Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: D1DgdT7Wury+nyfXcTOphbb24r35s4U36Kb1Bih1V1o=
Subject key identifier: 39:7D:4B:D7:80:15:49:AD:E2:DD:27:74:E4:8A:04:88:74:BE:EE:26
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 01A0D2DE318FF5634DA2DD9B69454AD94823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 1772
Signing time: Thu 24 Sep 2026 10:02:52 +0000
Manifest this update: Thu 24 Sep 2026 10:02:52 +0000
Manifest next update: Fri 25 Sep 2026 10:02:52 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: bCHBxnbjsdsDoQhx9uivu/uDwXcod7sEXKuvv+nEJOY=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:31:8f:f5:63:4d:a2:dd:9b:69:45:4a:d9:48:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Sep 24 10:02:52 2026 GMT
Not After : Sep 25 10:02:52 2026 GMT
Subject: CN=397d4bd7801549ade2dd2774e48a048874beee26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:6e:7a:55:97:93:5e:fb:24:e1:99:b6:80:
bb:e4:50:5b:be:bb:73:d8:e6:e5:61:fb:18:2c:ba:
bb:70:9d:5f:d2:0a:2e:ec:fc:bf:c8:ad:2a:2a:3b:
82:4b:81:fc:a0:71:0c:2a:ca:84:63:2a:ba:ee:99:
d1:6a:30:c7:85:4b:c7:ba:18:ec:e6:ab:ef:6d:c3:
dc:62:89:ec:44:fa:4a:eb:29:20:f1:cd:ba:e0:a9:
19:e5:32:35:a4:3a:27:00:44:22:51:06:e6:8e:ee:
ad:df:5f:83:f7:bf:62:05:17:21:ba:e5:bc:14:0d:
ba:c0:c5:b2:1e:06:92:39:e7:b6:60:77:e1:34:c7:
90:86:9f:57:da:8b:81:d0:5f:68:ed:04:a6:de:52:
91:7a:42:f0:92:1d:cc:02:58:5c:79:fa:38:7a:da:
d2:7d:bc:51:d4:91:2a:ea:60:c2:ba:71:3d:cf:1f:
d5:5b:55:69:01:b8:85:40:de:de:e9:40:bf:5a:cb:
b4:88:5f:b4:5f:53:57:86:0f:b4:20:55:b0:96:39:
55:af:ad:e0:b2:2e:d1:8a:be:e4:66:44:09:f4:19:
8a:9f:97:71:3b:93:6a:74:bc:86:20:10:f8:f4:3b:
98:b4:90:d5:30:b8:19:fa:59:fc:15:13:7e:1b:f7:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7D:4B:D7:80:15:49:AD:E2:DD:27:74:E4:8A:04:88:74:BE:EE:26
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:b1:27:12:f7:c4:49:08:37:09:0b:f1:0c:93:a8:71:8f:
46:a6:75:4e:4e:e3:d5:e5:3c:91:a7:b0:fb:59:77:5e:bc:4c:
9f:48:f9:37:bd:12:c0:5e:ed:28:6c:93:83:99:eb:d9:1a:3f:
02:4d:7e:47:96:56:18:b3:7d:f8:73:61:5a:bc:5b:cf:38:10:
d8:1c:b4:e3:1a:39:48:2b:bf:98:66:8f:ca:fb:37:07:e1:5c:
96:22:e3:47:bf:3f:20:fc:b2:89:f6:49:0b:8e:b6:ce:3b:f0:
28:cc:eb:d2:01:0d:e1:fc:59:7e:5b:d9:a8:e4:cc:3b:a8:81:
23:d7:e3:66:32:e4:62:cf:b1:13:56:e4:46:53:b7:5a:6a:90:
35:20:8e:c0:61:c2:45:6d:4b:96:b2:c3:24:99:ba:06:1d:bf:
3c:a2:4b:0b:a6:5d:e1:74:58:f5:02:ec:a3:a0:46:47:3e:3e:
e8:85:ac:1d:7e:d5:42:b5:e3:6a:88:e0:16:e5:5c:99:95:bd:
af:9d:33:4d:71:d1:5f:5c:e3:c7:21:2b:13:68:d5:5c:86:1d:
e5:dd:ba:31:70:d0:e5:37:5e:89:6a:4e:0f:c0:94:09:af:8d:
64:ea:f3:4e:f0:6f:0d:79:41:24:dd:8a:00:43:a2:02:0d:3c:
29:8a:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:41:33 2026 by rpki-client