Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: DdD7yYQ4TRf3uFe1zNJOfrsPSH1NLpmOY8xIV2AaO8w=
Subject key identifier: 44:3E:3B:B1:22:E2:C9:E8:6F:EC:73:74:36:D7:0B:20:44:B4:C4:62
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019FA1BBAA58029AF8503A9F1EB11138071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 16D4
Signing time: Mon 27 Jul 2026 04:00:58 +0000
Manifest this update: Mon 27 Jul 2026 04:00:58 +0000
Manifest next update: Tue 28 Jul 2026 04:00:58 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: Q0ESwKoS/teyoCFgtVp2a8oS87UhJNNP1QDh3tFXJfg=)
2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=)
3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:aa:58:02:9a:f8:50:3a:9f:1e:b1:11:38:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Jul 27 04:00:58 2026 GMT
Not After : Jul 28 04:00:58 2026 GMT
Subject: CN=443e3bb122e2c9e86fec737436d70b2044b4c462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:f9:49:51:1d:b7:65:6e:93:42:d0:8e:56:
7e:4c:0f:e4:24:db:26:79:6f:25:c3:de:ba:28:74:
6e:6a:ac:0f:08:3a:11:77:1b:ca:fb:cb:2f:9d:5a:
72:3f:80:0d:84:51:94:09:1e:23:a6:a9:3d:81:2a:
9a:2f:e7:83:52:dc:5f:aa:8d:2d:69:c6:24:31:d0:
1a:72:5b:de:81:34:50:f1:25:e8:81:33:7e:ce:b4:
6a:25:84:dc:eb:0b:a2:26:d1:4b:62:6d:ab:0b:9a:
69:10:01:8d:5f:7b:51:1e:9a:6e:b1:af:86:87:e7:
83:1c:dd:03:a1:72:55:0b:9d:ab:9c:f8:7f:4a:a7:
14:0c:f8:1e:30:7a:91:5e:ee:a9:3e:87:d9:db:f6:
f2:b1:ae:60:b6:e3:35:e1:2d:d5:69:7c:2a:f9:1d:
24:fc:8a:10:be:75:97:19:ad:84:a5:90:29:58:e2:
80:01:da:21:48:de:c1:dd:b4:4f:9c:13:45:8e:48:
13:3c:4d:d7:18:ef:da:37:8d:53:55:ed:e7:df:fd:
34:ef:d9:74:85:59:70:ed:30:6a:82:f3:54:5e:4b:
2c:cd:ad:f6:6e:76:f1:4e:81:96:cf:91:e0:6c:6d:
c3:56:2e:ff:f2:83:0d:b1:00:e2:35:ab:94:40:20:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3E:3B:B1:22:E2:C9:E8:6F:EC:73:74:36:D7:0B:20:44:B4:C4:62
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:ac:d5:33:73:73:06:72:2f:83:3f:c7:0c:e7:4d:9f:5c:
4b:a3:af:fb:e7:bc:d3:f8:f5:d1:4f:17:d0:d5:86:b6:16:c3:
05:5c:02:5a:8d:36:7e:65:5f:7c:f0:9c:29:37:fd:05:dd:5b:
f1:3c:30:13:40:f5:e8:38:2e:03:2b:fe:dd:7a:12:3b:01:9f:
57:81:54:ec:f6:ed:a7:99:4c:b0:7e:ca:49:c1:0f:f0:4e:f7:
3c:a4:4a:31:8a:61:ba:a6:34:7f:22:f1:34:3d:e4:83:eb:51:
df:d4:1c:f8:65:9a:40:a9:0f:b0:fe:81:94:cb:d7:12:f2:66:
75:58:03:96:0f:16:1a:fe:17:bf:02:9c:69:27:ff:2b:e1:c8:
c1:36:f1:c5:8f:97:75:f7:f6:40:b8:8c:ca:03:9c:5e:ff:94:
f4:af:2b:c0:6a:e0:3d:46:20:76:15:28:1e:fb:fe:22:1d:17:
36:31:b6:54:c4:c9:79:bd:22:ec:f3:2a:18:2f:79:e0:a8:4c:
a3:fc:27:8f:96:8e:65:12:ee:17:ae:d3:5b:c0:84:fd:da:63:
4f:89:12:46:a2:a4:79:5c:61:62:44:ee:b4:f4:3b:6e:ba:08:
99:70:ba:55:0b:25:25:ac:17:ff:59:ce:98:20:ea:46:77:e9:
0e:28:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:16:09 2026 by rpki-client