Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: gNqVvclBdzR628/oFBVK7aC6VvMEruSSLjyMF1j4jVE=
Subject key identifier: D6:1C:34:AC:17:97:3B:AD:2F:87:49:66:C6:C8:59:CF:60:DB:40:E6
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 01A0024AAF2F182297CB9F6EA45AC8F2D077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 08F5
Signing time: Fri 14 Aug 2026 22:00:43 +0000
Manifest this update: Fri 14 Aug 2026 22:00:43 +0000
Manifest next update: Sat 15 Aug 2026 22:00:43 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: cEqBEbq3srdd6gwXUZuQ9b2dHqhidKNisaRgDP0KY4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:af:2f:18:22:97:cb:9f:6e:a4:5a:c8:f2:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Aug 14 22:00:43 2026 GMT
Not After : Aug 15 22:00:43 2026 GMT
Subject: CN=d61c34ac17973bad2f874966c6c859cf60db40e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:19:9b:43:46:c2:14:28:fa:97:6c:45:62:
be:33:ca:5b:12:f1:10:68:7a:91:a1:07:b2:88:cf:
6d:bf:5b:53:7d:4d:36:cf:98:b7:a8:dc:03:42:d9:
61:74:0f:63:e4:a5:10:19:5f:6a:67:e7:6b:63:79:
8c:12:26:a5:39:a5:b4:c9:1b:77:2d:d1:45:6c:00:
df:40:46:b0:5d:d3:87:e1:8d:08:df:a4:8a:fa:91:
19:7b:4b:e3:b4:06:98:76:cd:af:cb:dc:3e:2e:f4:
63:c2:24:e8:dc:af:df:a9:30:b4:d4:f0:84:1a:18:
b0:f6:27:61:55:51:e9:cd:5c:c8:f8:dc:03:46:10:
cc:c9:85:bd:94:b9:1f:bf:4a:65:40:9b:32:e8:09:
26:e6:ba:83:41:db:ce:0f:d7:15:f3:de:8d:19:32:
df:58:94:7f:4b:a9:f5:ec:35:be:10:b6:6f:77:a0:
09:bf:e7:f8:f7:15:3b:c2:1d:d2:eb:95:57:ca:aa:
6c:e1:b0:d1:fc:7d:26:05:f2:a5:16:d6:13:b6:39:
70:58:30:20:12:40:64:3c:c0:12:52:4b:48:11:ee:
00:c5:9e:ea:e4:f9:42:ce:12:74:c0:0c:a1:bc:a0:
67:71:15:d4:60:5b:38:e6:44:a4:9d:e0:5e:19:de:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:34:AC:17:97:3B:AD:2F:87:49:66:C6:C8:59:CF:60:DB:40:E6
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:58:a7:b8:b6:54:e1:91:c6:b9:2d:fe:57:c6:16:12:a5:
45:6a:b5:17:b1:52:a8:b5:d0:ed:ed:c8:82:65:47:f5:bc:8f:
bd:06:7c:12:08:8f:09:2a:7d:71:c7:f1:7c:32:d0:7e:aa:7f:
cf:db:f6:8b:66:c6:a3:18:ff:48:af:65:ac:85:0a:1b:3f:4f:
cf:43:81:c4:8a:ff:bd:6c:a6:79:ae:db:9a:19:2d:24:f1:c4:
a6:a6:34:9a:f6:25:32:25:f8:ba:af:26:22:bd:c4:3c:f1:8d:
4a:61:4b:29:51:cb:4b:2f:cc:00:2d:27:16:3a:35:52:f1:6e:
b2:4c:25:93:27:7e:d5:49:bd:a8:5e:57:09:d0:1e:1b:4f:5b:
f4:64:73:40:76:2f:89:e4:f0:80:5c:23:a3:aa:be:17:f6:0b:
7a:99:9d:0c:77:dc:ab:4b:9f:8d:10:5f:ab:14:60:16:38:48:
1f:02:f4:3e:9b:a9:a3:a3:ff:6b:7f:4f:49:5d:7a:ce:4f:5d:
87:d8:bc:cf:6e:e2:9d:d9:9a:9e:8f:0e:ae:01:1a:31:f6:9b:
8e:b3:35:5a:bd:d6:81:ac:02:30:a6:39:16:bf:f9:fc:71:f5:
e5:dd:d6:f5:d4:41:6c:d4:9e:b4:08:cc:78:68:20:f6:32:9a:
fa:0c:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:45 2026 by rpki-client