Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: Ln7Q4qIUEHLbGy70u805zEXta0sdk4CktdCxbOaw8i0=
Subject key identifier: F9:D4:07:0B:75:71:D6:3D:99:3E:01:F4:EA:63:44:DB:0E:5C:58:F9
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019D262825CCA6CA08247B786DB963108317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 09F7
Signing time: Wed 25 Mar 2026 18:00:58 +0000
Manifest this update: Wed 25 Mar 2026 18:00:58 +0000
Manifest next update: Thu 26 Mar 2026 18:00:58 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: 9M6rWg21eeSoW4uwlblB0w1ZVj1J6SCmD4TyfrVakic=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:25:cc:a6:ca:08:24:7b:78:6d:b9:63:10:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Mar 25 18:00:58 2026 GMT
Not After : Mar 26 18:00:58 2026 GMT
Subject: CN=f9d4070b7571d63d993e01f4ea6344db0e5c58f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:3c:57:2e:ec:6e:9f:8d:60:2b:f1:29:7a:
f3:bb:01:ea:02:25:ff:cb:4d:0f:c7:2a:2d:e6:6e:
b5:cd:f9:c5:84:f8:8e:2e:10:f1:42:61:fa:a0:6e:
d9:6e:42:1d:e6:4a:5f:d1:ac:d1:fc:4a:12:89:1f:
84:bd:57:27:94:16:9a:52:99:ad:28:f1:9a:5c:1d:
db:33:15:19:15:be:f5:c5:82:34:3b:fd:fa:64:bb:
5a:e6:b6:98:9c:a7:12:8c:1c:2a:6b:34:82:8f:b7:
6f:f7:f7:28:71:91:51:dc:18:cd:9a:af:9c:39:ee:
ce:d0:a8:58:c9:57:8e:d2:ae:b3:7d:02:75:92:f6:
7d:78:e6:e7:16:5a:62:fd:87:af:72:37:c0:12:3e:
71:8c:d7:a4:f6:de:25:41:bf:57:51:d8:0d:3f:d9:
66:a0:76:4c:29:98:06:3d:b2:a8:52:f6:a7:6f:7e:
cf:f6:46:c5:ea:2c:d5:19:f1:d3:4d:d0:28:3d:e1:
89:1c:32:9e:43:44:92:39:31:a9:7e:94:21:54:f0:
f3:45:cb:7a:47:13:57:9a:11:ea:2c:62:a8:a8:26:
c4:fe:2e:d7:4e:e3:25:b9:67:68:13:47:60:19:60:
90:84:5f:b6:f1:fa:e5:c4:36:77:7d:85:3a:52:58:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:07:0B:75:71:D6:3D:99:3E:01:F4:EA:63:44:DB:0E:5C:58:F9
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1e:3c:e5:68:db:97:13:8e:68:8d:0a:0a:3a:b2:ec:b8:e7:
64:60:12:e9:9e:3b:52:77:4d:7e:07:8e:56:ef:25:97:85:af:
58:70:18:7d:fb:a1:3f:66:be:b8:d5:49:55:e1:b4:0e:59:90:
a7:b3:cb:7b:a9:40:2a:7f:8f:28:b3:ac:b0:74:6d:2a:89:73:
8c:d9:e6:b3:78:3c:5d:65:11:dd:1b:d8:fe:be:67:b3:c7:71:
b0:a1:7b:5f:39:ab:25:ee:b6:c1:0e:14:e1:93:ac:a9:6d:55:
ba:eb:49:fd:1d:d1:72:23:c0:fa:71:60:cf:28:58:2b:2d:f2:
2d:0e:20:71:30:2e:1e:67:c0:df:2e:07:54:6b:8b:de:95:c7:
f1:a5:96:df:4b:e5:cf:23:1b:3b:b6:c9:ed:3b:fb:9d:54:c1:
d9:20:9f:91:32:3e:f7:c2:83:90:e9:6d:59:13:29:61:14:40:
f6:c9:7a:f5:73:84:c0:56:ad:b3:bb:fc:7a:f7:72:43:9f:8a:
04:cf:a3:3f:48:b3:49:6a:25:f2:67:2d:43:b3:cf:56:9e:1a:
8e:bd:c5:9d:e4:7e:b6:3b:43:74:28:b1:2a:57:10:3f:b3:54:
be:cf:fa:14:22:64:7f:6a:7b:7d:e5:df:70:76:76:25:54:f5:
dd:d7:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:01:28 2026 by rpki-client