Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: f02OwpEge9E5ShxW8vhvyi/bvRYO9bjdXdDA4dnpQ5c=
Subject key identifier: F1:B2:27:73:6E:E2:D0:07:7E:2E:1D:D6:07:C4:FF:6F:7C:CC:90:EF
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019D33E378BCF167487EBDD64B86C1980CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 0781
Signing time: Sat 28 Mar 2026 10:00:38 +0000
Manifest this update: Sat 28 Mar 2026 10:00:38 +0000
Manifest next update: Sun 29 Mar 2026 10:00:38 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: KQDDb70iRgo05KxBTClsiT+ZqLdeYW4sE8Vxi/u31K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:78:bc:f1:67:48:7e:bd:d6:4b:86:c1:98:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Mar 28 10:00:38 2026 GMT
Not After : Mar 29 10:00:38 2026 GMT
Subject: CN=f1b227736ee2d0077e2e1dd607c4ff6f7ccc90ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:8f:24:21:d8:51:71:5a:00:a7:34:89:3a:
5f:91:1a:2a:1a:5a:78:c5:fd:9f:d4:9b:82:f2:0b:
86:c0:ae:0f:de:12:5c:08:1f:c3:e7:18:39:76:5c:
85:a3:0c:79:7c:3f:0f:29:dc:24:b4:2d:7e:c4:a1:
e2:99:ce:be:7b:b8:55:44:c8:ef:27:29:fd:ce:d1:
08:a0:ad:63:4b:77:a8:b0:84:37:83:dd:fa:a9:05:
97:3e:6f:3b:01:af:53:5a:dd:ce:a3:8d:ef:ac:41:
a0:89:5d:00:4f:da:54:c0:20:e6:ff:55:cf:cd:8b:
12:67:3f:42:96:74:50:9a:95:67:8a:63:e2:89:26:
9e:6f:1b:5b:9b:a4:69:f2:5c:9f:2a:d3:14:ea:a8:
9f:3a:53:ce:16:95:bc:ac:9a:16:3e:5e:2b:f4:a1:
31:9f:e4:a5:92:03:0b:7d:d0:28:d8:81:09:67:06:
ca:f8:94:e0:9d:ac:f2:2c:a1:ff:4c:2b:dc:70:fb:
8d:8c:5b:6b:81:a8:52:60:ee:08:5f:dd:7b:a5:b5:
81:f3:d1:45:5f:ce:ad:5c:1d:87:b1:98:c7:47:95:
b5:00:16:b1:dc:f8:1c:a0:63:f6:fa:0d:b9:a5:47:
8b:b3:14:f1:c0:50:c7:ec:a0:e5:62:c3:db:c2:d6:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B2:27:73:6E:E2:D0:07:7E:2E:1D:D6:07:C4:FF:6F:7C:CC:90:EF
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:77:aa:05:8f:b6:a1:1f:61:f3:e3:59:ac:cc:7b:d5:4e:18:
d5:09:f2:41:30:c8:72:f0:16:b4:e4:3d:ff:a5:1b:95:b5:af:
72:8a:12:12:dd:cc:3b:e2:d0:3d:a9:22:5f:34:3b:06:0a:33:
49:29:2c:30:85:04:2c:81:6c:78:d8:7a:2b:e8:ab:d7:8a:96:
2b:70:3d:a7:67:20:c8:cf:e0:2a:f6:af:2f:d7:0a:58:f0:b3:
bc:cc:11:a6:b0:2c:a0:b4:d3:ab:2d:3e:d2:3d:bf:2b:3e:e3:
17:91:4e:e1:40:26:6e:5c:14:01:f2:7c:72:7f:e3:fb:38:92:
db:b9:4e:ea:2c:bd:b5:84:d4:3b:68:0d:c6:11:82:6d:ab:21:
67:2d:b1:3e:01:fc:e5:ce:bf:c7:b0:53:78:7d:62:0f:5f:2b:
d0:28:2f:e2:ac:84:34:8d:de:45:da:d7:c0:31:59:40:dd:95:
bf:34:67:2e:31:f8:82:e7:22:e4:23:a3:bc:42:7b:0d:4f:3e:
c0:2c:85:79:2f:ff:4f:45:fb:04:48:a6:dc:d1:db:b1:f3:c1:
92:c0:58:40:68:ad:77:4f:dd:70:9f:6e:a6:11:ff:cf:94:12:
83:84:84:a9:e6:62:b0:73:d4:d9:9c:0d:7c:7a:93:a0:69:f0:
ed:c8:91:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z43i88WdIfr3WS4bBmAzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj
NGFlNGYwHhcNMjYwMzI4MTAwMDM4WhcNMjYwMzI5MTAwMDM4WjAzMTEwLwYDVQQD
EyhmMWIyMjc3MzZlZTJkMDA3N2UyZTFkZDYwN2M0ZmY2ZjdjY2M5MGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqqPJCHYUXFaAKc0iTpfkRoqGlp4
xf2f1JuC8guGwK4P3hJcCB/D5xg5dlyFowx5fD8PKdwktC1+xKHimc6+e7hVRMjv
Jyn9ztEIoK1jS3eosIQ3g936qQWXPm87Aa9TWt3Oo43vrEGgiV0AT9pUwCDm/1XP
zYsSZz9ClnRQmpVnimPiiSaebxtbm6Rp8lyfKtMU6qifOlPOFpW8rJoWPl4r9KEx
n+SlkgMLfdAo2IEJZwbK+JTgnazyLKH/TCvccPuNjFtrgahSYO4IX917pbWB89FF
X86tXB2HsZjHR5W1ABax3PgcoGP2+g25pUeLsxTxwFDH7KDlYsPbwtYvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGyJ3Nu4tAHfi4d1gfE/298zJDvMB8GA1UdIwQY
MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt
MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj
LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXeqBY+2
oR9h8+NZrMx71U4Y1QnyQTDIcvAWtOQ9/6UblbWvcooSEt3MO+LQPakiXzQ7Bgoz
SSksMIUELIFseNh6K+ir14qWK3A9p2cgyM/gKvavL9cKWPCzvMwRprAsoLTTqy0+
0j2/Kz7jF5FO4UAmblwUAfJ8cn/j+ziS27lO6iy9tYTUO2gNxhGCbashZy2xPgH8
5c6/x7BTeH1iD18r0Cgv4qyENI3eRdrXwDFZQN2VvzRnLjH4guci5COjvEJ7DU8+
wCyFeS//T0X7BEim3NHbsfPBksBYQGitd0/dcJ9uphH/z5QSg4SEqeZisHPU2ZwN
fHqToGnw7ciRIg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:29 2026 by rpki-client