Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: NZWZwx8zKVY9in53d+YNCXRNqvj/qY9FhXOOvF3Wvtw=
Subject key identifier: F4:AD:1B:55:71:F7:63:C5:E1:9A:8D:E1:B1:68:67:15:3D:CA:14:E6
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019F92490E0F131A93DDABBE853791EA44C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 16CC
Signing time: Fri 24 Jul 2026 04:01:28 +0000
Manifest this update: Fri 24 Jul 2026 04:01:28 +0000
Manifest next update: Sat 25 Jul 2026 04:01:28 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: BruswIoT6QeEVHXOOM5hdxNqRtEwK1X+9RbnRaH3dMI=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:49:0e:0f:13:1a:93:dd:ab:be:85:37:91:ea:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jul 24 04:01:28 2026 GMT
Not After : Jul 25 04:01:28 2026 GMT
Subject: CN=f4ad1b5571f763c5e19a8de1b16867153dca14e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:31:9a:3b:08:3b:3d:ea:c2:83:2f:e9:7e:
b2:67:6c:49:c8:ca:a2:2a:65:89:58:8a:e2:d3:0a:
9a:98:d3:4e:f9:d9:ec:f1:4a:69:99:2c:ae:79:26:
ce:98:75:f2:c5:b8:45:80:cf:60:1b:ff:3b:21:54:
9c:89:3c:a5:6b:67:e6:57:a5:2f:22:96:68:59:35:
fb:40:b6:57:67:aa:09:70:9f:3d:a1:aa:3d:c1:a4:
10:70:ad:95:2a:4d:ad:9d:2e:c2:88:58:cb:19:79:
b6:61:5b:b2:15:e1:2e:6f:79:41:31:2f:6f:c9:90:
fe:d2:f9:48:99:bb:ca:48:2d:b9:92:11:7d:7f:ce:
8d:23:59:52:fa:1a:2c:b6:0b:b1:08:7f:52:4f:dd:
cc:f8:e3:22:a1:ec:19:57:7a:25:a3:fd:3a:4e:e7:
b4:ea:cd:7e:dc:1d:54:9e:36:2e:b5:1d:45:0c:f0:
bc:71:74:d7:f0:b5:41:b5:a5:00:f4:c4:6e:50:6a:
c4:85:94:62:62:33:de:24:d0:bf:5b:ae:1e:bc:15:
7d:4b:41:84:4c:53:a5:16:d1:ec:b0:e2:78:59:01:
c2:09:07:2a:cc:9d:61:a7:c4:1e:aa:cb:b4:ee:54:
cc:a8:36:8a:15:29:22:75:5a:4d:95:dd:bf:9a:b8:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:1B:55:71:F7:63:C5:E1:9A:8D:E1:B1:68:67:15:3D:CA:14:E6
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fd:08:ac:86:c1:22:a4:fc:df:32:73:cc:9d:3f:46:16:a5:
5b:e1:db:c6:cd:ad:a7:30:47:fc:88:b9:69:6f:74:b5:a9:76:
db:b3:7f:99:9d:f5:d1:29:a3:1b:67:d0:4a:49:fa:ef:7c:a1:
ee:77:91:2a:d0:13:6a:8d:07:be:e2:fb:a7:f9:d7:dc:cb:12:
b7:3f:45:5c:11:c5:2b:bb:f5:01:41:19:10:64:88:14:7f:63:
85:9f:25:ed:ec:bf:b5:e4:9e:dd:61:c7:f8:46:c8:76:33:b4:
43:c7:b4:3f:70:00:07:b3:34:be:67:42:33:9b:84:35:cf:10:
b4:bc:75:6f:b0:7d:d7:ac:c0:fe:cb:e8:91:0b:d5:13:88:1e:
5d:e5:a0:22:60:b9:d2:31:67:cd:ea:99:e5:6a:b0:5d:3d:ce:
3d:d0:05:ac:41:d0:7c:64:b0:3e:03:fb:fb:d3:ff:b3:da:fa:
17:32:fe:8a:5a:8f:ab:48:9b:68:bd:13:b4:bf:fd:c2:32:ba:
7f:ff:db:4f:41:b7:6e:cf:14:3b:b8:80:53:66:3a:9f:2c:00:
48:9b:8f:70:af:97:da:1f:be:d9:12:8e:3e:27:d4:75:db:78:
a8:02:21:bd:2a:d9:16:61:45:be:d1:03:a1:68:4c:07:54:74:
56:ec:2a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:04 2026 by rpki-client