Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: YkbzSRfi8NvLSfJ/KbEtsqn4R3w4fi9hetKCm5ZdJVA=
Subject key identifier: 3F:48:70:20:50:11:06:91:AC:B2:4E:2F:97:5C:E8:8E:31:30:AF:80
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019D9A06CF9705BCA9A4F191C8448B927665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 0A33
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:30 +0000
Manifest next update: Sat 18 Apr 2026 06:00:30 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: avTEibb9W4M//jlOu912p8o9zA/Vut+AdJDDUwyHWrQ=)
2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:cf:97:05:bc:a9:a4:f1:91:c8:44:8b:92:76:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Apr 17 06:00:30 2026 GMT
Not After : Apr 18 06:00:30 2026 GMT
Subject: CN=3f48702050110691acb24e2f975ce88e3130af80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:58:26:c0:44:19:38:ef:6f:67:d9:18:25:
f7:85:86:df:9a:c3:14:d2:64:0d:7b:57:16:92:ab:
fa:23:2c:1f:e5:6f:e5:e1:38:55:72:84:a0:44:38:
02:30:4f:81:6d:97:ac:35:fa:7f:c5:0a:98:38:5a:
f5:64:23:00:8a:d7:24:40:ba:a0:02:14:8d:ab:49:
fd:a2:cd:76:e2:29:c9:00:06:44:78:ae:58:b1:59:
d9:3d:0e:42:fd:2d:f6:6e:7b:c5:6b:b7:92:fe:26:
32:06:aa:2c:f1:4a:44:a8:05:18:ee:2f:5e:80:7a:
9d:f0:6e:c7:98:6e:ee:e3:d2:38:75:59:66:28:86:
ef:29:df:d6:fe:9a:b6:7f:20:4b:cd:10:d1:09:dc:
44:05:82:3e:8d:79:5f:b2:29:be:f6:ab:63:fe:b8:
40:26:76:d6:fe:29:ce:8d:e0:40:6d:ca:b1:83:1c:
cb:f7:0e:c9:a6:4d:e5:24:5b:98:df:f8:ab:b0:d4:
bb:b2:27:27:f0:db:ec:24:eb:a2:6e:12:15:18:52:
28:45:c0:85:0a:ed:78:f3:e6:0c:fd:1a:52:bd:cb:
6c:06:e9:92:5e:e6:cc:68:b0:e4:67:be:06:e2:ef:
98:e6:79:87:98:4f:57:ac:40:26:0d:4a:04:2d:5a:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:70:20:50:11:06:91:AC:B2:4E:2F:97:5C:E8:8E:31:30:AF:80
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:27:23:20:ee:c6:89:62:e5:8a:7e:2c:2c:bc:9a:3d:af:
c8:cc:52:76:40:34:e8:ea:07:da:02:62:cb:b3:ac:62:32:81:
32:9c:3d:90:de:da:71:d8:df:16:e7:e6:b6:55:61:ac:ca:35:
e5:af:ec:5c:bb:f4:77:ee:8d:77:70:f9:b1:44:c4:62:a7:7b:
c5:b1:f1:85:f4:da:14:17:94:f2:84:29:b1:8d:91:c0:c0:58:
43:67:20:24:dc:83:e2:68:92:5a:f7:c4:11:38:4a:f7:2e:00:
c9:ed:a7:02:c6:06:5e:56:f9:61:02:12:b7:ad:0a:85:b2:e9:
6e:a0:c8:59:58:e1:1f:ab:d2:72:3b:ea:3f:a1:fc:19:90:c9:
55:5a:60:69:83:58:3b:02:e1:99:96:d0:ac:7b:ea:0c:71:a4:
fd:ec:25:07:38:46:84:63:d9:75:8a:fe:5a:fd:aa:aa:6d:b6:
c6:06:b2:ff:85:3e:52:60:20:90:a6:b8:1a:63:a0:8f:07:1b:
52:e9:3f:20:2e:1d:7e:6a:0c:fa:0f:f5:82:5b:e8:29:1c:92:
26:fd:37:bf:55:00:72:d2:2c:76:5f:3a:c7:5f:b5:f3:c9:e1:
36:62:41:29:ad:11:7d:8d:dd:02:d0:04:73:9a:70:8e:c0:b9:
fd:08:92:52
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2aBs+XBbyppPGRyESLknZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTQ5MWZmMjg5NjEyN2NlODhlY2JhNDRjZWM3NGM2M2Zi
ZTFhYjUwHhcNMjYwNDE3MDYwMDMwWhcNMjYwNDE4MDYwMDMwWjAzMTEwLwYDVQQD
EygzZjQ4NzAyMDUwMTEwNjkxYWNiMjRlMmY5NzVjZTg4ZTMxMzBhZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4JYJsBEGTjvb2fZGCX3hYbfmsMU
0mQNe1cWkqv6Iywf5W/l4ThVcoSgRDgCME+BbZesNfp/xQqYOFr1ZCMAitckQLqg
AhSNq0n9os124inJAAZEeK5YsVnZPQ5C/S32bnvFa7eS/iYyBqos8UpEqAUY7i9e
gHqd8G7HmG7u49I4dVlmKIbvKd/W/pq2fyBLzRDRCdxEBYI+jXlfsim+9qtj/rhA
JnbW/inOjeBAbcqxgxzL9w7Jpk3lJFuY3/irsNS7sicn8NvsJOuibhIVGFIoRcCF
Cu148+YM/RpSvctsBumSXubMaLDkZ74G4u+Y5nmHmE9XrEAmDUoELVrTiwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD9IcCBQEQaRrLJOL5dc6I4xMK+AMB8GA1UdIwQY
MBaAFPrkkf8olhJ86I7LpEzsdMY/vhq1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11U1JfeWlXRW56b2pzdWtUT3gweGotLUdyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvYzQ3Y2UwLWUyOTEtNDJmZS1iM2Y4
LWNlYzE2MzMzZDdmMi8xLzEtdVNSX3lpV0Vuem9qc3VrVE94MHhqLS1HclUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRkL2M0N2NlMC1lMjkxLTQyZmUtYjNmOC1jZWMxNjMzM2Q3
ZjIvMS8xLXVTUl95aVdFbnpvanN1a1RPeDB4ai0tR3JVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUcn
IyDuxoli5Yp+LCy8mj2vyMxSdkA06OoH2gJiy7OsYjKBMpw9kN7acdjfFufmtlVh
rMo15a/sXLv0d+6Nd3D5sUTEYqd7xbHxhfTaFBeU8oQpsY2RwMBYQ2cgJNyD4miS
WvfEEThK9y4Aye2nAsYGXlb5YQISt60KhbLpbqDIWVjhH6vScjvqP6H8GZDJVVpg
aYNYOwLhmZbQrHvqDHGk/ewlBzhGhGPZdYr+Wv2qqm22xgay/4U+UmAgkKa4GmOg
jwcbUuk/IC4dfmoM+g/1glvoKRySJv03v1UActIsdl86x1+188nhNmJBKa0RfY3d
AtAEc5pwjsC5/QiSUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:19 2026 by rpki-client