Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: y27jagJ4yeYSsB/kELlW60dGOnUCMeLkXeGy3L0JJ4g=
Subject key identifier: DA:D2:BF:AE:66:D2:73:F6:45:FB:0B:1D:DE:D5:00:46:12:07:28:FD
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019FA97550F7596D480B0B74612887308D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 16D8
Signing time: Tue 28 Jul 2026 16:01:05 +0000
Manifest this update: Tue 28 Jul 2026 16:01:05 +0000
Manifest next update: Wed 29 Jul 2026 16:01:05 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: z8NwIAkZA5fy6M2y0wsQ6t9fglqGctB5jYSu2SyVhoU=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:50:f7:59:6d:48:0b:0b:74:61:28:87:30:8d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jul 28 16:01:05 2026 GMT
Not After : Jul 29 16:01:05 2026 GMT
Subject: CN=dad2bfae66d273f645fb0b1dded50046120728fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:84:04:8d:67:66:41:db:e4:3a:47:2f:69:
df:86:be:83:19:b0:84:95:e9:52:8f:94:0e:74:20:
db:ae:41:bb:17:d5:96:92:d9:6e:95:ef:e2:13:f8:
bc:80:d2:94:14:9f:0f:c4:96:46:d2:1f:eb:5d:10:
4e:22:4b:56:b7:e4:f8:eb:25:36:23:e9:f3:74:42:
48:72:73:54:23:ec:9e:4b:60:20:a8:ee:50:64:96:
c1:7b:41:2a:06:c5:cc:58:60:3e:34:3c:1b:97:a3:
87:89:9e:43:82:98:ac:17:24:01:e5:16:fd:ed:aa:
59:9f:a8:f8:93:97:0b:38:98:da:ba:44:c3:15:7d:
54:75:8c:7a:7e:04:09:ff:4a:8b:e3:55:5b:c3:3a:
5e:c5:ad:74:91:c8:4f:b7:7a:8c:9f:2c:89:e4:70:
2e:a9:09:0f:ec:70:d5:84:be:bb:76:75:ea:9b:fd:
d1:d0:b6:88:bb:35:de:a6:e9:50:18:7c:74:63:fb:
67:02:f7:fa:ff:9d:e0:51:7e:a4:b3:95:9d:02:b1:
69:e7:15:08:2b:00:2d:95:11:05:64:63:a8:70:26:
76:db:fb:16:e3:08:6a:a7:c8:50:62:cb:dc:3f:a6:
83:3a:82:8d:eb:bf:20:10:d0:e0:46:2e:cc:e7:19:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:BF:AE:66:D2:73:F6:45:FB:0B:1D:DE:D5:00:46:12:07:28:FD
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:81:47:7e:59:6b:27:de:c5:7d:ea:6c:dc:12:b7:6a:74:
4f:d6:0f:ea:92:43:6b:87:10:8d:a7:64:dd:36:aa:30:eb:83:
70:af:17:37:19:05:e5:92:8b:99:58:c2:ba:15:7f:21:be:e5:
4c:30:53:21:73:3a:02:f2:92:5f:00:50:f8:20:fa:4c:32:37:
bb:19:3d:05:e7:f1:04:17:2a:76:b3:6b:01:f9:51:83:1c:d4:
2a:ce:eb:4c:4a:ab:f1:7c:c8:76:2d:13:ad:2c:33:07:87:0e:
97:9a:52:6f:7e:4c:c8:3d:39:3e:12:d8:b5:80:fe:35:d1:87:
45:a2:d5:d6:6b:23:8e:f6:d5:8e:1b:02:50:60:37:2e:5e:bd:
a9:79:d0:0a:a9:0a:ce:7f:ad:1d:6d:e6:ed:a8:aa:56:57:d6:
bd:be:b0:96:ab:b4:75:9d:29:3e:a2:c1:85:aa:c9:ba:dd:1b:
0a:5b:ae:ba:7f:d9:e9:21:08:cd:e3:13:58:d6:70:9f:5d:9f:
ca:93:54:fa:3c:b4:71:15:a4:9e:9c:0c:7b:47:4a:f9:0e:47:
c5:d7:b4:28:5a:0c:93:9a:75:fb:68:b7:bc:98:e7:56:e9:39:
ea:96:fb:d4:f4:9e:8f:de:e0:84:aa:b4:0c:0d:87:dd:10:22:
3c:a7:b3:a8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+pdVD3WW1ICwt0YSiHMI1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjYwNzI4MTYwMTA1WhcNMjYwNzI5MTYwMTA1WjAzMTEwLwYDVQQD
EyhkYWQyYmZhZTY2ZDI3M2Y2NDVmYjBiMWRkZWQ1MDA0NjEyMDcyOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpuEBI1nZkHb5DpHL2nfhr6DGbCE
lelSj5QOdCDbrkG7F9WWktlule/iE/i8gNKUFJ8PxJZG0h/rXRBOIktWt+T46yU2
I+nzdEJIcnNUI+yeS2AgqO5QZJbBe0EqBsXMWGA+NDwbl6OHiZ5DgpisFyQB5Rb9
7apZn6j4k5cLOJjaukTDFX1UdYx6fgQJ/0qL41Vbwzpexa10kchPt3qMnyyJ5HAu
qQkP7HDVhL67dnXqm/3R0LaIuzXepulQGHx0Y/tnAvf6/53gUX6ks5WdArFp5xUI
KwAtlREFZGOocCZ22/sW4whqp8hQYsvcP6aDOoKN678gENDgRi7M5xnQDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNrSv65m0nP2RfsLHd7VAEYSByj9MB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj
MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeKB
R35ZayfexX3qbNwSt2p0T9YP6pJDa4cQjadk3TaqMOuDcK8XNxkF5ZKLmVjCuhV/
Ib7lTDBTIXM6AvKSXwBQ+CD6TDI3uxk9BefxBBcqdrNrAflRgxzUKs7rTEqr8XzI
di0TrSwzB4cOl5pSb35MyD05PhLYtYD+NdGHRaLV1msjjvbVjhsCUGA3Ll69qXnQ
CqkKzn+tHW3m7aiqVlfWvb6wlqu0dZ0pPqLBharJut0bCluuun/Z6SEIzeMTWNZw
n12fypNU+jy0cRWknpwMe0dK+Q5Hxde0KFoMk5p1+2i3vJjnVuk56pb71PSej97g
hKq0DA2H3RAiPKezqA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:36 2026 by rpki-client