Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier: Z0/Ez5F8n+2reYBlnM3khNJ9AX8R41HJl1Ls0MD/6es=
Subject key identifier: 4C:DC:EF:FE:29:A7:8D:FC:F1:52:82:D9:02:4C:B6:0A:CD:5C:38:BF
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 019D25BABAC9399083AC4DC9E00468C2DCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 16:01:27 +0000
Manifest this update: Wed 25 Mar 2026 16:01:27 +0000
Manifest next update: Thu 26 Mar 2026 16:01:27 +0000
Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: 65MCUHS6t5PcoeNAip79AaCkWyxWTc1I98QFeWkUAK0=)
2: gJDl0e6pQoHRD8a2YS52DIYUPzk.roa (hash: 56yjo07tXuvgM9qB1noCR3pRJ78UgBBtZbYbUMGEhbw=)
3: llsqy-7pM-tNdAJNt-bwZRhO6Wg.roa (hash: eLssT8xJb29om9Cu43JpK9Q0r8uQslZ3Kt/B498Si6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ba:c9:39:90:83:ac:4d:c9:e0:04:68:c2:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Mar 25 16:01:27 2026 GMT
Not After : Mar 26 16:01:27 2026 GMT
Subject: CN=4cdceffe29a78dfcf15282d9024cb60acd5c38bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:d6:be:67:67:0c:88:1f:8c:89:82:ec:e2:
98:d9:f3:2c:30:17:f7:9b:4f:dd:bd:02:1f:53:04:
83:3c:b8:26:29:9c:20:70:43:54:71:bf:1e:85:7c:
ff:17:c8:f4:87:1a:3a:c9:9c:eb:bf:c9:a6:5e:03:
f3:67:e7:71:07:15:7c:38:7b:4b:50:e2:b7:22:cc:
52:f2:20:01:ae:c8:aa:76:5a:fb:5d:e2:10:ea:fb:
b5:b0:5a:54:6a:f8:47:f3:03:8d:84:d6:72:2b:47:
60:28:8d:70:56:02:96:00:ab:de:aa:b5:a0:e7:77:
8e:25:db:3c:da:d6:31:71:2d:fb:a0:a9:7a:30:3e:
14:46:c6:62:d2:93:66:9e:43:43:7a:bb:d5:6d:3b:
da:bc:56:4d:ec:56:3c:b1:98:69:31:3e:6d:80:05:
ce:e6:95:45:5f:76:a2:87:f3:73:d9:8f:80:8e:0e:
d4:6d:33:3b:0e:f7:9e:5a:dd:80:9b:3a:ee:a3:47:
d3:c1:5c:4c:eb:32:16:b3:c7:cc:bb:df:9f:fe:81:
b8:ae:b9:cd:6f:c5:8c:61:82:92:d5:70:af:51:c5:
10:37:02:15:b2:8b:b1:ec:12:a8:05:45:b0:03:84:
d7:45:0b:22:e1:32:cb:e1:d3:a1:dd:a0:0f:20:c3:
97:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:EF:FE:29:A7:8D:FC:F1:52:82:D9:02:4C:B6:0A:CD:5C:38:BF
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:24:36:b8:41:75:52:76:4a:01:ef:6c:ac:16:f8:23:a5:4e:
78:5f:b2:53:fb:90:95:1d:d4:b0:47:a6:0e:39:c4:f4:c4:72:
87:a6:af:8f:d1:97:4f:5f:c0:c9:82:94:21:9d:e6:1e:fe:1e:
5b:8d:0e:9f:16:f8:07:8d:98:e5:8f:c7:0d:76:44:e2:7a:89:
38:5a:43:f1:22:21:6b:5f:e0:a7:d9:d2:d7:d2:c5:bb:a7:26:
d5:84:6f:39:26:6b:4b:e0:c6:4b:b3:70:7d:9e:22:30:9a:63:
c2:ae:cd:df:76:e7:8f:aa:9f:24:19:59:4c:04:56:1c:8e:46:
78:16:4b:c1:1d:f5:f2:46:9a:16:86:8d:30:7a:29:8b:56:72:
ff:05:d4:e3:8d:5a:75:9b:d6:db:26:45:11:74:03:17:c6:1b:
85:ce:12:92:46:79:5c:e6:c4:78:8a:81:17:ec:e4:f7:92:7b:
6f:8d:fd:84:91:b4:95:83:31:35:8c:1c:3f:82:2b:32:aa:17:
87:48:80:5c:09:3d:10:a9:20:a3:4f:95:55:ed:d1:d3:42:24:
d5:1d:3d:3f:ec:fd:c7:31:03:f3:57:6c:1f:0a:74:46:5d:2f:
67:9b:26:cf:a2:ce:1d:6e:86:3f:48:f6:8b:f0:9e:36:46:a6:
72:5b:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:52 2026 by rpki-client