Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: xzc3Mt3pBr2PSKoEErBgRnflzB/NL682pso+iwt/RRc=
Subject key identifier: 47:20:A6:0B:14:31:AF:1D:5F:50:B7:96:BB:3C:9A:E1:9B:5B:CA:05
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 01A13CDCAEB4A00BA2071E8F69A02A886082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0C15
Signing time: Thu 15 Oct 2026 00:00:57 +0000
Manifest this update: Thu 15 Oct 2026 00:00:57 +0000
Manifest next update: Fri 16 Oct 2026 00:00:57 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: FtL/JElcPBzyboWmrjHh/+IczVqqc7+c59FnrTz5grc=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:ae:b4:a0:0b:a2:07:1e:8f:69:a0:2a:88:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Oct 15 00:00:57 2026 GMT
Not After : Oct 16 00:00:57 2026 GMT
Subject: CN=4720a60b1431af1d5f50b796bb3c9ae19b5bca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:07:52:e1:19:63:3f:87:d4:07:99:94:a6:
21:46:ea:5e:74:57:97:fe:36:48:46:f2:61:3b:08:
09:36:4c:45:91:51:33:92:dc:bd:69:da:c9:18:a0:
f6:4b:fe:7f:c5:74:fe:d4:28:8c:cc:6d:69:0e:85:
80:90:a1:99:fe:82:5f:fa:48:de:69:8b:ba:52:15:
96:d7:00:a7:23:2b:67:0c:2e:3c:fe:5d:fc:a1:70:
a0:93:4e:e3:d0:c1:11:47:f2:c4:dc:c9:f0:f2:6d:
23:01:f8:96:cd:5a:aa:16:cc:7f:40:b8:0f:9b:2d:
d2:7e:58:b6:94:3b:fd:c5:06:39:80:92:7a:64:ac:
05:c5:5d:d1:2e:ef:0f:f3:5a:b3:ba:98:47:a0:08:
78:5b:06:0a:08:9a:4a:7b:95:1a:42:a0:7c:81:64:
40:9c:e8:f7:10:14:43:2b:91:85:15:87:e2:7e:e9:
98:c8:4e:bf:ad:d8:32:f2:f3:60:a2:a5:7f:57:e9:
d9:42:dc:95:3d:f9:3c:ba:29:9c:6d:a9:8c:b2:f3:
d3:6b:26:4d:cf:94:72:93:8b:a0:c1:df:0e:5a:58:
88:d2:fa:f0:7f:fb:81:aa:6f:cf:e1:a9:17:71:51:
6f:8e:d1:d4:1b:3b:c7:d4:04:2a:fa:d2:ce:9e:c7:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:A6:0B:14:31:AF:1D:5F:50:B7:96:BB:3C:9A:E1:9B:5B:CA:05
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:27:9e:9f:1d:25:de:de:43:24:6c:c3:3c:8f:95:15:5a:b0:
eb:bf:9b:1b:53:42:7a:af:34:38:72:5b:81:0f:39:99:5c:5c:
6c:8d:ae:2d:b3:29:48:7f:35:c0:6b:50:1e:f2:8d:31:3d:3c:
16:59:0f:30:fa:2e:75:1b:0e:c8:c6:77:b8:85:e6:cd:cc:f2:
b1:54:11:c1:36:bc:6c:0b:af:55:64:cd:dc:c1:20:2c:ab:79:
d8:f4:ea:5c:15:4b:ed:da:ca:ad:21:ff:53:e3:fa:bb:59:b6:
f4:9f:07:09:c9:4c:6d:c9:78:0f:9f:47:f3:fa:fb:98:52:1a:
44:0e:d0:85:b4:42:c0:98:eb:aa:ac:c1:a0:74:de:84:eb:94:
e3:d2:49:f5:7b:45:66:b2:3d:d6:ef:d0:d8:f1:6e:3b:7e:25:
af:84:6c:d9:fb:06:69:a1:83:71:a4:8e:2a:ab:e2:b2:75:36:
70:b5:ba:04:67:8a:d4:63:16:98:14:e4:c3:18:52:d3:28:88:
8f:7e:7d:68:3b:cc:38:c2:e4:ab:3d:4a:95:dc:ff:54:14:c4:
b9:b7:e1:44:f5:9a:70:88:b1:d3:dd:a6:4a:31:b8:0b:ca:09:
94:30:a6:5a:57:13:d6:38:a2:cf:e0:dd:51:f5:ea:19:3e:4f:
a2:b9:1f:cf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE83K60oAuiBx6PaaAqiGCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjYxMDE1MDAwMDU3WhcNMjYxMDE2MDAwMDU3WjAzMTEwLwYDVQQD
Eyg0NzIwYTYwYjE0MzFhZjFkNWY1MGI3OTZiYjNjOWFlMTliNWJjYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKIHUuEZYz+H1AeZlKYhRupedFeX
/jZIRvJhOwgJNkxFkVEzkty9adrJGKD2S/5/xXT+1CiMzG1pDoWAkKGZ/oJf+kje
aYu6UhWW1wCnIytnDC48/l38oXCgk07j0MERR/LE3Mnw8m0jAfiWzVqqFsx/QLgP
my3Sfli2lDv9xQY5gJJ6ZKwFxV3RLu8P81qzuphHoAh4WwYKCJpKe5UaQqB8gWRA
nOj3EBRDK5GFFYfifumYyE6/rdgy8vNgoqV/V+nZQtyVPfk8uimcbamMsvPTayZN
z5Ryk4ugwd8OWliI0vrwf/uBqm/P4akXcVFvjtHUGzvH1AQq+tLOnsezIwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEcgpgsUMa8dX1C3lrs8muGbW8oFMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCee
nx0l3t5DJGzDPI+VFVqw67+bG1NCeq80OHJbgQ85mVxcbI2uLbMpSH81wGtQHvKN
MT08FlkPMPoudRsOyMZ3uIXmzczysVQRwTa8bAuvVWTN3MEgLKt52PTqXBVL7drK
rSH/U+P6u1m29J8HCclMbcl4D59H8/r7mFIaRA7QhbRCwJjrqqzBoHTehOuU49JJ
9XtFZrI91u/Q2PFuO34lr4Rs2fsGaaGDcaSOKqvisnU2cLW6BGeK1GMWmBTkwxhS
0yiIj359aDvMOMLkqz1Kldz/VBTEubfhRPWacIix092mSjG4C8oJlDCmWlcT1jii
z+DdUfXqGT5Porkfzw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:09 2026 by rpki-client