Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier: 1+bqbQvJMXjmLnZlJ2RzJuqymXz4umjITMAOoBxwBhI=
Subject key identifier: 41:F3:DE:06:89:39:CF:59:7D:68:89:B6:F0:D7:6C:34:F5:EF:90:C5
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial: 019EE47AD5FABC9F4132B6EE6C5F16EC4A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number: 018A
Signing time: Sat 20 Jun 2026 10:01:55 +0000
Manifest this update: Sat 20 Jun 2026 10:01:55 +0000
Manifest next update: Sun 21 Jun 2026 10:01:55 +0000
Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: NrqQPUNtkk8cD7fHEy92BVQ/LhqK3T8Puqk/kc1X6aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:7a:d5:fa:bc:9f:41:32:b6:ee:6c:5f:16:ec:4a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Validity
Not Before: Jun 20 10:01:55 2026 GMT
Not After : Jun 21 10:01:55 2026 GMT
Subject: CN=41f3de068939cf597d6889b6f0d76c34f5ef90c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:09:72:0d:de:ba:8c:46:4d:d0:69:e9:88:49:
45:54:fe:8a:d1:40:0e:cd:8c:6a:3a:00:4d:34:de:
ec:5d:3b:dc:af:12:53:fd:26:aa:f3:94:b2:fa:4d:
81:c0:c7:5d:5a:48:0b:a2:b9:57:88:42:cb:c4:b4:
e6:dd:9c:b3:6a:81:08:0d:a5:3e:a7:ac:22:21:ea:
66:83:e9:90:68:f1:7e:c4:7a:23:e9:da:81:06:a2:
21:89:e3:ad:75:5a:ef:0f:a5:17:71:ab:96:0e:3e:
57:0e:30:cb:90:8e:c4:3b:19:3e:16:33:91:7f:f4:
a7:17:4c:19:3e:70:f5:47:5e:13:3b:5b:e4:e9:9c:
41:11:00:2d:c2:85:03:21:fb:25:fb:40:08:1a:0b:
1e:d3:42:67:0f:fe:de:d2:fb:ce:a5:ce:03:e3:d9:
0e:2d:10:4b:49:1c:b0:f8:7c:54:0d:ba:e1:fd:7e:
40:de:72:a9:95:c4:35:f7:79:d4:f6:02:86:37:7e:
08:f4:2b:3f:b7:53:10:e7:7f:ff:61:6c:63:99:7f:
4d:99:a5:e0:98:51:3d:d6:f6:2e:c1:57:05:66:a5:
99:9a:eb:3b:4f:f0:fa:85:75:69:49:a7:7c:9a:cb:
48:95:42:91:3d:2f:22:b3:b3:85:11:83:52:51:da:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:DE:06:89:39:CF:59:7D:68:89:B6:F0:D7:6C:34:F5:EF:90:C5
X509v3 Authority Key Identifier:
keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dc:93:b9:03:8d:31:8e:d6:96:e2:7c:da:2a:90:41:30:3f:
6d:9f:0e:e8:25:fd:66:4e:7a:f1:2c:a7:19:8a:c9:99:e0:b8:
ca:37:20:83:dc:e4:6e:4b:13:fa:39:c4:12:04:35:66:15:7f:
94:f7:f7:87:5c:7d:fc:43:31:dd:1c:fc:fe:1c:71:ab:fe:94:
b6:b5:54:69:fd:38:34:5c:9e:c9:46:cf:4e:4f:e0:03:eb:60:
ca:27:74:e8:3b:32:b7:f4:8a:03:ce:1a:84:5c:89:37:92:01:
81:1b:34:14:85:3e:f7:42:2c:2c:5e:0c:e7:ca:d7:ab:01:4f:
f1:ed:5d:bd:c0:86:d2:bc:01:c9:57:e1:04:24:f7:d6:51:0d:
05:d4:d3:b7:23:a2:f7:af:bc:98:73:50:81:ad:71:24:55:56:
d8:b0:7b:13:f9:79:48:46:21:28:fb:38:bc:00:9d:a1:90:ad:
7d:1f:d6:13:dc:fb:b5:86:bf:44:22:d9:16:e4:33:8b:a3:2a:
00:8b:a8:be:43:05:a2:e0:8f:b3:1f:ba:f3:1a:0b:88:95:df:
1f:aa:7d:9f:83:2e:a8:ae:ef:0a:ae:70:a0:e9:f5:ed:a7:f0:
95:c2:6b:48:15:42:13:a5:93:08:e6:90:2e:60:a7:4c:5c:14:
3e:e4:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:58:28 2026 by rpki-client