Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: Qr4hyMWCmzPdVziTaYE/a7vMYBpd2LX/jgKSLjTR7pk=
Subject key identifier: 9D:1A:B0:05:AB:89:45:DE:B6:67:3A:54:31:66:E8:0F:6B:06:3D:5C
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019D31F59E11264AF4AC521EF2C413514BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 1591
Signing time: Sat 28 Mar 2026 01:01:13 +0000
Manifest this update: Sat 28 Mar 2026 01:01:13 +0000
Manifest next update: Sun 29 Mar 2026 01:01:13 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: pDmBCVzB3bP+n2YIvHIS0/qK7FqFjO7aw1wsE55qD78=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:9e:11:26:4a:f4:ac:52:1e:f2:c4:13:51:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Mar 28 01:01:13 2026 GMT
Not After : Mar 29 01:01:13 2026 GMT
Subject: CN=9d1ab005ab8945deb6673a543166e80f6b063d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:20:2b:66:49:62:ca:01:62:6f:49:81:a6:ae:
cc:d5:3f:65:02:9a:90:7c:ee:4d:71:1c:4c:7d:40:
1c:b8:c9:bf:06:cc:80:5e:e7:96:7e:92:f9:41:f0:
8f:61:52:05:40:dc:9e:ab:75:9e:18:ed:cf:9d:71:
62:a5:94:fc:03:98:85:d9:93:66:58:d1:0f:17:ef:
79:fa:b4:d4:3a:a3:44:84:eb:b0:47:ca:d4:d7:0a:
1f:4e:34:ef:fb:85:f7:f6:d6:37:42:f6:a4:b3:e5:
a3:cc:97:4c:0d:0b:55:3e:cd:05:8d:27:9e:09:30:
cb:bf:e6:9e:3b:fa:e6:9c:fa:8c:2d:7f:88:de:2b:
e7:d2:7f:8f:69:bf:51:d5:81:cb:68:e0:36:9e:d2:
f7:ca:bb:54:7a:bb:7d:0b:66:38:23:ef:0a:4c:dc:
60:2a:00:93:95:73:90:bb:0c:e0:0e:8d:be:ee:cb:
60:89:45:59:ef:0b:e7:f1:f1:01:bd:ae:55:85:d3:
2c:0f:3b:96:30:33:75:77:1f:47:7b:8e:a1:6a:ac:
62:df:20:bb:40:0b:41:d2:8e:98:ca:59:b5:00:f2:
7c:e3:81:b0:b8:ab:14:72:5b:0c:e1:50:ed:2e:2a:
2a:50:f9:37:0b:e5:39:ef:96:b2:f2:e1:e8:85:b3:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:B0:05:AB:89:45:DE:B6:67:3A:54:31:66:E8:0F:6B:06:3D:5C
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:38:d8:2c:e8:bf:9a:7e:b1:35:c3:59:49:57:06:b4:5e:
57:33:ba:3f:8d:4a:6b:2e:46:30:af:34:68:08:a2:2d:d4:a6:
1c:40:d3:f6:ea:34:37:60:62:0c:55:2e:dc:a1:f8:8d:b1:0f:
93:3e:bd:ae:6f:68:10:81:c1:db:63:e7:93:69:de:14:8f:68:
f8:67:9e:fc:6a:8a:b4:1c:8f:45:b6:55:42:e0:d0:a5:81:7b:
cf:ea:e5:c2:aa:c3:d4:45:18:a1:0f:57:7a:6d:5f:49:f4:02:
40:d9:aa:e2:92:e5:2c:06:b4:72:c9:ff:51:6e:33:5c:4a:2d:
2d:cc:ab:fa:e4:e5:d6:85:fc:f7:e0:f0:db:a6:17:9c:1f:80:
43:8a:3a:bd:23:6b:32:6c:89:78:4d:b8:60:4d:8d:ae:04:21:
bb:16:df:fe:82:13:0a:c5:36:43:bf:18:96:23:a5:75:88:6c:
a5:a7:d2:3a:12:15:ea:5a:79:26:1d:56:f1:be:c7:57:c1:56:
5f:c4:5d:8d:d9:36:4d:4e:37:4f:d7:37:a8:5b:b5:d8:e1:3c:
ab:f1:c7:c8:b3:85:9f:8e:fd:f9:57:fe:f8:35:65:ae:a9:5b:
73:bb:c5:24:c0:23:c5:3e:4b:17:a5:71:1f:a4:17:ea:00:71:
36:bd:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:49 2026 by rpki-client