Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: 4i85ssOmRP3v4o/41NNtKYDRb3SziRSu/1KYi9He/ug=
Subject key identifier: FC:DC:12:FA:43:08:CE:5F:A8:A9:1B:FE:60:5E:2E:83:77:0B:BD:DD
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019E30E04EDF9193FF6A1E4238C23BF37A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 0804
Signing time: Sat 16 May 2026 13:01:07 +0000
Manifest this update: Sat 16 May 2026 13:01:07 +0000
Manifest next update: Sun 17 May 2026 13:01:07 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: N7w1WdtVtP9MksoPylW2vOaJ8WnS0gkcGcl2R3vHwUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:4e:df:91:93:ff:6a:1e:42:38:c2:3b:f3:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: May 16 13:01:07 2026 GMT
Not After : May 17 13:01:07 2026 GMT
Subject: CN=fcdc12fa4308ce5fa8a91bfe605e2e83770bbddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:1c:fa:c9:51:42:2b:1a:de:01:19:84:80:
b1:01:04:9d:38:32:0f:55:ec:fc:8a:0c:55:20:0c:
a9:9c:4b:95:18:66:63:90:65:f2:b0:16:05:9c:cf:
1d:53:84:f3:d1:b2:e1:79:90:f8:03:6f:68:8c:3c:
13:f2:b7:0e:4f:a7:eb:01:24:77:98:9b:db:62:1f:
6d:19:43:24:20:b4:a3:32:66:d7:19:9b:75:e8:e4:
a8:db:a4:40:8e:ac:1c:3f:92:3c:c6:ae:ca:e9:05:
30:36:0d:1a:52:3a:ec:2c:39:3f:9a:6f:09:6d:84:
4c:1b:51:58:33:f2:3c:56:8d:26:95:90:e9:1a:f9:
a2:5d:23:c2:f4:67:8c:36:12:da:e6:01:57:93:79:
b9:7a:12:d6:93:e7:d5:a7:95:f0:28:fa:8a:54:40:
58:58:a6:27:04:38:a8:a0:d5:1f:01:dc:73:ac:fe:
33:c3:07:82:88:57:9a:7f:a6:0c:a0:12:89:28:79:
e0:88:2d:c5:00:5c:c9:a1:e0:c9:5b:9e:04:40:93:
7e:7c:9a:15:ee:74:ec:e0:88:12:f5:7e:b3:05:3d:
ba:b2:06:2c:36:b8:a0:e4:7f:81:c5:56:05:c9:71:
12:16:5f:b2:a4:1d:35:08:21:77:a2:00:37:7b:47:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:12:FA:43:08:CE:5F:A8:A9:1B:FE:60:5E:2E:83:77:0B:BD:DD
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:68:91:12:f7:dd:26:fb:32:30:a3:1e:53:1a:d9:a6:1c:1a:
fb:9e:94:26:70:19:3b:b1:6e:48:54:9a:6b:72:1b:71:00:3b:
88:74:eb:28:d0:77:30:54:1d:75:ed:8d:be:c8:a1:66:72:de:
a3:8b:c8:03:1e:c3:2f:ff:24:31:f2:ab:7e:db:21:85:37:38:
48:ce:23:9c:44:82:7f:5b:3f:58:27:b4:65:f2:aa:88:c4:2f:
5e:cb:48:ee:36:33:25:47:39:14:17:b4:00:36:55:9a:2a:a4:
0f:45:8b:96:7b:73:c8:73:20:9a:80:75:aa:b1:a4:f2:5b:6b:
03:1a:1d:83:8c:c4:c4:c0:21:a7:bb:82:43:fa:94:42:0f:c4:
5c:c5:d9:61:5e:11:34:dd:bd:98:ce:ea:aa:e1:34:53:1e:08:
d6:eb:f5:24:0e:93:7f:9b:77:9a:12:4f:8b:fa:76:6f:c3:d1:
ae:a2:07:8b:31:5d:71:d3:3c:a2:84:47:8d:bd:ce:82:de:7f:
5d:bb:9f:6e:b5:f1:a2:ed:c5:35:13:16:f4:a8:bd:b4:ed:25:
f4:dd:8e:d3:c4:8f:86:a3:7a:a3:32:8c:80:6e:3b:f8:c5:5e:
0a:7f:f8:79:f5:9e:c3:60:fc:2d:7d:b6:1e:33:d4:5a:7b:99:
cc:fd:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:33 2026 by rpki-client