Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: +8+zlJuuEqRUCTP1ojSOdEff1endd3iGOIKos2FX6ks=
Subject key identifier: 33:35:7D:6C:AA:8B:15:23:FF:83:27:19:CC:35:F0:00:5B:7F:85:42
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019CAAC6C2DC93FF5228EB3C1F646A73172E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 154B
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: 4wkP4IKMAB3SsBOsAPZR7GZCgkorOyzFgEYrZ6y0fSg=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c2:dc:93:ff:52:28:eb:3c:1f:64:6a:73:17:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=33357d6caa8b1523ff832719cc35f0005b7f8542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:27:83:a2:c4:fb:b0:8a:e9:f9:f5:99:40:
7a:32:22:13:47:d4:b5:66:6b:a3:17:60:5e:4a:70:
a4:97:e9:b2:f2:57:21:6c:12:4a:8e:a3:a0:44:2a:
59:83:ad:5e:d6:04:18:4a:66:45:36:1c:82:17:31:
ae:87:90:76:4c:ad:15:d8:6b:c2:af:c1:b3:a9:2d:
de:e8:e5:8b:25:94:96:ee:1a:26:5a:01:2b:14:2b:
96:d4:4b:11:a5:51:34:2a:70:de:aa:93:0f:7d:36:
67:1a:c5:c5:0f:b7:84:ae:63:2a:50:41:b6:c1:a9:
e2:31:f3:39:3a:1c:7b:38:2e:54:79:a7:ba:cd:07:
f0:a8:55:28:f3:9e:f6:c1:b8:11:ff:96:61:18:02:
3d:a8:77:2a:04:28:ba:a1:2c:69:85:c7:79:62:6d:
b3:e0:4e:6a:94:c0:62:eb:92:17:18:bc:9f:2f:f2:
96:b4:29:a7:d6:05:bc:24:43:c4:2f:c0:d9:6e:6b:
35:42:08:b9:90:b1:81:8d:5f:c0:49:3b:24:f2:0f:
d7:0c:2c:dd:91:e1:3d:98:54:c5:e0:b2:ee:45:da:
52:69:dd:87:90:2c:d1:9e:62:2e:d7:51:87:f6:3d:
33:7b:de:25:3f:6f:4a:75:45:32:b2:99:29:7c:56:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:7D:6C:AA:8B:15:23:FF:83:27:19:CC:35:F0:00:5B:7F:85:42
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ef:37:bd:b5:97:e8:97:58:0f:3a:5b:bf:0e:f0:52:f6:fb:
03:46:b1:95:84:09:d5:1b:96:66:b5:12:c9:23:fe:ca:37:58:
61:0f:79:a9:f3:89:6c:2c:bb:32:e2:cc:fb:2b:70:7e:f2:f3:
a6:57:32:07:1b:c1:60:f7:33:a1:84:c5:be:d3:f6:6b:64:e6:
7b:8c:be:dc:db:de:0a:32:65:ec:1b:50:88:09:58:c9:a9:9b:
27:5c:00:06:64:d2:eb:1a:05:34:10:b7:9f:62:67:3f:64:93:
3b:04:29:4a:14:a2:b5:32:41:89:49:c8:60:a2:fa:55:cc:a9:
99:3e:3b:30:ff:6d:96:0e:1a:e5:1a:81:8b:f6:98:ad:a8:b3:
a6:f4:e6:c7:30:4d:7b:ca:50:c4:f6:b7:6e:10:b2:7d:10:c7:
eb:f5:0b:4d:ad:e5:7b:9d:59:58:e0:48:33:3a:4b:f8:01:4e:
76:b3:9d:12:1b:31:c1:b4:f6:82:9c:a4:3f:30:29:eb:f6:a3:
33:2e:7e:34:d8:7b:0b:d1:19:a7:f0:74:d7:70:c9:6c:d3:2e:
53:b2:46:80:d2:be:61:bc:26:46:8b:67:ee:4b:59:10:bd:20:
df:db:dc:fa:18:07:e7:11:7f:18:1f:70:fb:fc:32:42:ff:42:
87:8b:2c:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyqxsLck/9SKOs8H2RqcxcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjYwMzAxMTkwMTE4WhcNMjYwMzAyMTkwMTE4WjAzMTEwLwYDVQQD
EygzMzM1N2Q2Y2FhOGIxNTIzZmY4MzI3MTljYzM1ZjAwMDViN2Y4NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC8ng6LE+7CK6fn1mUB6MiITR9S1
ZmujF2BeSnCkl+my8lchbBJKjqOgRCpZg61e1gQYSmZFNhyCFzGuh5B2TK0V2GvC
r8GzqS3e6OWLJZSW7homWgErFCuW1EsRpVE0KnDeqpMPfTZnGsXFD7eErmMqUEG2
waniMfM5Ohx7OC5Ueae6zQfwqFUo8572wbgR/5ZhGAI9qHcqBCi6oSxphcd5Ym2z
4E5qlMBi65IXGLyfL/KWtCmn1gW8JEPEL8DZbms1Qgi5kLGBjV/ASTsk8g/XDCzd
keE9mFTF4LLuRdpSad2HkCzRnmIu11GH9j0ze94lP29KdUUyspkpfFZBlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDM1fWyqixUj/4MnGcw18ABbf4VCMB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj
MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO83
vbWX6JdYDzpbvw7wUvb7A0axlYQJ1RuWZrUSySP+yjdYYQ95qfOJbCy7MuLM+ytw
fvLzplcyBxvBYPczoYTFvtP2a2Tme4y+3NveCjJl7BtQiAlYyambJ1wABmTS6xoF
NBC3n2JnP2STOwQpShSitTJBiUnIYKL6VcypmT47MP9tlg4a5RqBi/aYraizpvTm
xzBNe8pQxPa3bhCyfRDH6/ULTa3le51ZWOBIMzpL+AFOdrOdEhsxwbT2gpykPzAp
6/ajMy5+NNh7C9EZp/B013DJbNMuU7JGgNK+YbwmRotn7ktZEL0g39vc+hgH5xF/
GB9w+/wyQv9Ch4ssFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:56 2026 by rpki-client