Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: Ims7nWrPhGDWARpGABEjOlPdsqsLdrqjUY6CaiLMnwo=
Subject key identifier: 34:4F:9E:82:0F:E2:74:B4:FE:A5:BB:BE:75:71:9D:56:2F:D3:69:24
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 01A0C70EF2C5F6D7E6CDD1A5B98AF2E54407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0BD8
Signing time: Tue 22 Sep 2026 03:00:40 +0000
Manifest this update: Tue 22 Sep 2026 03:00:40 +0000
Manifest next update: Wed 23 Sep 2026 03:00:40 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: AerQJPZQ/AdGwxyPaQeXgO+00pv/pqFdYFSPBSMUVB0=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:f2:c5:f6:d7:e6:cd:d1:a5:b9:8a:f2:e5:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Sep 22 03:00:40 2026 GMT
Not After : Sep 23 03:00:40 2026 GMT
Subject: CN=344f9e820fe274b4fea5bbbe75719d562fd36924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:2b:7e:a1:de:ed:0e:97:33:8a:31:bb:d7:
e4:65:a6:17:eb:7c:c7:b5:af:82:5c:c8:72:58:1a:
1d:39:80:8a:82:9d:5b:7f:ec:c1:40:72:fd:53:26:
5c:ab:33:80:ad:c0:37:75:14:fe:ca:a4:93:f3:4e:
e4:bc:5c:45:2e:fe:3d:1f:af:32:b5:4c:e5:a3:f1:
87:c9:ae:47:82:ee:9e:3c:26:19:ac:a6:89:ff:3b:
18:c2:7d:b8:35:6a:af:6c:20:cb:99:3e:b3:98:5d:
32:3b:f4:26:69:c6:33:42:61:03:fa:94:c8:02:97:
b6:46:c9:d5:f4:66:16:e9:92:48:97:a5:15:5c:fe:
30:7e:74:17:83:22:80:f4:e2:0d:46:31:e5:03:b5:
53:89:4a:f1:c5:40:00:97:c1:82:1c:f8:e5:f2:4c:
49:0e:42:c6:38:94:0d:ab:a1:59:23:5e:44:f8:6a:
bb:ec:02:c9:9e:65:05:c8:36:cf:cc:78:91:36:e5:
67:bf:e8:7d:49:d2:09:ac:6e:e5:1b:d5:eb:43:f2:
7d:74:98:27:99:e6:df:4d:e0:73:d2:7b:78:08:7c:
32:2d:74:ff:2c:b1:d0:2c:b1:a2:a0:d6:06:d5:80:
42:79:d6:ca:09:f2:0e:0e:d4:47:32:d3:10:7e:4b:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:9E:82:0F:E2:74:B4:FE:A5:BB:BE:75:71:9D:56:2F:D3:69:24
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d2:e3:32:23:6d:99:e8:5f:f1:29:d5:db:ec:92:63:38:05:
07:1a:e3:89:21:b1:b3:0f:e8:de:fd:3d:34:86:bd:99:a8:79:
8d:c0:02:85:24:c0:63:60:6e:5d:30:9d:74:99:17:c7:32:52:
fa:7e:11:cc:cc:21:59:9d:a6:93:56:f9:18:00:69:38:e1:3e:
96:73:a8:dd:9c:e3:97:a0:11:e6:6d:c7:64:51:84:62:bb:bf:
78:fd:7c:d7:cd:1e:c4:37:7b:b9:a8:9c:c4:64:47:60:bb:9c:
54:f7:31:be:33:ac:69:8f:8a:e7:09:2f:60:50:33:f9:38:2d:
ff:95:84:ec:8f:4b:a1:2c:34:71:71:a0:9f:e8:3f:77:6d:36:
14:77:cf:8d:61:60:42:cc:18:a6:ad:2e:08:d2:31:7e:d2:b8:
76:42:33:16:df:d2:c1:ba:e8:c1:ae:d8:ca:6e:32:60:fd:01:
cd:17:5b:02:d5:a3:77:be:e2:03:35:45:5f:9f:c2:cc:30:b9:
92:43:c1:44:81:12:af:be:77:ca:31:15:87:16:87:ca:69:5e:
34:44:3e:08:d2:1b:fe:d5:d2:f6:e8:11:d4:49:07:f8:58:68:
63:22:1e:59:3e:fe:80:38:7a:82:b6:13:13:aa:5f:52:36:01:
d1:39:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:45 2026 by rpki-client