Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: rGzqNjU1cKOyzPuyfpQ1BkoqfMkE7MbB9hsny5icfjc=
Subject key identifier: 41:6B:3E:21:37:D7:79:F8:EB:B4:5C:D2:2F:48:2C:89:E9:FA:59:9C
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 01A10135B2ADC506CA7B42375E17398CA8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 0979
Signing time: Sat 03 Oct 2026 10:00:58 +0000
Manifest this update: Sat 03 Oct 2026 10:00:58 +0000
Manifest next update: Sun 04 Oct 2026 10:00:58 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: vJlA72l4nyGXnLADYvdDVVJCaIxXq/FWqPzc4GsxNXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:b2:ad:c5:06:ca:7b:42:37:5e:17:39:8c:a8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Oct 3 10:00:58 2026 GMT
Not After : Oct 4 10:00:58 2026 GMT
Subject: CN=416b3e2137d779f8ebb45cd22f482c89e9fa599c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:7e:24:f5:eb:7f:03:0a:cd:ac:fb:87:d7:
9d:10:52:59:08:8e:55:03:2b:ed:94:cd:54:8f:1a:
f4:75:a8:61:42:a2:a5:64:75:28:bd:5f:89:30:42:
08:b6:3a:7a:ad:e1:bb:ff:73:c6:4c:e7:b1:3f:62:
07:fe:f3:02:5d:36:74:2a:60:92:a4:9c:e1:3a:50:
0e:46:de:a9:54:c4:e8:c3:3d:49:19:d9:77:16:d1:
37:a3:98:1d:d7:54:7b:09:76:19:e4:c1:46:cd:2d:
01:04:f0:f2:a8:fe:ce:6c:47:13:26:27:91:e0:59:
a8:0e:94:95:e9:d8:d9:a5:a0:c9:2f:c4:a5:e2:18:
1d:3d:40:da:1b:99:b5:9b:01:c9:c2:1a:9a:a9:3c:
92:98:53:18:35:c8:ea:2f:a6:33:41:17:fa:00:b5:
f3:d4:7c:f0:48:e1:b2:40:58:97:20:ae:80:7f:29:
ec:39:3c:c5:44:61:7a:12:85:48:06:f5:ad:c9:67:
c1:b1:e6:49:e4:c7:ad:fc:89:89:ed:10:0b:e4:e8:
9d:7b:fd:b0:1b:11:9c:1e:45:e1:f7:55:a3:42:f1:
c1:03:39:0f:89:dd:25:20:fa:87:4c:c1:85:34:03:
a1:bb:71:dd:17:eb:1a:f0:12:09:e5:81:b5:17:f4:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6B:3E:21:37:D7:79:F8:EB:B4:5C:D2:2F:48:2C:89:E9:FA:59:9C
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ca:0f:a4:35:9a:b0:c2:4f:84:85:f3:a5:78:fe:57:16:b5:
3f:2d:05:8a:09:0c:b8:8d:30:38:cb:80:63:44:be:62:df:fa:
5b:ce:ba:5e:04:bc:f7:33:1d:de:70:45:45:39:df:61:f3:98:
8c:9e:1b:84:40:74:a5:39:e2:d4:5a:d5:83:ce:dc:50:7c:55:
69:0c:f3:3f:ff:16:a1:e7:5f:33:67:63:36:1d:86:06:45:48:
db:99:aa:ea:9d:74:73:28:8a:ce:35:dc:25:2d:7a:03:19:b2:
2d:16:8e:05:c2:7e:98:a4:e5:c5:9a:21:3b:ff:7b:a1:d7:26:
52:18:b7:7b:49:e6:b9:ff:e9:21:ff:7c:c9:67:75:71:3b:3c:
f8:0e:cb:7c:06:bf:c8:56:8e:05:c3:96:67:02:6d:a4:c2:f0:
b8:a7:81:be:53:f1:04:86:44:d0:49:a0:f7:13:89:dc:06:01:
d3:79:ba:7b:d3:e6:17:a7:41:d0:db:2c:ad:24:f5:22:ce:ce:
1f:47:b4:75:ed:6d:72:29:b1:67:19:72:46:95:03:83:ad:bc:
55:b9:29:9b:5e:09:86:74:d7:73:03:fa:be:4f:71:00:75:94:
b2:8d:c8:4d:75:16:b3:7b:b3:07:93:7e:f4:4e:f4:18:51:d4:
06:96:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:52:56 2026 by rpki-client