Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: zpdCsKrU3AtXSee2y1xbRe7H9gNxkUsWYVSZUY/afts=
Subject key identifier: F9:79:C6:BD:A7:8B:9F:09:2A:22:D9:3D:3C:08:95:78:5A:CB:39:AD
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019F916D86998EDC755A4A253FE0F66124C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 00:01:41 +0000
Manifest this update: Fri 24 Jul 2026 00:01:41 +0000
Manifest next update: Sat 25 Jul 2026 00:01:41 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: QHcr465t+pHUn3ENNwuTwTKfM9P0PIEBMEERhAMtIOA=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:86:99:8e:dc:75:5a:4a:25:3f:e0:f6:61:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Jul 24 00:01:41 2026 GMT
Not After : Jul 25 00:01:41 2026 GMT
Subject: CN=f979c6bda78b9f092a22d93d3c0895785acb39ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:49:c5:3e:c7:12:88:c4:44:85:d0:0b:cb:
0e:93:e5:fb:5d:40:79:79:ec:29:62:9f:29:79:73:
d3:79:c8:52:7f:d6:43:65:eb:2e:c7:fe:ae:d8:5a:
9b:51:12:35:a8:0d:eb:a9:06:5c:6a:d8:44:33:65:
2f:ba:a9:3a:ae:fa:e5:64:cb:cf:57:ce:3b:dc:cf:
f8:14:13:bd:7b:c6:8f:b5:7d:c4:19:2e:ae:3f:5e:
d4:5f:f2:e9:de:f0:3e:ae:63:d4:1d:5a:c8:a8:15:
cc:62:5f:ae:c5:bd:a2:8d:5e:3c:e6:95:3a:ad:12:
c1:a9:41:de:35:61:a7:77:66:a5:e3:29:00:02:f9:
9f:ed:1e:9a:f2:27:c0:bd:b8:78:da:6a:06:0b:4b:
97:df:a3:55:fa:74:67:14:c3:6d:c6:69:1c:72:ed:
b5:52:ee:7e:07:1e:38:57:a5:f3:84:aa:16:5d:1e:
4a:63:e6:b1:30:44:7a:57:19:d5:28:a8:ce:9b:ce:
2e:c1:33:f5:02:16:bc:14:32:dd:41:15:1e:7a:b9:
d6:d0:45:1c:56:46:39:f3:9b:b4:38:6e:fb:3a:00:
a2:7e:70:d4:44:5a:80:50:9f:6d:ce:70:8c:74:7f:
7d:e4:6e:33:a0:b9:07:8b:ec:77:3c:86:87:5c:d5:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:C6:BD:A7:8B:9F:09:2A:22:D9:3D:3C:08:95:78:5A:CB:39:AD
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:32:fb:33:52:e7:f7:57:c9:86:7b:1c:9d:52:9d:42:c7:0d:
ee:88:ef:e7:3c:17:e3:0d:0b:5f:ef:83:2e:19:52:73:74:29:
e9:08:f8:16:74:d5:c2:7a:2d:95:fc:60:8c:40:ac:af:e2:e2:
fc:1c:7c:66:93:22:a3:90:54:c6:c4:da:b9:1a:eb:cb:ec:28:
24:40:40:a9:57:82:a9:61:c2:a4:cb:5a:39:d2:9c:a2:2f:ba:
15:46:76:bc:d8:80:c4:6c:1e:4d:75:a7:85:50:7a:1f:55:52:
ae:39:b8:16:2f:fa:c6:48:86:6b:cf:b3:71:5d:79:4a:85:1d:
58:71:f9:a9:5c:ad:c2:87:0e:da:de:3d:35:70:88:97:93:06:
d5:96:b3:17:fe:5c:12:50:fc:48:b2:ae:0a:c1:00:0f:9e:85:
7a:8f:43:83:10:46:f0:57:84:d1:6f:7c:9a:f1:7a:88:bc:fc:
82:40:2f:2d:e5:77:7c:c6:eb:30:da:51:ee:46:76:b7:47:b2:
4a:39:a3:5a:b0:c2:a2:91:20:7f:a0:eb:dc:7a:e1:8d:f0:4a:
3e:d7:59:ca:23:86:b1:1d:c3:70:0c:51:52:25:4a:7e:a2:b1:
63:6b:8c:0c:7a:01:b5:6e:1d:76:ab:ac:2e:df:bb:c3:2b:2a:
8b:8c:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:06 2026 by rpki-client