Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: MrLU0fIct7wEtLpPBzm2jIYz455T/g7PY0hq1giTelQ=
Subject key identifier: 18:AA:A7:D5:70:1A:71:2B:30:B5:E3:DB:B0:80:A7:F7:A9:2E:06:DC
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019D38D2B3BD2B6F37BD60D0E11C3D4FA247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: AKpERHnjSvfS4hFHP084Pe9/jL0ftkNzBz/nbWsctjI=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:bd:2b:6f:37:bd:60:d0:e1:1c:3d:4f:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=18aaa7d5701a712b30b5e3dbb080a7f7a92e06dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:aa:1c:8e:ce:35:a9:7b:3c:d0:c5:7a:92:
46:b2:c6:f2:6d:78:42:1b:65:c0:15:92:75:6a:36:
63:b2:7d:52:80:3d:89:47:a8:a1:55:62:7c:fb:c8:
87:0c:3e:a3:e0:62:4a:cc:f0:23:56:fa:3a:2f:f0:
1e:71:85:56:ab:dd:d4:ca:b4:c7:c0:3f:4f:ec:63:
f6:38:b4:4d:f3:3d:4d:8c:45:69:b0:cd:03:68:57:
b9:58:69:ab:0a:66:32:cf:8b:57:7c:f0:b9:22:84:
a7:5c:55:13:e3:d8:b6:50:d5:76:31:3b:bf:f4:53:
8a:98:92:c2:35:ea:da:96:31:6f:48:d9:c6:9e:28:
97:33:ea:d5:ac:7e:29:f1:1d:4b:45:01:2a:c0:15:
09:09:79:45:ae:e5:4e:ba:14:cf:f5:8d:7c:67:a5:
2b:33:98:e6:4b:27:52:23:5c:57:56:42:15:e6:cf:
c6:d6:ea:c6:8b:4c:7e:ff:d9:7a:37:12:28:2e:8e:
0a:c9:e1:93:3f:3b:57:c2:65:e7:75:5a:5d:5f:ed:
e0:90:66:fb:04:4a:14:7d:a0:b5:b0:1a:13:81:46:
7e:06:2e:02:49:2b:4f:10:2c:80:c3:4f:3d:6b:6a:
3f:11:2a:9d:ff:69:2e:16:97:a4:df:d2:45:d2:76:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:A7:D5:70:1A:71:2B:30:B5:E3:DB:B0:80:A7:F7:A9:2E:06:DC
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:84:a2:6d:6d:da:5a:f8:3f:74:bd:89:66:50:82:06:d6:
16:19:b4:1b:8c:57:10:9e:cc:b8:cd:93:2b:71:4d:ec:cf:95:
72:3d:78:6b:51:1f:02:db:20:37:4f:91:56:ec:f1:be:49:b6:
2d:cf:d9:8c:66:aa:2b:e8:5d:db:72:fa:67:a7:60:cf:a5:9b:
c4:31:88:1e:0c:d2:ac:be:b1:76:25:1f:da:a8:7e:44:6d:e3:
80:98:18:a2:b4:4a:2a:6c:8b:8c:12:fc:43:d4:22:da:b8:6a:
ef:d4:1e:5d:f7:f8:cf:d9:dd:47:68:cd:ff:a3:18:a0:5a:a5:
78:2c:60:4a:63:7a:ef:4f:7d:ba:ae:22:12:38:fd:cd:c2:ef:
62:28:6a:c4:88:0a:ef:f3:46:3d:7e:1e:8f:ba:97:c6:cb:6b:
3e:a1:c4:b9:5f:7d:9a:2d:9d:4b:d8:5f:d3:61:62:e6:c9:45:
03:c4:55:f3:51:77:f1:cd:60:6d:fc:4a:ab:87:c4:61:ad:47:
ff:cb:92:d4:70:c0:4d:23:0c:b2:94:ce:9f:d8:88:a9:09:37:
a9:63:e0:aa:e4:b1:ee:8a:f5:d9:dd:42:62:73:1a:38:16:00:
30:77:76:4f:2d:a8:a0:be:e9:74:dd:d2:68:31:51:1d:86:8d:
db:82:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:12 2026 by rpki-client