Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: ku4/VEcGTkzAaqv2YIvqdaIv0I8Q3Nu5P79/eDMKFC4=
Subject key identifier: 6F:86:85:40:2F:B2:46:69:D7:D2:95:80:F8:BE:35:D6:F2:74:6E:2C
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019D25831FC6658001C3FD75BC398B6924C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 15:00:43 +0000
Manifest this update: Wed 25 Mar 2026 15:00:43 +0000
Manifest next update: Thu 26 Mar 2026 15:00:43 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: CE5fa7J69PW+MVguSPIgb0nvIfwhJda3V3pZJF0N8QQ=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:1f:c6:65:80:01:c3:fd:75:bc:39:8b:69:24:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Mar 25 15:00:43 2026 GMT
Not After : Mar 26 15:00:43 2026 GMT
Subject: CN=6f8685402fb24669d7d29580f8be35d6f2746e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:35:05:ec:d7:1f:23:f1:b7:aa:02:3a:7a:
a5:67:79:db:5e:39:2c:d3:e2:41:ad:1e:9a:12:9d:
bd:67:d3:c4:ee:ad:e7:78:63:35:83:b0:2e:37:84:
23:cb:29:48:a9:be:a2:a9:d3:d7:ed:6c:f2:ba:3c:
e7:68:84:cf:5d:ff:a3:d8:f5:bc:45:54:69:d0:ac:
12:48:34:67:4d:e0:90:5d:51:d3:df:b3:3a:79:48:
8e:0a:08:da:69:24:9b:dd:2a:5f:16:67:b0:be:5d:
33:2b:ab:cd:89:bd:ef:c8:83:89:12:62:41:aa:dc:
91:85:ec:69:0f:7e:1d:bc:9c:38:b7:f2:83:19:64:
ab:12:ef:df:a5:f9:04:32:2c:82:65:50:69:ab:a9:
c4:fd:59:d1:ee:09:3b:0e:3a:b2:86:73:f6:34:ff:
56:ab:7f:76:49:cb:49:73:b7:66:e6:f1:12:87:9f:
c3:b3:cd:ac:dd:0b:d8:f0:82:8d:7d:56:29:93:7c:
8b:bd:a7:7d:8d:30:24:e5:a5:64:20:34:48:25:01:
b9:d1:a8:4d:b5:c0:4d:37:06:e2:f5:7f:69:b3:cc:
87:5a:bc:84:b5:0d:f8:02:94:75:eb:92:72:55:5e:
02:e8:68:a9:40:34:aa:e9:1e:55:ce:22:f8:69:5c:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:85:40:2F:B2:46:69:D7:D2:95:80:F8:BE:35:D6:F2:74:6E:2C
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:1e:5e:ca:3d:44:2b:73:45:f4:34:a6:9d:2d:89:67:6e:
4f:1a:4c:5c:64:05:fa:c7:22:50:55:0a:d6:5a:32:4e:dd:70:
7b:3c:eb:5d:8f:38:6c:3e:bf:b4:db:b4:e5:5f:27:a9:68:78:
f2:05:70:f2:f0:ef:df:7f:9d:db:7a:fb:78:00:37:c8:9a:f3:
a2:c0:91:74:79:29:05:45:e6:ff:b1:c2:55:0c:22:a6:1a:c8:
dc:2a:08:c5:b2:a8:e1:a0:4f:c4:87:c2:d3:a3:c7:91:11:c6:
65:95:ea:0c:2c:19:73:03:51:2e:2e:31:16:99:63:6e:b6:71:
29:d0:ac:e1:2f:4a:95:ff:60:4e:60:78:47:49:8c:d2:52:77:
a2:a1:1c:db:87:87:82:0e:8a:f4:39:b6:35:1a:43:85:03:2d:
1a:bb:03:72:d8:67:b7:6a:02:a8:06:1b:82:97:3c:27:88:2d:
25:b5:7c:37:ba:6e:7f:03:d1:68:59:d2:f7:cb:e8:0e:9b:6a:
c6:6b:b2:1e:cd:a9:96:14:d0:03:0f:cc:6e:c7:41:71:73:6f:
a5:c6:02:f3:36:71:a1:94:10:09:8a:b9:21:7f:ea:8d:22:1f:
5f:54:1a:f0:7f:c0:df:4d:39:f6:f0:29:80:9c:3e:0f:e2:2a:
bd:04:65:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgx/GZYABw/11vDmLaSTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy
YzA5ZjkwHhcNMjYwMzI1MTUwMDQzWhcNMjYwMzI2MTUwMDQzWjAzMTEwLwYDVQQD
Eyg2Zjg2ODU0MDJmYjI0NjY5ZDdkMjk1ODBmOGJlMzVkNmYyNzQ2ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCc1BezXHyPxt6oCOnqlZ3nbXjks
0+JBrR6aEp29Z9PE7q3neGM1g7AuN4QjyylIqb6iqdPX7WzyujznaITPXf+j2PW8
RVRp0KwSSDRnTeCQXVHT37M6eUiOCgjaaSSb3SpfFmewvl0zK6vNib3vyIOJEmJB
qtyRhexpD34dvJw4t/KDGWSrEu/fpfkEMiyCZVBpq6nE/VnR7gk7DjqyhnP2NP9W
q392SctJc7dm5vESh5/Ds82s3QvY8IKNfVYpk3yLvad9jTAk5aVkIDRIJQG50ahN
tcBNNwbi9X9ps8yHWryEtQ34ApR165JyVV4C6GipQDSq6R5VziL4aVyS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+GhUAvskZp19KVgPi+NdbydG4sMB8GA1UdIwQY
MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt
Y2U4ZGQ2ODk4YjI3LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3
LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUYeXso9
RCtzRfQ0pp0tiWduTxpMXGQF+sciUFUK1loyTt1wezzrXY84bD6/tNu05V8nqWh4
8gVw8vDv33+d23r7eAA3yJrzosCRdHkpBUXm/7HCVQwiphrI3CoIxbKo4aBPxIfC
06PHkRHGZZXqDCwZcwNRLi4xFpljbrZxKdCs4S9Klf9gTmB4R0mM0lJ3oqEc24eH
gg6K9Dm2NRpDhQMtGrsDcthnt2oCqAYbgpc8J4gtJbV8N7pufwPRaFnS98voDptq
xmuyHs2plhTQAw/MbsdBcXNvpcYC8zZxoZQQCYq5IX/qjSIfX1Qa8H/A30059vAp
gJw+D+IqvQRlTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:30 2026 by rpki-client