Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File: VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier: hcM+2PE+HFTUu1eRHELH9yILK3LIubPW3lUZvjsWVq4=
Subject key identifier: CD:5D:7B:89:06:82:E9:8F:FC:9A:45:22:8F:6B:76:1D:22:F5:27:0F
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer: /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial: 01A0D2008A52F6CFC62C64E6FBB2D4BAE75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 06:00:45 +0000
Manifest this update: Thu 24 Sep 2026 06:00:45 +0000
Manifest next update: Fri 25 Sep 2026 06:00:45 +0000
Files and hashes: 1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: F51CjJz0trmGa0hl0Y5Cekxz/3chrezUlFpR8P6FPJo=)
3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:8a:52:f6:cf:c6:2c:64:e6:fb:b2:d4:ba:e7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Validity
Not Before: Sep 24 06:00:45 2026 GMT
Not After : Sep 25 06:00:45 2026 GMT
Subject: CN=cd5d7b890682e98ffc9a45228f6b761d22f5270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:f9:be:f1:8c:d3:9b:f0:be:f5:64:7b:e3:
85:5a:4f:ed:65:fd:4b:a3:2d:8f:76:64:c1:d0:c5:
6f:45:ca:f4:da:54:ed:77:17:e2:9a:d4:5f:1c:07:
a4:56:ce:da:1a:44:65:a8:b2:c8:1f:ed:a8:40:b2:
89:7e:56:54:f4:06:2b:56:69:b3:9d:e8:df:a2:4c:
6f:20:99:ab:97:8c:42:94:f3:2c:9c:af:d6:35:9c:
9b:eb:e6:cb:f8:1b:65:a5:67:a7:11:b0:0b:ec:ae:
40:b3:54:a7:80:7f:6c:85:19:8c:ca:cb:b6:8b:f9:
18:96:e2:89:8e:6d:73:b2:20:20:dd:ed:d4:6f:ca:
bd:2a:dc:7a:f8:0e:d7:e8:e5:03:cc:32:e3:ec:85:
20:ba:65:f9:07:9f:e4:a6:c6:15:2b:b7:c1:44:31:
5f:7f:e0:dd:3b:e5:34:f9:de:36:d0:cd:ec:ee:f9:
1b:bc:de:35:8d:18:c0:04:74:e7:64:28:ce:45:c2:
30:dd:31:7e:05:7b:24:ac:b5:d8:f6:0e:54:3d:66:
13:7e:1a:02:fe:e4:a5:82:ed:82:f9:2a:99:82:16:
d5:d5:1d:a8:18:ea:87:65:a0:10:66:ee:57:4e:33:
c3:ec:08:0a:d9:83:c4:72:88:1e:dc:1b:62:5c:e7:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:7B:89:06:82:E9:8F:FC:9A:45:22:8F:6B:76:1D:22:F5:27:0F
X509v3 Authority Key Identifier:
keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:94:2c:8d:59:ce:3b:f6:59:eb:58:e5:fe:77:09:50:dd:a1:
d4:59:2f:ea:9d:15:25:06:cf:7a:94:66:51:7e:b8:4d:fb:39:
c9:7e:65:3d:ec:50:45:e7:4f:2d:23:da:60:fd:49:2d:5b:62:
65:89:61:eb:6b:e8:75:dc:b2:83:f7:b7:60:29:54:bc:1a:22:
d1:03:a2:94:91:84:d4:06:36:10:3b:cc:f7:29:88:f5:98:e4:
77:e9:18:6f:e7:1e:56:a8:0d:6b:70:77:7e:b1:42:ce:13:08:
da:28:29:f8:35:83:79:85:f7:c4:76:f7:5f:7c:b5:27:7c:0e:
d2:a1:b0:b1:f0:39:a8:a4:9e:3e:d4:da:4b:bf:3b:dc:35:4a:
bc:80:6f:9c:df:7f:29:32:13:94:3c:17:03:df:f2:29:47:c7:
33:cc:d4:fa:05:87:9f:a4:77:fd:22:c7:64:aa:ce:15:69:01:
ec:40:dc:4b:ee:9c:d4:ad:df:23:1c:f8:b0:68:30:5b:70:41:
82:7e:4a:7f:f0:18:65:21:4b:f3:0d:4c:17:f4:ae:fe:e1:40:
42:db:cc:0a:5b:c7:a4:64:4a:93:e2:af:fd:4d:6f:c3:fa:fb:
56:ec:c6:92:5b:f0:9a:21:0f:f0:c4:58:67:73:ed:65:91:b8:
9d:b3:cc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAIpS9s/GLGTm+7LUuudbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODRiNTNlYzA2OWUzMDI2MjM1OTZmYjNhYTc5ZjVkNzgy
YzA5ZjkwHhcNMjYwOTI0MDYwMDQ1WhcNMjYwOTI1MDYwMDQ1WjAzMTEwLwYDVQQD
EyhjZDVkN2I4OTA2ODJlOThmZmM5YTQ1MjI4ZjZiNzYxZDIyZjUyNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhX5vvGM05vwvvVke+OFWk/tZf1L
oy2PdmTB0MVvRcr02lTtdxfimtRfHAekVs7aGkRlqLLIH+2oQLKJflZU9AYrVmmz
nejfokxvIJmrl4xClPMsnK/WNZyb6+bL+BtlpWenEbAL7K5As1SngH9shRmMysu2
i/kYluKJjm1zsiAg3e3Ub8q9Ktx6+A7X6OUDzDLj7IUgumX5B5/kpsYVK7fBRDFf
f+DdO+U0+d420M3s7vkbvN41jRjABHTnZCjORcIw3TF+BXskrLXY9g5UPWYTfhoC
/uSlgu2C+SqZghbV1R2oGOqHZaAQZu5XTjPD7AgK2YPEcoge3BtiXOdmYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1de4kGgumP/JpFIo9rdh0i9ScPMB8GA1UdIwQY
MBaAFFSEtT7AaeMCYjWW+zqnn114LAn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODkt
Y2U4ZGQ2ODk4YjI3LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYTYxOGMtMzVjZS00ZDMxLWJiODktY2U4ZGQ2ODk4YjI3
LzEvVklTMVBzQnA0d0ppTlpiN09xZWZYWGdzQ2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpQsjVnO
O/ZZ61jl/ncJUN2h1Fkv6p0VJQbPepRmUX64Tfs5yX5lPexQRedPLSPaYP1JLVti
ZYlh62voddyyg/e3YClUvBoi0QOilJGE1AY2EDvM9ymI9Zjkd+kYb+ceVqgNa3B3
frFCzhMI2igp+DWDeYX3xHb3X3y1J3wO0qGwsfA5qKSePtTaS7873DVKvIBvnN9/
KTITlDwXA9/yKUfHM8zU+gWHn6R3/SLHZKrOFWkB7EDcS+6c1K3fIxz4sGgwW3BB
gn5Kf/AYZSFL8w1MF/Su/uFAQtvMClvHpGRKk+Kv/U1vw/r7VuzGklvwmiEP8MRY
Z3PtZZG4nbPMrQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:01:49 2026 by rpki-client