Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: koha98jlkhLs4B5/IU/6nr1NrTOvdLyJNQmbgIwBs6s=
Subject key identifier: BD:20:B0:3D:DE:09:C8:80:AA:4C:95:FC:ED:AB:EA:80:DD:1C:34:F3
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019FA974DF326EF517542E2EB404E20B40CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 08C7
Signing time: Tue 28 Jul 2026 16:00:36 +0000
Manifest this update: Tue 28 Jul 2026 16:00:36 +0000
Manifest next update: Wed 29 Jul 2026 16:00:36 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: zjphCCVqUrBg5b3FxfbYR80yvA07DlXT0IpO8Rpkzpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:df:32:6e:f5:17:54:2e:2e:b4:04:e2:0b:40:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Jul 28 16:00:36 2026 GMT
Not After : Jul 29 16:00:36 2026 GMT
Subject: CN=bd20b03dde09c880aa4c95fcedabea80dd1c34f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:5c:64:4d:cb:ce:44:1c:b4:bb:c4:98:e0:
12:c0:14:72:f3:a1:40:08:13:cf:06:bc:bf:4b:24:
06:54:56:ea:c8:e0:0e:97:c6:c1:8f:7a:60:36:a4:
ae:38:7f:2c:e6:6d:e5:7e:06:85:36:3e:50:fa:c8:
22:c0:83:99:92:8f:16:7c:86:f4:ff:c1:74:ce:8d:
ea:1b:33:8a:da:de:ab:79:22:e0:b8:6b:e7:df:12:
fb:6f:77:3d:1e:05:4e:7d:17:cb:f4:14:f3:06:41:
d9:2c:64:19:db:be:58:b1:63:ed:12:77:9b:6d:38:
2f:7c:da:00:81:83:1c:a3:7c:db:56:a9:dc:bb:8f:
96:2d:a2:5a:c7:7d:f2:5b:f0:55:52:bf:05:e7:41:
41:53:ba:d3:4b:cc:a7:9b:54:2f:a2:4a:3a:4c:80:
5e:03:07:00:9a:81:e9:31:ec:7f:26:f0:44:a2:d8:
3a:e2:b8:bb:ca:ea:16:4e:2e:1a:6a:d7:19:2e:29:
01:6a:b0:2f:e4:59:ea:e0:e2:cd:37:8f:da:b2:14:
c0:85:07:c1:dc:44:ff:5d:17:63:fb:77:ad:98:f5:
81:c5:c2:18:26:cd:76:a7:ef:b2:a7:e0:02:6e:d4:
fb:42:79:bb:b7:cf:92:a1:84:01:15:0e:e4:e9:63:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:B0:3D:DE:09:C8:80:AA:4C:95:FC:ED:AB:EA:80:DD:1C:34:F3
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fa:94:04:4d:79:82:2c:2b:60:ad:5b:ff:18:f8:e9:0e:cc:
24:55:be:e8:41:d2:d5:68:bd:9c:7a:00:7b:13:b8:f3:5d:09:
1f:1d:1b:df:c4:89:12:1c:84:f5:68:51:d9:a2:6d:f3:f2:68:
49:44:ac:8b:fb:23:02:48:28:b6:c5:66:42:58:1d:fa:35:ce:
5c:5e:d7:af:4c:be:a7:4a:06:09:d8:79:0c:a0:e3:8a:5e:99:
d2:d0:a3:81:37:a5:e1:e5:3b:99:38:91:6f:53:77:20:57:b9:
bc:76:34:88:b8:ce:1e:e9:ea:4a:6f:d3:94:8d:07:74:a7:64:
4b:bd:2f:6f:15:78:db:2b:5f:9c:6d:de:27:43:81:93:f6:8f:
89:a1:21:72:4b:59:44:ee:69:1e:98:0b:80:f1:7f:13:5a:db:
ca:37:6f:11:58:59:00:74:79:8a:00:f7:70:d3:7c:56:43:9d:
97:ac:6e:83:ca:2c:8a:94:91:d2:85:a1:41:25:e0:76:5c:f4:
39:56:13:78:b3:3f:9d:49:98:db:d5:4e:a8:04:2b:f6:4b:ca:
aa:97:0c:84:3f:fb:14:9c:59:37:89:dc:5c:46:a9:c0:84:23:
d8:e3:20:5a:a5:9e:8c:68:7f:09:79:21:45:c5:e4:5d:32:fb:
a5:05:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:53 2026 by rpki-client