Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: XmM6F7Q/KgudONQ7Wej7XjGRsNCHajNv6twYEtMkyww=
Subject key identifier: CE:2A:E2:F6:F5:DF:72:22:30:8D:60:7A:3F:4B:16:ED:04:AE:83:34
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019F9211353882403DD0740406E1C2A2DCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0B38
Signing time: Fri 24 Jul 2026 03:00:28 +0000
Manifest this update: Fri 24 Jul 2026 03:00:28 +0000
Manifest next update: Sat 25 Jul 2026 03:00:28 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: f4CG9/Mzz0WHaNpxgVHCFtuQrQFD8V5V1R9XDJBHoXE=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:35:38:82:40:3d:d0:74:04:06:e1:c2:a2:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Jul 24 03:00:28 2026 GMT
Not After : Jul 25 03:00:28 2026 GMT
Subject: CN=ce2ae2f6f5df7222308d607a3f4b16ed04ae8334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:ef:97:3f:be:fb:6c:7e:f3:00:7c:4b:ca:
39:4c:52:23:1b:dd:d1:f8:47:55:14:ef:e9:0a:ef:
4d:7b:39:9c:3b:ef:37:a8:48:2f:32:a6:31:4b:48:
85:e6:d2:37:e0:6e:76:71:15:d9:d0:c3:34:da:7e:
95:4d:01:b5:a4:00:65:34:b5:4c:bb:b8:31:25:9b:
1a:6d:fb:b1:5f:32:b2:e0:aa:53:84:2d:25:f9:f1:
6e:44:ee:c6:e7:34:4a:9a:0d:41:e3:97:7f:c3:9e:
b1:13:d9:8a:a7:64:2d:ff:59:10:fa:cc:03:99:26:
c3:42:02:8f:a0:4a:4b:f0:82:bf:a0:9d:4f:6a:1b:
a8:51:26:68:13:8b:2d:91:63:0e:85:2d:81:90:14:
d9:45:eb:d2:68:b5:10:d8:1c:d2:e3:f4:1b:8d:e7:
fb:3a:60:c9:51:26:c6:ac:0e:ea:fd:15:a9:18:e5:
e5:29:f1:6e:b6:eb:94:36:57:5a:66:04:f1:6e:b8:
13:69:9d:c9:a7:fe:51:f6:5b:20:df:77:5c:74:f2:
2a:78:d5:48:bb:c7:24:37:cd:6b:76:72:e4:34:d5:
99:58:e5:f1:16:a0:1f:57:fb:7a:7f:23:51:29:0b:
d2:5f:97:25:63:85:8b:58:94:c6:88:4f:55:ed:ee:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:E2:F6:F5:DF:72:22:30:8D:60:7A:3F:4B:16:ED:04:AE:83:34
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f8:c1:96:16:01:c3:cb:c5:54:9d:8d:6d:7d:06:56:a0:71:
2d:5b:73:92:08:c3:7d:d2:c5:55:c3:fd:93:bf:a0:ab:31:d3:
2a:12:83:6d:63:f1:27:19:4d:5b:83:98:f9:3e:1d:8d:54:5c:
9d:ff:52:f5:ab:2d:5d:f3:8b:ff:6a:4b:5f:63:3f:74:da:2f:
db:09:f3:bd:69:76:33:0a:05:23:8c:30:d1:7c:26:a6:7b:3c:
bf:5b:9d:9a:2a:9e:f9:25:96:1e:22:23:28:c8:2c:82:11:78:
4d:65:4a:d7:37:88:a9:4e:55:c9:8c:8b:05:cd:c5:0a:e5:03:
50:72:4b:9e:31:8b:b9:37:cd:16:88:96:7d:44:c1:6f:2f:b0:
9d:1d:ce:98:cd:b8:23:4c:78:5b:a3:51:53:ae:6d:3a:9c:82:
6e:c4:e1:db:fb:c3:ed:9b:28:ba:86:0c:51:b8:91:3d:8a:9e:
ff:0f:9e:97:8d:7b:01:6f:7f:e4:a4:94:6b:87:8e:34:3b:0b:
4c:c5:40:75:69:fb:d2:f3:31:6f:c1:f8:a9:74:3d:08:7a:d9:
e2:12:0a:ed:c3:97:33:87:5a:df:e0:b7:68:7a:c1:fe:92:a7:
d9:98:76:51:b9:cc:5d:b8:c7:6d:af:c5:02:5b:fc:ae:f5:3e:
02:3e:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:57 2026 by rpki-client