Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: YLDO1zykPWoK8roc7VuLvrFmmNbXZGmw9vCmekMCs/I=
Subject key identifier: D2:6C:26:E3:2A:BB:36:3F:DD:88:52:B5:69:8D:1E:0D:D1:82:F4:AA
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019CAC7E1E65F0FC6338BF23695736C78C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 09B8
Signing time: Mon 02 Mar 2026 03:01:12 +0000
Manifest this update: Mon 02 Mar 2026 03:01:12 +0000
Manifest next update: Tue 03 Mar 2026 03:01:12 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: +ChAyooP5PwgnRwHY2B0Jus4d8LRBEqHmrMLFJDJnNM=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:1e:65:f0:fc:63:38:bf:23:69:57:36:c7:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Mar 2 03:01:12 2026 GMT
Not After : Mar 3 03:01:12 2026 GMT
Subject: CN=d26c26e32abb363fdd8852b5698d1e0dd182f4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:dc:37:ce:9a:b3:48:44:96:d7:8d:ec:95:
45:8a:89:bd:0a:7f:e8:4a:03:b6:40:3c:05:be:24:
5e:be:84:4d:3a:4e:0f:28:68:3b:b1:49:93:f4:05:
80:86:2f:6a:e4:31:53:da:45:cf:ab:46:37:c5:0d:
d0:0e:38:66:db:cc:56:86:c4:9b:e0:86:5f:df:5e:
b4:65:2b:fc:ed:a2:f9:82:06:93:42:8f:79:0b:e0:
0e:78:a1:18:27:1f:0b:db:be:e0:b7:21:b9:60:4a:
6a:b4:66:60:49:39:d0:0b:60:c3:94:44:74:b3:c2:
0b:1f:61:a8:67:1b:fa:bc:99:c5:bf:33:84:46:c8:
94:77:e2:bd:34:93:36:69:2c:b4:c5:90:33:e3:9b:
39:39:d0:28:31:26:24:b2:2c:cf:04:2c:d1:38:17:
cc:f8:6a:15:d2:39:16:0b:48:aa:6c:f7:e5:bb:71:
72:45:d2:3b:02:fc:ca:6b:88:2b:c1:98:f2:98:95:
4f:83:13:01:4d:d1:41:cb:e4:27:d2:f9:0e:72:74:
5e:6a:95:43:f7:60:f4:c8:84:22:0d:57:e8:13:f7:
ff:fe:b0:de:81:fe:07:76:84:08:5f:31:2b:98:f4:
4b:1d:36:9f:e5:9c:1b:58:85:e7:ee:b9:06:df:f4:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6C:26:E3:2A:BB:36:3F:DD:88:52:B5:69:8D:1E:0D:D1:82:F4:AA
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:15:99:96:dc:a3:72:a8:72:95:66:0f:fb:20:db:e9:40:c6:
bd:a2:be:d6:f7:0e:10:35:ba:ff:0a:06:88:c4:05:e2:4f:55:
28:6e:db:25:19:dc:ac:74:26:89:a5:db:f0:c3:d2:a7:f6:67:
f5:ad:8b:f7:65:f4:e4:f3:38:a2:79:b4:7b:13:7e:f3:c1:7b:
a0:46:c3:08:bd:7e:60:1a:b5:09:73:24:fa:0a:7d:44:57:1e:
00:b9:cc:5f:fb:54:4f:bc:a8:be:7f:96:a7:1c:ac:da:fc:dc:
62:12:b2:4f:1f:53:1b:a3:e4:db:5f:24:b4:f7:71:3b:b1:fd:
92:1c:8d:98:86:d9:02:0a:b1:ba:67:99:d4:d8:24:a7:24:be:
76:61:23:79:cb:4a:d3:fb:60:2c:3c:b4:7d:f9:6e:43:97:9f:
76:5b:62:ed:a4:16:58:d0:fc:05:3f:f3:07:7f:6e:01:48:4b:
4a:af:65:bb:b6:83:fe:5f:bb:08:54:59:1c:3a:a4:c0:b4:e6:
5e:ea:5a:35:f8:21:1b:e6:5e:e6:53:95:a9:70:02:bf:d8:f9:
27:a3:05:43:76:1d:dc:a2:32:b9:78:55:d6:dd:c9:85:96:fc:
ae:6a:d3:ae:12:f9:05:0a:77:0c:09:44:87:46:32:40:09:9e:
31:a6:2c:87
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZysfh5l8PxjOL8jaVc2x4xuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjYwMzAyMDMwMTEyWhcNMjYwMzAzMDMwMTEyWjAzMTEwLwYDVQQD
EyhkMjZjMjZlMzJhYmIzNjNmZGQ4ODUyYjU2OThkMWUwZGQxODJmNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC/cN86as0hElteN7JVFiom9Cn/o
SgO2QDwFviRevoRNOk4PKGg7sUmT9AWAhi9q5DFT2kXPq0Y3xQ3QDjhm28xWhsSb
4IZf3160ZSv87aL5ggaTQo95C+AOeKEYJx8L277gtyG5YEpqtGZgSTnQC2DDlER0
s8ILH2GoZxv6vJnFvzOERsiUd+K9NJM2aSy0xZAz45s5OdAoMSYksizPBCzROBfM
+GoV0jkWC0iqbPflu3FyRdI7AvzKa4grwZjymJVPgxMBTdFBy+Qn0vkOcnReapVD
92D0yIQiDVfoE/f//rDegf4HdoQIXzErmPRLHTaf5ZwbWIXn7rkG3/RZkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNJsJuMquzY/3YhStWmNHg3RgvSqMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuxWZ
ltyjcqhylWYP+yDb6UDGvaK+1vcOEDW6/woGiMQF4k9VKG7bJRncrHQmiaXb8MPS
p/Zn9a2L92X05PM4onm0exN+88F7oEbDCL1+YBq1CXMk+gp9RFceALnMX/tUT7yo
vn+Wpxys2vzcYhKyTx9TG6Pk218ktPdxO7H9khyNmIbZAgqxumeZ1NgkpyS+dmEj
ectK0/tgLDy0ffluQ5efdlti7aQWWND8BT/zB39uAUhLSq9lu7aD/l+7CFRZHDqk
wLTmXupaNfghG+Ze5lOVqXACv9j5J6MFQ3Yd3KIyuXhV1t3JhZb8rmrTrhL5BQp3
DAlEh0YyQAmeMaYshw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:44 2026 by rpki-client