Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: e9QVTVXPVpxm8qzELK1z5rq25crNW6thGqn2XaO2id0=
Subject key identifier: F6:3B:91:F6:24:03:A1:A0:98:47:3F:95:7A:F0:9B:26:C9:17:A8:DB
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019DA3E60595D634A4B1089BB309A1AE1E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 07BB
Signing time: Sun 19 Apr 2026 04:00:54 +0000
Manifest this update: Sun 19 Apr 2026 04:00:54 +0000
Manifest next update: Mon 20 Apr 2026 04:00:54 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: DsodZ5mSJbNv1+F8oAUgdBy8V4+N6AelRal/x9W/vog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:05:95:d6:34:a4:b1:08:9b:b3:09:a1:ae:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Apr 19 04:00:54 2026 GMT
Not After : Apr 20 04:00:54 2026 GMT
Subject: CN=f63b91f62403a1a098473f957af09b26c917a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:9e:83:7f:16:70:bb:a4:9d:31:52:94:d4:
cb:28:d4:7b:b0:4f:bf:29:fd:94:db:ab:38:05:dc:
06:55:9f:e1:3d:e3:4c:48:50:c4:f5:f6:f8:b3:1b:
db:12:4b:23:68:cd:26:cb:79:56:6c:14:46:c5:04:
d0:1a:ab:e5:16:52:52:f7:38:e3:70:bc:31:e5:d8:
b3:ef:97:cf:cf:f6:d6:aa:1e:4f:83:66:e1:ea:3d:
70:5f:f4:79:47:a1:08:22:6e:49:7d:38:08:4d:66:
b1:3c:b2:55:e0:5d:b6:79:88:53:b8:4e:74:8f:2e:
36:b2:b1:19:d6:b9:8b:24:7e:53:df:89:a2:12:d2:
4f:fe:d0:6c:d1:d5:55:e0:c4:2c:35:ec:59:3e:a8:
43:63:a6:16:40:d6:c7:a0:01:2a:0d:48:89:58:b6:
27:97:74:fb:8e:dc:2d:05:90:f1:1b:d6:3f:f2:eb:
0e:02:5f:78:43:e6:5b:8e:c2:94:5f:1a:a1:f7:72:
cd:52:b1:b3:83:2e:c4:42:63:bf:65:e6:7a:f1:1c:
3c:4b:fd:bf:79:ee:d5:51:e6:b4:1f:3b:c8:21:11:
ff:8c:9f:2a:e4:88:95:85:e0:b3:2b:01:73:1b:31:
f9:ba:bd:b4:4b:8f:5b:5a:8b:7d:1e:da:77:62:90:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:91:F6:24:03:A1:A0:98:47:3F:95:7A:F0:9B:26:C9:17:A8:DB
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:ee:d3:82:29:28:6e:c4:5a:5a:ea:bd:a7:29:1c:2b:89:
6d:5f:0a:d2:e1:cc:76:ca:f6:8b:1a:8b:1a:f0:20:bc:e1:62:
ca:a5:66:8f:6d:62:fe:69:a0:07:f0:02:21:0e:ca:0e:9d:74:
aa:12:31:52:89:c5:e9:7e:fa:d4:6e:d2:7c:1f:5a:49:44:0e:
8a:04:3b:52:71:d6:e2:4b:73:e7:4e:30:4b:57:ad:91:33:aa:
34:00:60:0e:e9:68:db:b3:7f:fb:72:1f:f4:25:3d:b3:22:0a:
2e:8a:66:f1:93:75:cb:7b:48:50:66:e6:d1:1e:9b:ac:4a:ca:
11:32:48:5e:92:fb:31:49:92:87:ea:4d:89:82:5a:a4:f4:ba:
d4:6d:9a:33:37:b7:d1:b9:cb:82:7e:21:a6:09:70:99:28:36:
3e:a5:bd:a8:8f:6b:82:4d:5e:e5:79:24:d6:45:ee:6f:59:54:
ea:53:3e:93:d1:14:99:75:06:d2:f0:c9:fc:cd:2e:8d:c5:16:
37:0b:6f:ab:3c:39:47:ab:78:69:55:87:0a:de:1b:a3:5f:5d:
04:c8:52:d5:6c:d7:2b:cb:56:7f:49:7a:18:b9:a2:e0:2e:01:
bb:e5:35:de:58:28:0e:30:75:20:c7:ed:46:2d:43:b0:e5:ff:
fa:7f:88:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:04 2026 by rpki-client