Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: Sd1IZROpjMoWuN8l8SIr5soadlDl4E1Wqfy2MlZ/oGI=
Subject key identifier: E7:2C:1F:6C:74:C3:A6:81:4F:E7:57:12:28:42:D5:BE:B4:C2:54:BA
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019DCE6328E884264DB5CAD751D55EE0F45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 15E2
Signing time: Mon 27 Apr 2026 10:01:38 +0000
Manifest this update: Mon 27 Apr 2026 10:01:38 +0000
Manifest next update: Tue 28 Apr 2026 10:01:38 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: E67rAOQERb1sm+6KBTi8dQA7M58MqoVPj9Wahjn35sc=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:28:e8:84:26:4d:b5:ca:d7:51:d5:5e:e0:f4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Apr 27 10:01:38 2026 GMT
Not After : Apr 28 10:01:38 2026 GMT
Subject: CN=e72c1f6c74c3a6814fe757122842d5beb4c254ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:91:63:ae:f3:7b:fb:0b:f5:22:5f:5d:d3:
51:7f:52:5b:0a:a7:dd:63:ad:4b:64:0e:10:89:30:
74:21:dd:75:60:83:1d:0f:17:f4:ce:63:76:af:41:
a4:4d:a0:fe:b0:29:e7:13:f2:8e:bb:03:4e:a8:ae:
9c:54:ad:38:8c:ec:66:60:d9:85:f5:3e:8e:cc:34:
67:3d:b6:67:4e:76:ad:1c:1a:90:42:d4:16:66:61:
28:5a:e8:7c:d3:ef:26:0e:04:ca:d8:10:22:e1:13:
c4:45:b1:de:c4:76:d1:15:9b:0b:07:a1:ef:aa:19:
d3:47:f9:10:61:c3:cf:40:f9:d7:44:ef:16:dd:5a:
a5:9c:76:6f:28:db:84:9e:b3:80:c3:c6:4c:c7:09:
b1:f1:a4:7a:42:35:9b:a4:b9:4a:88:51:6c:5f:51:
24:76:92:20:ea:1d:cc:b2:31:44:f8:6b:8e:7d:74:
56:9e:27:28:29:b6:b4:2c:ea:d8:04:e3:39:9b:c3:
5c:0d:4a:f4:04:38:a4:26:3d:7f:f7:7a:e5:06:99:
88:86:ae:13:c6:e4:93:dc:0a:40:08:40:80:20:6e:
e0:1b:9e:3c:b6:45:04:74:f7:52:e4:9d:9d:ee:50:
df:b9:eb:14:e4:ee:21:6d:e7:a3:b6:d8:66:a4:6a:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2C:1F:6C:74:C3:A6:81:4F:E7:57:12:28:42:D5:BE:B4:C2:54:BA
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:5a:4e:63:78:e3:28:51:f2:94:00:cb:13:d6:c6:9e:99:
c5:65:f8:dc:39:5e:9f:de:fb:b9:8d:44:b1:72:ef:53:dd:3a:
e2:cb:1b:1f:87:42:b0:63:6f:2e:38:00:00:ae:f8:9f:e3:bb:
25:25:3b:97:16:10:69:c3:0b:1d:4a:87:7e:49:42:e2:fb:c4:
a4:4a:19:7e:55:06:fa:77:06:85:30:97:99:d6:e8:f0:08:42:
9f:5f:2a:0d:de:b9:7f:d2:ee:ae:14:e1:ea:b5:17:e4:19:c7:
c4:87:5b:19:e7:75:e6:f9:8c:6f:52:61:b7:a0:13:4a:8d:ea:
2a:49:23:22:cb:a0:f5:16:09:00:1e:e2:5b:45:87:7a:bf:6e:
17:30:68:09:c8:e1:4f:87:e9:0e:46:ef:64:13:54:70:08:e6:
de:09:28:43:8f:4d:37:8c:8d:90:fb:f4:0b:5f:12:08:7d:09:
34:90:d1:0c:28:32:b2:84:d1:c5:f8:c0:c4:ce:af:8c:6d:c7:
c8:33:71:e1:5a:f7:7d:52:ed:bb:50:3f:cd:bd:bc:ed:58:06:
f4:c8:68:39:64:3c:a1:ec:40:1f:9d:38:5b:3e:c8:47:5e:c4:
ad:cf:57:28:88:05:55:2a:96:55:fa:bb:3b:4d:3c:47:cd:a4:
8a:04:04:8f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3OYyjohCZNtcrXUdVe4PRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk
ZGRiZGMwHhcNMjYwNDI3MTAwMTM4WhcNMjYwNDI4MTAwMTM4WjAzMTEwLwYDVQQD
EyhlNzJjMWY2Yzc0YzNhNjgxNGZlNzU3MTIyODQyZDViZWI0YzI1NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XCRY67ze/sL9SJfXdNRf1JbCqfd
Y61LZA4QiTB0Id11YIMdDxf0zmN2r0GkTaD+sCnnE/KOuwNOqK6cVK04jOxmYNmF
9T6OzDRnPbZnTnatHBqQQtQWZmEoWuh80+8mDgTK2BAi4RPERbHexHbRFZsLB6Hv
qhnTR/kQYcPPQPnXRO8W3VqlnHZvKNuEnrOAw8ZMxwmx8aR6QjWbpLlKiFFsX1Ek
dpIg6h3MsjFE+GuOfXRWnicoKba0LOrYBOM5m8NcDUr0BDikJj1/93rlBpmIhq4T
xuST3ApACECAIG7gG548tkUEdPdS5J2d7lDfuesU5O4hbeejtthmpGozEwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOcsH2x0w6aBT+dXEihC1b60wlS6MB8GA1UdIwQY
MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw
LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj
MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYxa
TmN44yhR8pQAyxPWxp6ZxWX43Dlen977uY1EsXLvU9064ssbH4dCsGNvLjgAAK74
n+O7JSU7lxYQacMLHUqHfklC4vvEpEoZflUG+ncGhTCXmdbo8AhCn18qDd65f9Lu
rhTh6rUX5BnHxIdbGed15vmMb1Jht6ATSo3qKkkjIsug9RYJAB7iW0WHer9uFzBo
CcjhT4fpDkbvZBNUcAjm3gkoQ49NN4yNkPv0C18SCH0JNJDRDCgysoTRxfjAxM6v
jG3HyDNx4Vr3fVLtu1A/zb287VgG9MhoOWQ8oexAH504Wz7IR17Erc9XKIgFVSqW
Vfq7O008R82kigQEjw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:15 2026 by rpki-client