Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: 9XZVR4yqH6m524wsrvYban/vh1d+N+gW9HI3jo26gB0=
Subject key identifier: C6:E3:FA:26:9D:A2:96:2B:54:37:86:76:BC:5E:A4:4E:53:E2:50:46
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 01A1AA838EE11F148E00811FAB3877E5BFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 02FA
Signing time: Thu 05 Nov 2026 07:01:50 +0000
Manifest this update: Thu 05 Nov 2026 07:01:50 +0000
Manifest next update: Fri 06 Nov 2026 07:01:50 +0000
Files and hashes: 1: Fp3TTdqVJZkbQ-kQbhlDla-trNs.asa (hash: Uxne//QTsaYa82jREY1ZbBu7zYaeok3N6iEzlmQnX80=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: 8YBUIOaO2G9iQxp/e/GYhBocrBoxxdKs+fWTXh5HX+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:8e:e1:1f:14:8e:00:81:1f:ab:38:77:e5:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Nov 5 07:01:50 2026 GMT
Not After : Nov 6 07:01:50 2026 GMT
Subject: CN=c6e3fa269da2962b54378676bc5ea44e53e25046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:6a:7d:c0:b9:3a:2f:03:d4:25:e1:ae:0d:
d1:95:1b:16:81:84:1b:9f:68:5a:e9:ac:f1:f5:0e:
a3:fa:22:8a:6a:f6:c6:cd:3a:75:05:2e:5c:e4:d6:
d8:ab:38:59:4f:0f:88:85:f2:ec:f2:92:9b:88:94:
0c:13:e4:12:1a:14:e4:f9:19:1a:c5:ef:7f:56:e8:
4d:04:ce:c6:de:b5:6f:4d:6a:6e:e3:a2:ed:d8:fb:
a7:14:b0:91:44:4b:2b:9b:5f:ce:e3:64:c5:90:85:
1a:11:c6:17:27:4d:f4:0f:d2:08:fc:38:ef:12:8f:
30:79:d1:23:bc:a1:56:52:c1:38:cb:ed:3f:d1:6b:
e4:34:eb:49:ab:e4:2b:df:1f:26:01:a7:b8:f9:42:
cf:49:08:b8:ac:ac:c7:68:71:af:99:7c:98:0a:46:
4e:4e:5c:7a:44:91:53:11:7b:f5:54:e5:fc:72:33:
2b:c4:b1:75:be:7f:27:35:c3:e6:11:82:d1:c7:89:
8d:a5:fe:de:94:bc:c4:32:03:90:c5:6e:0b:af:84:
2d:76:9c:89:65:16:04:f9:b1:72:3e:83:bb:b2:a4:
39:30:0c:89:30:8c:e0:16:9d:0c:a1:cd:34:ad:ca:
1b:84:bd:d7:69:26:86:f4:6c:96:5e:69:cb:aa:45:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:FA:26:9D:A2:96:2B:54:37:86:76:BC:5E:A4:4E:53:E2:50:46
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:6b:27:48:ec:ee:b7:2b:2f:12:7b:7a:27:5e:eb:1d:0b:
5c:82:84:93:9e:d6:9e:da:d2:ad:d5:25:cb:7e:64:f9:1d:ba:
b7:d8:bc:46:0e:76:78:73:f1:fa:e4:4e:7b:a4:d4:15:62:97:
32:2d:bf:ad:f3:8f:9e:d6:dd:2e:d6:9c:a6:d7:64:2b:9f:2b:
cd:1d:9d:cf:b1:ac:73:a6:4d:3c:5a:17:0a:6d:99:fb:af:0a:
91:8e:3f:a0:63:5c:90:f3:12:d5:b2:35:a8:12:fb:0d:35:3f:
d0:2c:92:66:80:cb:45:c7:e0:05:e5:31:31:34:c8:0b:3c:59:
b8:4a:f3:32:31:a3:55:2a:69:d7:f4:64:72:78:f3:ed:e7:1f:
fa:e8:c6:ea:f1:ca:bd:bd:e9:01:6f:b8:89:78:7b:1e:97:bc:
cc:af:1a:b5:f0:d5:57:1e:62:a3:be:97:93:31:ea:b8:b4:70:
b9:e4:27:f8:60:dc:15:fc:c9:24:54:19:1a:b6:8f:56:00:10:
29:46:4a:3a:7a:3f:f8:8f:72:98:83:7c:ad:0e:64:d3:f2:7c:
8b:94:08:64:4c:f7:c7:19:e2:5c:c3:11:50:da:5a:23:07:52:
0e:af:d0:c8:3f:50:21:7f:ac:ac:bb:f6:05:00:b9:d3:de:ab:
61:1e:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:02:34 2026 by rpki-client