Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: QyCzdw42IsWf5WJeVvpGt64uZvuwxWZE6R2fHWVjEfM=
Subject key identifier: 6D:9C:AD:A4:54:A1:09:8B:BA:2B:F2:23:A8:87:00:91:A6:D1:35:44
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019D3789AD9A44FC09410266C185F0FCF217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0A00
Signing time: Sun 29 Mar 2026 03:01:02 +0000
Manifest this update: Sun 29 Mar 2026 03:01:02 +0000
Manifest next update: Mon 30 Mar 2026 03:01:02 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: 7i1GcBKCb+R/Fgd4pnzVkXx2EAmY44fPS+rtnTwvH28=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ad:9a:44:fc:09:41:02:66:c1:85:f0:fc:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Mar 29 03:01:02 2026 GMT
Not After : Mar 30 03:01:02 2026 GMT
Subject: CN=6d9cada454a1098bba2bf223a8870091a6d13544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:b6:dd:d2:9e:5d:71:4a:56:db:d0:43:65:
d2:77:e7:10:9a:bc:8d:80:08:e8:22:af:69:52:68:
15:cb:0a:70:d3:1c:95:31:2d:59:e7:04:c9:0b:2e:
26:0a:c4:b9:de:41:0d:91:c0:11:a7:66:cc:cd:6d:
a3:42:c6:f5:e2:c4:5d:fb:4a:5a:c1:35:59:30:0d:
f9:0f:1c:aa:37:19:a0:d0:ba:ef:0a:f6:b3:4f:55:
e6:84:51:2b:6b:3a:f9:57:df:95:95:27:b7:9f:81:
23:dd:b6:44:9b:72:d9:d2:f2:63:bf:0e:20:51:d8:
20:c1:c1:75:ad:5f:9a:68:2c:5e:70:1c:98:a2:bb:
81:4c:ba:5b:d8:52:30:17:3a:74:26:41:92:9f:40:
28:2b:8c:4b:e1:c8:2b:cb:af:f3:b6:fb:f9:37:ff:
6a:a5:e4:3a:a1:aa:e7:99:d6:b6:b0:86:d0:71:6c:
09:78:87:c4:82:b7:ef:03:af:6e:6e:bc:a4:78:43:
ea:3c:f5:09:57:61:3e:78:f8:2b:c4:89:49:a9:37:
c6:a4:96:3e:1d:d6:59:9a:a2:45:89:19:55:1e:ad:
29:65:22:89:50:4e:f9:27:fa:6c:33:c1:7f:7f:c8:
2c:fc:cd:0f:86:78:d5:5d:2f:5f:05:a9:4c:21:9c:
47:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:AD:A4:54:A1:09:8B:BA:2B:F2:23:A8:87:00:91:A6:D1:35:44
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:ca:91:85:c3:51:de:7c:aa:c6:f9:3f:bd:69:16:02:83:
e7:2e:5d:3b:15:49:90:17:12:aa:c3:bf:c3:16:55:b8:e0:24:
bb:d0:51:bb:8f:3a:c1:46:88:dc:14:91:18:4f:13:57:fb:16:
f4:57:a7:77:1f:fe:f4:18:c6:a2:e9:a8:56:e4:33:95:20:d5:
43:fe:a5:d2:f7:a8:e2:c8:3c:45:c1:38:27:9e:b9:3e:cb:eb:
fc:f0:30:44:61:64:0a:ec:53:ac:d3:ef:50:0a:a3:98:7e:b4:
a4:5d:0a:d2:6d:ea:cc:5b:42:57:fa:a1:0f:6e:0c:30:8c:43:
19:47:54:82:4f:ea:d2:1d:5d:3d:18:54:58:8c:3a:bc:45:5e:
ef:4e:38:5d:ca:10:c7:19:c9:c8:d2:23:e0:65:ab:f0:bd:6c:
0b:d7:39:81:02:a5:bb:54:1b:19:cd:1e:cb:bd:75:41:8f:07:
ae:d1:fe:bf:d3:ee:be:95:73:85:1d:36:04:d1:be:94:41:98:
8b:95:76:01:13:cf:ed:cb:1d:db:7a:2d:bc:ef:23:33:86:8f:
8a:ac:56:a4:48:2e:ca:26:80:ba:f4:9f:b8:c2:44:6b:e1:34:
43:be:ed:b6:47:28:ac:3f:d1:cf:69:42:92:67:aa:58:70:af:
b4:3c:4f:83
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ03ia2aRPwJQQJmwYXw/PIXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjYwMzI5MDMwMTAyWhcNMjYwMzMwMDMwMTAyWjAzMTEwLwYDVQQD
Eyg2ZDljYWRhNDU0YTEwOThiYmEyYmYyMjNhODg3MDA5MWE2ZDEzNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaW23dKeXXFKVtvQQ2XSd+cQmryN
gAjoIq9pUmgVywpw0xyVMS1Z5wTJCy4mCsS53kENkcARp2bMzW2jQsb14sRd+0pa
wTVZMA35DxyqNxmg0LrvCvazT1XmhFErazr5V9+VlSe3n4Ej3bZEm3LZ0vJjvw4g
UdggwcF1rV+aaCxecByYoruBTLpb2FIwFzp0JkGSn0AoK4xL4cgry6/ztvv5N/9q
peQ6oarnmda2sIbQcWwJeIfEgrfvA69ubrykeEPqPPUJV2E+ePgrxIlJqTfGpJY+
HdZZmqJFiRlVHq0pZSKJUE75J/psM8F/f8gs/M0PhnjVXS9fBalMIZxHbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG2craRUoQmLuivyI6iHAJGm0TVEMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyLK
kYXDUd58qsb5P71pFgKD5y5dOxVJkBcSqsO/wxZVuOAku9BRu486wUaI3BSRGE8T
V/sW9Fendx/+9BjGoumoVuQzlSDVQ/6l0veo4sg8RcE4J565Psvr/PAwRGFkCuxT
rNPvUAqjmH60pF0K0m3qzFtCV/qhD24MMIxDGUdUgk/q0h1dPRhUWIw6vEVe7044
XcoQxxnJyNIj4GWr8L1sC9c5gQKlu1QbGc0ey711QY8HrtH+v9PuvpVzhR02BNG+
lEGYi5V2ARPP7csd23otvO8jM4aPiqxWpEguyiaAuvSfuMJEa+E0Q77ttkcorD/R
z2lCkmeqWHCvtDxPgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:50 2026 by rpki-client