
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: ZGMsBL3MS0FRXVzrgzzx9AcfMBjuhkqSfPZolcaOZBM=
Subject key identifier: 5B:96:0B:C6:5B:23:8C:2F:0A:51:CF:48:7F:9E:F0:31:55:8D:A5:4A
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019E1EA328A864148B4B76781BE4396E2DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 00:01:09 +0000
Manifest this update: Wed 13 May 2026 00:01:09 +0000
Manifest next update: Thu 14 May 2026 00:01:09 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: 75NVCUBMLGprvFsM5pJibvb1UR47WhOm8NqNK3SA/nI=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:28:a8:64:14:8b:4b:76:78:1b:e4:39:6e:2d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: May 13 00:01:09 2026 GMT
Not After : May 14 00:01:09 2026 GMT
Subject: CN=5b960bc65b238c2f0a51cf487f9ef031558da54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:5c:42:b9:60:c0:1e:0c:25:c8:b3:05:e6:
33:14:19:23:65:86:c7:a9:0e:b9:75:ed:05:2a:01:
16:d9:94:b8:a0:8d:7f:5a:81:d7:9d:32:0b:b4:a6:
d1:58:df:85:df:40:3e:da:bc:39:91:fe:dc:56:2b:
cc:57:61:29:74:31:ea:9c:36:9a:e9:18:a6:ac:72:
5b:39:ef:c8:4a:c7:2c:ba:a3:8c:f3:d6:d2:b7:44:
5c:5f:ec:1c:20:ee:74:0d:f1:30:bb:3b:7f:65:8b:
c6:e5:97:18:6a:2f:6a:2c:50:2f:ad:56:22:b2:fe:
cc:b5:79:8b:62:99:21:f0:f3:84:14:1e:f2:c6:96:
7b:99:44:28:fd:c0:56:76:4f:1c:96:eb:46:93:a2:
4a:35:fa:38:72:b9:86:a7:e4:2e:bf:bf:ca:81:c0:
a3:66:aa:17:dc:a7:fc:66:78:40:d1:e9:1e:ca:91:
43:e1:eb:d4:7d:06:9a:61:97:29:03:87:ad:da:ae:
b5:d1:d0:49:77:b2:4b:21:c5:81:6b:b9:4a:81:9c:
71:46:92:33:5e:63:52:d4:c3:8e:d6:e2:a8:55:82:
e6:a7:3f:a6:21:1b:85:59:98:4c:8d:63:ae:06:e6:
dc:bf:3e:5a:34:38:62:b9:c5:c4:e5:ad:dd:9f:dd:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:0B:C6:5B:23:8C:2F:0A:51:CF:48:7F:9E:F0:31:55:8D:A5:4A
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9e:b4:78:10:64:69:49:25:ba:4d:0e:2c:11:0c:6e:a0:f9:
bf:b4:65:5a:27:a0:3d:78:2a:9d:c4:df:57:51:61:c5:42:6e:
40:70:0a:bf:78:c5:bf:ac:a4:e3:b4:dc:9e:ce:bc:43:90:96:
b5:3e:ba:21:02:b1:0b:cb:b7:3e:b1:14:3a:72:ff:73:09:d0:
d5:b0:91:c1:01:6a:42:f5:ba:bf:4e:13:5d:87:52:c7:49:7e:
7b:88:27:68:62:d1:a5:e1:f6:07:9c:00:7a:17:ba:64:87:d7:
63:4f:0d:20:65:8f:ac:38:60:b2:7b:ea:95:71:8e:69:c5:ae:
f5:ac:74:45:06:55:5b:51:5c:99:e4:27:3c:60:03:2f:f1:1f:
84:28:ec:98:92:37:4d:3d:cf:33:c2:e6:f6:58:26:82:ad:00:
74:1c:59:4a:1d:f3:ef:67:6c:b8:12:77:df:77:c4:0e:40:40:
8c:75:3b:6f:46:1b:62:a1:c4:a0:7a:a6:e2:a7:3c:ac:f6:cd:
3d:1c:ca:10:8a:1d:f2:47:65:cc:06:ca:cf:70:96:8a:7c:2d:
94:cb:0b:da:9f:18:4b:70:7e:10:6a:d5:74:c9:41:ab:3d:4b:
e5:ce:0a:2b:03:ba:46:27:7e:e0:09:f2:e9:99:e0:ec:ed:f7:
92:a3:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:12 2026 by rpki-client