Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: oQH5L0mOlA072PCiQ+NNLkoHnA0hRi/XfmV4zJc0m+w=
Subject key identifier: 35:4E:B7:D4:44:43:97:F4:05:71:B1:52:E5:EF:7C:2D:67:8E:81:90
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 01A14014C07E1C56A54EA4002FBF74174370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 15:01:04 +0000
Manifest this update: Thu 15 Oct 2026 15:01:04 +0000
Manifest next update: Fri 16 Oct 2026 15:01:04 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: SQkqUAykkRcOZTXWCYI0g9kHweMxlhAV/dWS+1g5k6Q=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:c0:7e:1c:56:a5:4e:a4:00:2f:bf:74:17:43:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Oct 15 15:01:04 2026 GMT
Not After : Oct 16 15:01:04 2026 GMT
Subject: CN=354eb7d4444397f40571b152e5ef7c2d678e8190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:bf:bf:ae:53:4c:7c:3e:41:9d:fd:df:b9:
ac:d1:7c:f5:7c:95:94:74:27:59:68:6c:3d:75:89:
26:03:10:51:ad:51:11:e6:59:fa:02:48:f5:f7:b4:
cc:88:44:62:4c:ca:b4:17:8b:44:c7:a9:29:64:74:
d1:ab:8b:da:39:2d:96:91:7c:2f:3f:87:be:cb:24:
44:f9:79:08:84:78:48:a2:43:7f:12:1e:e1:16:ac:
81:78:31:0d:c6:2a:2c:e7:8a:a6:45:e0:b7:82:50:
3c:20:5e:7f:cd:b3:46:55:a7:10:7c:fe:87:42:03:
be:a2:74:52:e3:bd:e5:5b:c4:db:4a:e1:dd:4b:dc:
c3:dd:c1:7d:3d:00:20:47:0b:fb:23:f8:55:b7:2f:
6e:de:eb:48:ff:f9:25:1c:d7:37:55:31:00:0f:06:
e4:39:7a:15:1b:bf:97:c6:10:5f:08:7b:1b:50:0d:
4b:48:fb:3e:53:51:10:71:1e:e0:da:a0:43:a1:bb:
b5:df:b4:3a:5b:c1:d2:6e:f2:49:a7:13:a2:c7:15:
61:76:b5:01:81:42:d7:7f:80:cf:7d:e4:55:1a:14:
1e:27:4f:83:69:f7:0c:8d:58:7c:84:d6:b4:06:cf:
c6:24:fb:b3:57:66:0f:fb:5a:4e:91:38:a9:41:a5:
6a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:B7:D4:44:43:97:F4:05:71:B1:52:E5:EF:7C:2D:67:8E:81:90
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d5:d0:5e:82:39:79:f4:e8:74:ae:0c:84:0d:a4:2d:25:af:
af:1a:b3:61:80:09:87:95:1f:48:84:8a:17:dd:1c:a6:6e:41:
6f:15:ce:63:cc:73:57:55:ae:60:78:69:d7:ed:06:f4:4b:60:
3b:93:24:83:08:bd:74:6e:77:40:7c:fb:6d:93:bc:4e:6f:5e:
58:5a:0a:4b:75:5e:6f:03:d2:8b:8a:35:6c:62:97:bf:b8:9e:
40:53:e0:68:a2:cc:48:64:c9:a1:33:19:09:d1:dd:27:fa:ae:
ad:64:5c:61:35:db:98:7b:e2:f1:a5:19:c7:b5:c1:9f:1f:a8:
85:d0:7b:e5:8e:17:ac:c6:72:d6:f0:3b:d8:ea:36:0b:39:4a:
dc:4e:df:c7:f2:cb:d7:2c:4d:a0:05:f1:75:bc:c8:83:8c:6d:
ae:3d:98:f5:5d:64:68:93:a0:60:e3:3b:20:94:22:33:39:c2:
ab:d8:6e:27:e7:92:a5:05:c5:12:f1:6f:12:38:dc:d3:25:1c:
ce:63:d7:3c:98:52:78:72:8a:a5:d1:32:c7:17:ff:51:9d:c2:
e9:35:ba:ac:03:8c:e9:42:f1:dc:b6:76:df:0a:51:c8:12:e2:
bc:b9:f1:36:4b:ce:4a:70:25:d4:dd:8c:cb:47:70:45:6c:94:
b5:fa:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:54 2026 by rpki-client