyM0xCOHD7sTOvHIc/05Q3CfwXwUsTDaNopoklCyy3GeaxjGNxGC7
SLdPkaPhzZaY/AdM5VpyvGipoG5HBAIVu9S90sePeYlkzm3GSrFwUh99N8RtVxDA
y+FHBwxUZv/6mu2hWf1wlGHv7FXLYvx2E8Saf9IfQ4hid9ELjXXfcWxLQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8NEiXuxZRsthT+bzg4aVfvN2qDMB8GA1UdIwQY
MBaAFFQIJex70zoCIEzRvBU1/ByiFQlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYt
NWYyZjE1YmUyN2M0LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYtNWYyZjE1YmUyN2M0
LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3Xlqaqt
frzIVxOmrNvZTsNYZ18LboFQlTjURjKsxtVHuDZtzFgJofWMbWs0c82sU22GJlJS
Ro5+oXForMRyNS5hEnCSnZBYI6/R1w0ACJnn7PnJNjI49II2qnM51NMNfF+N5bY1
/XYlmguQckD/DLMFuia2AisP6gNMfN1F2A8X521mnGKlcMSOz9qUsbP1MWQlkvFz
Nb6aCC9BopRWlo65IzhrZtJV9EPW4oCA+RKHa/tG5EBVAz9ns66Ol2dM8zKsTXhp
Lrx0InPzJr3Qc1xvohZ+HcXbnkWhxg1m8jm7KF7bqY//Q6sXA6aLdWMCS7KW1AXB
5uryIjoqehjlJw==
-----END CERTIFICATE-----
Generated at Sat Mar 21 14:32:54 2026 by rpki-client