Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: Z+h9Mqbl3yJ4n2emGspP9wAk/rbSStQo0kDSxJNYR1w=
Subject key identifier: C3:D1:DA:2C:53:1A:EC:0F:FA:CA:0D:15:22:90:C9:E8:2F:A0:76:B8
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019F1867D07CC46C327D296122F05F4FE09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0AF9
Signing time: Tue 30 Jun 2026 12:01:24 +0000
Manifest this update: Tue 30 Jun 2026 12:01:24 +0000
Manifest next update: Wed 01 Jul 2026 12:01:24 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: uLlx9tAmW67SFuuX2LAmxeoxIN/AeP4rMvhtO299ZRc=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:d0:7c:c4:6c:32:7d:29:61:22:f0:5f:4f:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Jun 30 12:01:24 2026 GMT
Not After : Jul 1 12:01:24 2026 GMT
Subject: CN=c3d1da2c531aec0ffaca0d152290c9e82fa076b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:34:81:7d:35:18:65:f3:fc:f4:08:d4:10:
69:db:68:d1:30:9a:e9:54:40:6e:78:f7:38:96:e7:
25:f2:6e:84:83:44:c7:63:0b:cd:ae:bf:b7:2e:9e:
ad:91:7e:d1:99:e4:e4:a8:79:64:a2:57:e8:be:2b:
09:9f:1e:50:db:a4:8f:d9:f1:23:0e:47:7e:3e:fa:
5a:8c:9b:0e:f3:e3:be:a4:e9:79:05:c2:60:ad:3e:
d2:d2:bc:8b:fc:b4:f4:6c:fb:ad:a5:74:96:62:4c:
0f:de:fa:fb:6b:e4:bd:1f:d0:59:56:e4:0e:a1:dd:
c5:10:9c:df:2c:8d:ca:84:6b:c0:57:c3:07:e3:a3:
5b:2c:2d:92:8a:fa:e9:49:9c:1a:26:42:b4:a0:71:
1b:f7:7f:a6:b3:2a:86:f2:14:09:0a:14:e3:47:17:
e8:a6:f6:b7:85:b6:91:49:2f:5d:96:c1:bb:e1:15:
02:3b:a3:f1:ef:a2:43:86:fc:91:85:c2:e5:f0:95:
59:57:e7:dc:a7:60:97:b2:b8:92:7e:86:16:d6:f7:
29:30:31:27:5f:50:21:c5:54:ff:3b:d6:4e:e0:70:
de:7e:46:ff:94:47:52:33:e5:c1:8c:30:45:83:53:
07:ef:2c:2c:28:54:e2:2e:bf:de:8f:1f:97:19:ea:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:DA:2C:53:1A:EC:0F:FA:CA:0D:15:22:90:C9:E8:2F:A0:76:B8
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:57:09:dd:f7:08:66:25:dc:aa:50:f9:17:87:0a:d5:83:
c7:93:52:7a:9a:eb:a0:c4:a7:50:44:67:1e:96:78:24:dc:1d:
ff:73:f8:08:4a:02:d5:f9:4c:c9:d5:44:1c:a8:fa:28:ed:1a:
e3:06:e5:44:41:23:54:71:03:06:ca:20:37:ce:7a:9d:5f:cb:
a1:1b:83:d2:25:cd:21:e9:26:26:99:4d:f9:15:eb:8d:f3:71:
6c:8f:9d:6d:31:4b:dd:a2:76:69:d1:15:32:e9:99:f6:74:54:
0c:9b:e8:1d:cd:a1:bc:ca:6c:ae:67:f1:68:98:a5:6f:ee:0e:
50:4b:e7:3b:dc:43:c3:d9:47:5c:89:ed:bc:73:6f:de:61:c1:
19:9b:e7:c2:32:0c:28:e9:be:22:fc:2d:ac:27:59:74:f8:3d:
08:78:ee:9d:da:35:fb:b6:06:37:00:c5:13:bf:5a:5e:d6:f4:
fe:0a:f4:05:6f:db:20:b4:4d:4f:f6:f8:37:ae:60:79:23:d4:
e0:e2:63:88:31:9e:2f:80:86:6d:de:c4:49:4f:df:e5:82:74:
02:40:ee:40:b7:13:bd:5d:b3:ec:19:8a:1c:be:7b:4b:8d:63:
80:00:e4:da:c9:85:64:ed:8d:c1:2a:9a:63:66:10:fd:05:9a:
a8:f5:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:51 2026 by rpki-client