
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: 4maR1lVKyEcYb7Rhjt9JOzxygVRpGN9aEy3xNTEvN+w=
Subject key identifier: A0:36:B9:73:66:A8:59:C7:5A:31:94:AB:4E:FE:9B:A7:EF:65:B3:89
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 019CABD8EE02FECA519506CF039CBBABAAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:00:46 +0000
Manifest this update: Mon 02 Mar 2026 00:00:46 +0000
Manifest next update: Tue 03 Mar 2026 00:00:46 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: vMlBY2KKzA9lRAu8VhZIi4CyW+j8xqaqL3DGT1MJ1DQ=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ee:02:fe:ca:51:95:06:cf:03:9c:bb:ab:aa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Mar 2 00:00:46 2026 GMT
Not After : Mar 3 00:00:46 2026 GMT
Subject: CN=a036b97366a859c75a3194ab4efe9ba7ef65b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:0f:83:88:80:ad:1c:c4:e0:47:8c:c7:ef:
a0:d1:cd:b3:8e:e8:cd:d0:40:0a:79:8a:55:20:fa:
63:58:ed:a5:ad:2a:87:0f:b0:73:e5:e8:5c:09:78:
26:e3:8f:27:dd:fa:db:03:c6:92:7d:de:80:15:e1:
ac:be:2b:20:3b:92:5b:eb:df:9a:d9:9e:4d:a8:9e:
cb:2b:b4:1f:b3:b9:cd:e9:66:a4:54:54:49:36:39:
99:25:7a:0f:2b:a9:42:ba:81:31:07:e1:5c:81:3c:
df:a5:20:93:76:5f:70:72:d0:d4:eb:d2:b2:95:02:
3c:93:ef:fa:b1:1b:05:4c:94:6e:5f:eb:58:a1:b1:
b4:b4:1e:c8:cc:ef:d8:04:c3:34:01:eb:08:44:52:
58:90:9b:ab:16:ce:9f:e0:26:1d:50:cc:8c:f1:cb:
d8:84:9c:20:64:97:e5:5e:a6:f6:ff:ed:ea:e1:a3:
cf:51:b7:dc:90:1a:5b:d5:9d:cc:1f:90:70:8e:56:
7a:ee:66:f3:06:48:aa:e4:d2:32:97:06:68:21:f3:
c9:6b:31:cc:bc:d0:ae:bc:a6:6e:db:b0:ab:85:c9:
7c:87:b3:e1:f0:3a:16:e8:51:85:1a:fe:d7:28:cf:
cc:70:f9:29:68:77:12:bd:fc:2f:87:fb:81:02:b7:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:B9:73:66:A8:59:C7:5A:31:94:AB:4E:FE:9B:A7:EF:65:B3:89
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9b:89:df:74:65:65:f9:7e:74:90:a4:44:9b:f7:6f:04:e2:
75:89:39:a4:16:41:15:e0:19:75:28:57:5d:f4:20:57:32:78:
7d:d2:63:da:78:e6:15:27:da:cd:95:9d:83:d0:ed:25:1b:b8:
70:b5:86:74:77:6b:e1:69:b3:7f:cf:30:91:0f:d2:7f:d8:a3:
79:62:83:df:0a:fb:d0:c2:ba:91:6f:7a:24:bc:a9:fa:d1:17:
74:8e:f2:d5:61:65:64:db:b4:e5:57:4f:d6:bb:f9:7d:bc:8e:
5f:a3:c9:46:32:23:cd:9d:78:ba:a9:a7:b5:a1:55:63:3c:b2:
33:eb:e5:7e:e7:59:39:7f:2d:fb:55:d6:6e:f5:bf:f6:b1:66:
92:97:a8:0c:4b:e0:87:35:8b:be:4d:3e:88:32:ad:8f:e6:c2:
f2:1d:c5:96:73:68:0d:fd:30:b1:b1:26:53:8d:88:65:1b:a4:
af:1c:9f:66:f6:b3:7e:87:6f:f8:9d:2d:88:5c:f9:4d:f9:d8:
a8:71:4e:96:ba:40:fd:8a:9c:ba:16:59:89:a6:1d:01:5b:9a:
bd:49:01:f4:ee:91:02:8d:76:0d:51:0c:97:23:f3:f2:85:28:
d8:7c:37:3f:29:f6:d8:20:c0:d8:f0:c4:63:d4:b3:84:79:b0:
c3:4e:39:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:20 2026 by rpki-client