
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: KG/GGzuH1FrC1YZiKuOW+DKL8HNvETAuQiiVAxhvWps=
Subject key identifier: 8E:91:AB:94:03:68:CD:16:68:6E:0F:BD:3F:C3:31:30:4A:E8:ED:EB
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019E1D5970F21C61532159DEF284062A249F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0A77
Signing time: Tue 12 May 2026 18:01:01 +0000
Manifest this update: Tue 12 May 2026 18:01:01 +0000
Manifest next update: Wed 13 May 2026 18:01:01 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: mmcinwpvIFH5fazSxtrrg0bVgVdXzPKbWnKyTHGlLwM=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:70:f2:1c:61:53:21:59:de:f2:84:06:2a:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: May 12 18:01:01 2026 GMT
Not After : May 13 18:01:01 2026 GMT
Subject: CN=8e91ab940368cd16686e0fbd3fc331304ae8edeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:a4:25:29:fb:4b:06:69:dd:85:c9:b2:47:
21:d8:c5:42:5d:22:e2:ec:3f:05:53:2b:a2:90:ab:
8e:82:d2:4d:bd:8c:7c:eb:9b:f6:3c:84:22:76:d7:
07:6d:14:fe:9c:91:af:4c:55:9a:3c:74:65:a8:9f:
d7:53:33:2e:69:6f:42:a0:bf:11:e0:1a:11:cd:b0:
a6:8f:7b:99:24:ad:41:47:9a:0d:6e:5d:84:c1:bd:
75:ba:21:27:90:0e:9b:c4:8c:11:50:40:b5:c9:10:
a0:9e:31:11:30:f7:de:ae:44:1e:3b:8b:79:3c:dc:
33:25:2d:7c:72:3b:f4:63:b6:43:07:8e:06:8b:b2:
54:48:ec:c7:fc:b1:42:53:fc:eb:3e:3e:3f:97:6c:
71:6b:bc:f3:8f:79:91:8e:0d:ba:32:a8:79:ff:54:
17:61:23:07:56:63:87:bd:46:e6:7f:8a:b6:18:9d:
f6:a2:d1:7a:81:00:80:e5:e3:18:54:d4:a9:31:aa:
1d:dc:09:2d:3b:84:68:2f:fc:d9:2f:be:10:c0:2d:
e2:a8:65:7c:a9:be:b6:47:5c:12:ea:51:d5:4f:98:
11:bc:35:ed:59:75:30:e9:f5:0b:b3:e0:f4:46:96:
24:db:f5:09:32:18:0b:23:90:b1:5f:f6:25:88:b0:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:AB:94:03:68:CD:16:68:6E:0F:BD:3F:C3:31:30:4A:E8:ED:EB
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7f:e2:5f:6c:a7:39:db:75:10:fb:c2:d2:08:72:22:d4:0f:
a5:22:26:d8:cf:d5:c7:bb:3e:ab:d8:6b:9e:24:cb:ce:7a:e5:
32:f0:4a:a4:74:7f:e1:35:71:02:72:d9:46:6e:be:35:dc:d7:
59:37:44:8e:4a:10:7d:75:ad:6a:a7:9b:9c:12:4d:c4:99:fa:
a0:43:e9:ea:72:14:f7:6a:1b:1a:88:8c:ac:d5:44:48:eb:64:
a8:c5:07:75:a1:31:cc:89:76:91:8f:ab:e6:c7:58:de:9e:d7:
55:80:e8:45:5b:6d:f4:a2:0b:02:57:00:b3:eb:65:0b:cd:62:
e1:62:8f:4e:dc:b0:81:69:6b:13:36:7b:8b:71:41:b3:5b:20:
0b:f2:4f:10:3c:db:79:e1:c7:83:51:20:f1:5e:dd:3d:c6:32:
e1:fa:55:12:fb:d3:6b:79:19:76:d2:e0:71:97:4f:09:4e:82:
ef:cf:d4:71:0d:dd:9f:17:f2:16:72:89:48:9a:68:4e:7e:2a:
6a:cf:88:94:37:09:31:72:6f:fa:da:8a:43:e4:d2:2e:60:b7:
98:d3:2c:6f:33:58:5c:74:6d:05:fd:f1:1c:0d:f7:a9:8a:0d:
71:61:8c:84:33:26:c5:ec:64:b0:a5:6b:ec:7b:88:02:9e:3a:
a8:a6:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:53 2026 by rpki-client