Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: odzh3QiUDqHN/sau2Jq1JLid0Vf7sgMO5lC/vAYgo68=
Subject key identifier: 66:4B:B5:61:AC:6C:33:5F:F7:35:A2:AC:86:BB:37:62:76:26:7E:E4
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019F9059A5A3B5508276834F26588E046117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 08BA
Signing time: Thu 23 Jul 2026 19:00:21 +0000
Manifest this update: Thu 23 Jul 2026 19:00:21 +0000
Manifest next update: Fri 24 Jul 2026 19:00:21 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: 10wa9r1eBjCKyG/SU5t/NCCEkZHbRE5ADcBDQJzYGCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:a5:a3:b5:50:82:76:83:4f:26:58:8e:04:61:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Jul 23 19:00:21 2026 GMT
Not After : Jul 24 19:00:21 2026 GMT
Subject: CN=664bb561ac6c335ff735a2ac86bb376276267ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:97:8c:e5:2d:5c:79:a1:99:86:6f:88:45:9e:
a1:cb:8c:a6:c7:66:37:2a:1d:b7:5c:f5:b6:5d:9c:
24:ff:07:7f:5d:68:83:66:e9:53:9d:d3:a0:c6:0f:
49:8f:a3:18:72:c3:98:de:76:60:f6:74:3a:d5:de:
11:0c:6c:cf:e8:85:9c:88:a2:77:36:1b:92:41:b2:
70:7a:0f:04:b4:cc:8b:61:1c:4a:1c:38:a2:ba:50:
dc:5c:91:28:8b:7d:a1:ca:20:2d:23:b1:0b:ef:4d:
61:b0:00:64:76:7e:b4:51:91:cc:5c:61:d9:c2:f4:
7d:9e:7f:cf:74:3d:ce:3a:cc:04:4c:9b:d7:ed:17:
a6:6b:b5:6b:e1:af:69:47:fb:60:30:60:e4:06:94:
a8:f2:a5:6d:65:92:c8:16:60:82:ec:74:03:e4:13:
34:07:89:fa:06:f1:88:9c:f2:e1:ba:a1:83:f7:8c:
0b:f5:21:30:80:ba:c8:a4:6e:5d:26:fd:0d:52:de:
03:91:04:e3:a1:89:8f:82:a6:da:da:2c:c7:1a:c5:
2d:ba:a7:d5:8b:92:10:39:6d:d1:eb:66:53:97:5e:
38:c1:62:27:89:04:cd:95:5f:be:62:e6:ad:40:4d:
0f:89:30:4d:e5:b2:1a:1c:a0:08:fb:ad:5a:87:63:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:B5:61:AC:6C:33:5F:F7:35:A2:AC:86:BB:37:62:76:26:7E:E4
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:aa:1b:4e:6f:a8:05:3d:96:0d:2a:60:06:48:09:39:54:fc:
d4:47:3e:ef:b8:30:98:6f:11:99:a0:fc:79:0d:0d:d9:aa:72:
1b:9b:85:a6:4c:70:81:9e:e6:fe:7b:ab:88:1b:9d:1c:b3:74:
db:b6:73:0f:88:0d:f3:27:7a:6b:b6:7f:8b:55:63:ad:72:a6:
72:3b:a3:30:08:82:c0:71:a7:6a:98:d0:8c:7e:96:01:7f:61:
54:29:37:9b:27:98:c0:20:4f:94:7b:05:26:0d:40:48:3a:32:
6d:33:ef:99:85:ed:26:52:e8:be:67:70:7a:9a:00:58:15:11:
b3:79:b8:ee:05:65:89:41:73:97:ec:0b:6f:f9:66:48:b4:8a:
44:3c:da:12:80:3c:9a:68:de:83:b7:f2:2c:6b:a7:56:b2:c2:
e5:28:37:48:e9:65:3a:68:eb:38:26:5c:4d:c1:06:af:88:38:
d5:ad:31:07:81:62:aa:a8:3e:47:d0:7c:81:a2:fe:8d:da:62:
3d:8c:a4:a0:91:a2:5a:e4:2b:b0:f3:01:5c:db:2d:09:42:b4:
bc:91:b6:34:4d:a3:dc:ee:9b:67:e1:fe:aa:a5:37:de:b9:6e:
a9:1d:e0:8a:21:51:f9:26:c7:b5:27:3e:8d:08:c2:17:56:86:
33:52:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:35 2026 by rpki-client