Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: 4P0vfGnZr90cWKeJgo37RnG/zjv/lMJoYnimhntiUaw=
Subject key identifier: C9:37:18:41:98:8B:53:BC:16:37:A0:92:5B:60:94:3F:40:DE:24:CD
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 019CACB5237C8755269B4FD05818A7F4AF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 073B
Signing time: Mon 02 Mar 2026 04:01:17 +0000
Manifest this update: Mon 02 Mar 2026 04:01:17 +0000
Manifest next update: Tue 03 Mar 2026 04:01:17 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: cPNIgDwcfj1ejshRaqTVOA1jeYA0iYItaODrO9Hoi7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:23:7c:87:55:26:9b:4f:d0:58:18:a7:f4:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: Mar 2 04:01:17 2026 GMT
Not After : Mar 3 04:01:17 2026 GMT
Subject: CN=c9371841988b53bc1637a0925b60943f40de24cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:3e:0d:8b:a1:d4:f3:81:99:5f:d6:99:a7:
00:47:ee:df:11:44:a8:86:d0:8b:51:e6:e1:12:ef:
aa:44:8b:9f:88:0d:72:86:96:45:00:f2:9e:e4:34:
67:03:5f:99:43:c3:54:42:dc:b7:d2:c1:50:44:e6:
41:86:ca:d4:dc:7d:bc:6f:d4:94:e6:3a:53:35:64:
37:6f:46:22:6d:e5:f5:cc:9a:36:97:53:f3:59:ac:
c2:83:d6:88:a9:f3:34:dd:e9:c4:60:a6:ee:0c:7e:
79:61:19:8d:19:5a:57:f5:06:39:1c:9b:ed:56:71:
54:aa:01:bb:18:1d:81:a5:60:3d:72:2c:76:3b:7d:
dd:c9:ba:65:36:7b:1a:81:85:cc:db:21:cf:1c:da:
76:2c:46:a0:71:8d:a2:fc:9d:ef:8e:a2:23:74:91:
24:be:4a:82:86:26:c3:c8:d7:9b:1f:a8:86:b0:99:
4f:3e:ec:06:dd:cf:0e:1b:1b:2f:f2:ea:90:c4:bc:
b2:aa:15:0e:0e:ad:2f:c6:c5:10:8c:d3:2f:5f:21:
43:08:3c:21:56:44:86:c0:d4:aa:ef:71:3f:7c:bd:
f0:0b:b4:67:24:76:77:0e:13:12:4c:7e:1b:14:a5:
55:1c:39:dc:ef:98:85:3d:10:76:fe:a3:61:05:51:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:18:41:98:8B:53:BC:16:37:A0:92:5B:60:94:3F:40:DE:24:CD
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f8:8e:aa:d5:59:75:e9:d8:84:57:e9:fa:3a:50:b9:58:ec:
65:fc:cc:4f:24:cb:f6:2a:a1:b8:73:7b:6e:47:4e:5c:e6:44:
7f:01:92:b7:ea:17:3d:03:67:d4:62:8f:e5:74:96:ba:0b:33:
21:68:27:7e:c9:fd:6a:c8:57:3f:46:d7:fa:d2:d2:f8:28:50:
2f:12:d8:ac:a8:2e:c7:b8:2d:98:6e:c3:aa:57:0f:ed:36:5c:
6e:b0:0e:7a:c5:48:bf:b5:ec:8d:45:af:9b:9d:4a:28:43:17:
62:f4:ef:56:a7:7c:e9:6f:57:a9:13:f7:7d:6a:68:c3:7b:70:
3d:07:11:40:be:f4:6d:41:60:b2:fb:a2:83:14:0b:67:a8:7a:
49:40:6e:ab:e4:1b:1f:8a:08:c0:6e:51:9f:db:58:57:a1:23:
79:52:87:ba:cb:d6:4f:5b:92:ce:d6:04:13:67:99:81:62:cc:
6c:15:a8:c0:00:40:51:f9:03:66:f4:9d:23:dc:d4:73:f7:52:
a2:85:07:f8:ae:e9:82:1c:1a:e0:ef:1a:31:2f:bb:85:69:1f:
e0:86:e8:9e:47:43:71:ed:37:ec:5a:31:c6:cd:21:e9:1c:42:
9a:a7:c8:1f:82:87:6c:61:14:7b:c7:31:6f:37:c5:ab:58:3c:
f9:84:2b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystSN8h1Umm0/QWBin9K+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj
NGFlNGYwHhcNMjYwMzAyMDQwMTE3WhcNMjYwMzAzMDQwMTE3WjAzMTEwLwYDVQQD
EyhjOTM3MTg0MTk4OGI1M2JjMTYzN2EwOTI1YjYwOTQzZjQwZGUyNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSU+DYuh1POBmV/WmacAR+7fEUSo
htCLUebhEu+qRIufiA1yhpZFAPKe5DRnA1+ZQ8NUQty30sFQROZBhsrU3H28b9SU
5jpTNWQ3b0YibeX1zJo2l1PzWazCg9aIqfM03enEYKbuDH55YRmNGVpX9QY5HJvt
VnFUqgG7GB2BpWA9cix2O33dybplNnsagYXM2yHPHNp2LEagcY2i/J3vjqIjdJEk
vkqChibDyNebH6iGsJlPPuwG3c8OGxsv8uqQxLyyqhUODq0vxsUQjNMvXyFDCDwh
VkSGwNSq73E/fL3wC7RnJHZ3DhMSTH4bFKVVHDnc75iFPRB2/qNhBVEmjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk3GEGYi1O8FjegkltglD9A3iTNMB8GA1UdIwQY
MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt
MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj
LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALviOqtVZ
denYhFfp+jpQuVjsZfzMTyTL9iqhuHN7bkdOXOZEfwGSt+oXPQNn1GKP5XSWugsz
IWgnfsn9ashXP0bX+tLS+ChQLxLYrKgux7gtmG7DqlcP7TZcbrAOesVIv7XsjUWv
m51KKEMXYvTvVqd86W9XqRP3fWpow3twPQcRQL70bUFgsvuigxQLZ6h6SUBuq+Qb
H4oIwG5Rn9tYV6EjeVKHusvWT1uSztYEE2eZgWLMbBWowABAUfkDZvSdI9zUc/dS
ooUH+K7pghwa4O8aMS+7hWkf4IbonkdDce037Foxxs0h6RxCmqfIH4KHbGEUe8cx
bzfFq1g8+YQr3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:41 2026 by rpki-client