
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
File: 57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft (raw, json)
Hash identifier: VtldM7qZQn0+TIE1afRJeidt/RG3JrFqzyp+X0ksKNE=
Subject key identifier: 21:32:DA:26:92:ED:1A:67:4C:84:31:6C:00:25:49:20:C1:8F:27:8C
Authority key identifier: E7:B3:4C:7C:E3:BC:51:38:1E:2F:30:5D:B8:F3:30:69:AD:54:8F:E6
Certificate issuer: /CN=e7b34c7ce3bc51381e2f305db8f33069ad548fe6
Certificate serial: 019F8F7F5FA4A4529B13E43F7B13A7021B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:57 +0000
Manifest this update: Thu 23 Jul 2026 15:01:57 +0000
Manifest next update: Fri 24 Jul 2026 15:01:57 +0000
Files and hashes: 1: 57NMfOO8UTgeLzBduPMwaa1Uj-Y.crl (hash: sEr1aV9ljZlZ/5Moovy7BE8Qw6k++e5N7HQMquuMfyo=)
2: tfZAUzSdgFZQJJ0CINZ5NCzx6A0.roa (hash: umbCbHPtY0b+Bx96L0wfJpLosdHwm8QUMGXKcqiEQj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5f:a4:a4:52:9b:13:e4:3f:7b:13:a7:02:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b34c7ce3bc51381e2f305db8f33069ad548fe6
Validity
Not Before: Jul 23 15:01:57 2026 GMT
Not After : Jul 24 15:01:57 2026 GMT
Subject: CN=2132da2692ed1a674c84316c00254920c18f278c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c6:7a:30:1e:a1:8c:cd:9f:4d:da:77:b6:a9:
03:12:1c:5c:71:f8:7c:5d:68:28:3f:9f:62:14:da:
72:f7:49:9d:40:5f:ff:06:ba:67:33:a6:ab:4d:88:
12:53:6a:d7:6c:41:7e:c5:9c:fa:d8:1a:91:b8:4d:
e9:ea:50:f4:44:6f:7b:ae:b1:be:e0:86:d6:94:bb:
62:b1:3a:60:43:7b:fa:5e:87:20:3e:17:d6:f1:aa:
49:db:f2:b8:04:ba:ab:76:cd:93:75:54:59:e1:35:
f6:50:54:1b:08:8f:f3:26:54:ed:27:58:ad:ba:18:
e5:61:99:6f:74:73:d8:9c:e4:c5:db:30:2d:e6:fb:
8f:36:08:b9:77:2a:c9:ac:3d:2e:fd:02:ca:da:84:
1f:37:85:c3:ed:52:50:20:73:25:7e:5d:b7:3a:29:
76:09:ee:df:32:1a:5e:e9:70:b5:65:3d:a3:87:6a:
e0:7d:d3:6a:47:39:8e:e1:7f:7d:b8:1e:74:70:27:
5e:ca:c9:e5:03:52:e1:ef:78:0f:95:92:1a:47:24:
1d:20:8e:86:91:f5:1a:6c:f8:17:e5:14:25:55:43:
41:94:eb:56:33:ef:64:af:ca:91:ff:34:16:84:f0:
b5:48:4c:f5:5b:37:10:98:74:da:90:90:6b:ea:c7:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:DA:26:92:ED:1A:67:4C:84:31:6C:00:25:49:20:C1:8F:27:8C
X509v3 Authority Key Identifier:
keyid:E7:B3:4C:7C:E3:BC:51:38:1E:2F:30:5D:B8:F3:30:69:AD:54:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57NMfOO8UTgeLzBduPMwaa1Uj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/57NMfOO8UTgeLzBduPMwaa1Uj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:82:44:ad:cf:e1:6d:6c:6d:f0:56:e4:4d:f1:d9:9f:a6:29:
c5:26:f7:97:43:77:ff:8e:ca:13:17:2a:d3:73:cc:68:0d:83:
15:e0:33:e8:ba:96:7d:b5:57:8d:c3:7f:2a:3b:d5:be:4a:f5:
50:87:59:6b:64:65:c0:8c:2b:15:0d:28:4d:26:61:d3:d6:8b:
96:6c:1a:87:e2:8a:9f:e8:c2:e7:6e:5f:4f:03:59:24:6e:06:
38:4d:98:aa:2a:06:a7:14:2a:91:83:ec:37:72:aa:d3:e6:f6:
8b:c9:b7:78:dc:86:b4:5b:ec:bc:e5:50:50:ff:7b:d4:08:e8:
d9:f7:0f:de:22:6d:e3:e9:4f:6e:bf:86:c5:98:72:ce:29:da:
f4:d8:cd:b8:cb:d3:dc:6a:31:84:b9:54:3e:d7:53:cc:1e:69:
22:82:c4:3d:76:bc:ff:a2:87:75:b1:dd:cf:3d:6c:85:89:ec:
34:fc:87:6c:c5:cb:e6:7c:a0:03:80:f6:23:f2:68:07:83:1c:
1c:53:8c:32:58:de:de:25:2a:9d:55:38:8a:36:08:16:4a:9f:
7d:0b:22:d8:65:d4:fb:c3:62:54:77:ae:e7:15:6a:21:8b:86:
64:b8:e4:82:48:65:ca:b7:3f:89:47:8a:df:71:d1:2f:95:aa:
c2:cf:df:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf1+kpFKbE+Q/exOnAhtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YjM0YzdjZTNiYzUxMzgxZTJmMzA1ZGI4ZjMzMDY5YWQ1
NDhmZTYwHhcNMjYwNzIzMTUwMTU3WhcNMjYwNzI0MTUwMTU3WjAzMTEwLwYDVQQD
EygyMTMyZGEyNjkyZWQxYTY3NGM4NDMxNmMwMDI1NDkyMGMxOGYyNzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MZ6MB6hjM2fTdp3tqkDEhxccfh8
XWgoP59iFNpy90mdQF//BrpnM6arTYgSU2rXbEF+xZz62BqRuE3p6lD0RG97rrG+
4IbWlLtisTpgQ3v6XocgPhfW8apJ2/K4BLqrds2TdVRZ4TX2UFQbCI/zJlTtJ1it
uhjlYZlvdHPYnOTF2zAt5vuPNgi5dyrJrD0u/QLK2oQfN4XD7VJQIHMlfl23Oil2
Ce7fMhpe6XC1ZT2jh2rgfdNqRzmO4X99uB50cCdeysnlA1Lh73gPlZIaRyQdII6G
kfUabPgX5RQlVUNBlOtWM+9kr8qR/zQWhPC1SEz1WzcQmHTakJBr6seZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEy2iaS7RpnTIQxbAAlSSDBjyeMMB8GA1UdIwQY
MBaAFOezTHzjvFE4Hi8wXbjzMGmtVI/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTdOTWZPTzhVVGdlTHpCZHVQTXdhYTFVai1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAt
NmU5ZDNiNzMyYjA4LzEvNTdOTWZPTzhVVGdlTHpCZHVQTXdhYTFVai1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAtNmU5ZDNiNzMyYjA4
LzEvNTdOTWZPTzhVVGdlTHpCZHVQTXdhYTFVai1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxoJErc/h
bWxt8FbkTfHZn6YpxSb3l0N3/47KExcq03PMaA2DFeAz6LqWfbVXjcN/KjvVvkr1
UIdZa2RlwIwrFQ0oTSZh09aLlmwah+KKn+jC525fTwNZJG4GOE2YqioGpxQqkYPs
N3Kq0+b2i8m3eNyGtFvsvOVQUP971Ajo2fcP3iJt4+lPbr+GxZhyzina9NjNuMvT
3GoxhLlUPtdTzB5pIoLEPXa8/6KHdbHdzz1shYnsNPyHbMXL5nygA4D2I/JoB4Mc
HFOMMlje3iUqnVU4ijYIFkqffQsi2GXU+8NiVHeu5xVqIYuGZLjkgkhlyrc/iUeK
33HRL5Wqws/f6Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:04 2026 by rpki-client