Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: oAOYP/QF6M9tYzOYWV/7+VBTpaqHuoOLbHu+e8cQscY=
Subject key identifier: FF:EE:88:D2:11:D1:29:FE:10:62:0C:52:59:D2:71:1C:DE:37:61:07
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 01A14BE1B9D7F01C806474D97776559CEF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1AAE
Signing time: Sat 17 Oct 2026 22:00:46 +0000
Manifest this update: Sat 17 Oct 2026 22:00:46 +0000
Manifest next update: Sun 18 Oct 2026 22:00:46 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: F0leZ9shn+mqu0/jm7Dx+uQf484KYBhYqxryyJEFusk=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e1:b9:d7:f0:1c:80:64:74:d9:77:76:55:9c:ef:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Oct 17 22:00:46 2026 GMT
Not After : Oct 18 22:00:46 2026 GMT
Subject: CN=ffee88d211d129fe10620c5259d2711cde376107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:f6:55:23:70:c7:74:82:2a:0d:49:60:b9:
1d:9f:85:cc:d9:85:e8:8d:d7:12:aa:ab:95:77:3b:
d2:d6:55:c0:7a:9f:89:e0:69:b2:15:5c:7d:30:b4:
df:08:58:48:75:19:23:68:b1:55:14:77:b3:dc:e4:
b1:1a:ea:2d:82:2a:2c:b5:9d:da:bc:a9:26:d4:ca:
3f:be:36:39:3f:85:08:22:d1:5c:9a:38:4e:d2:15:
a7:c7:e0:96:4e:a6:65:42:26:e8:44:0b:eb:61:76:
31:45:d9:7f:41:b6:ed:a2:01:7c:7d:7e:59:db:c2:
ac:b3:59:e4:4d:68:a9:5a:b5:81:65:86:08:81:c4:
ce:f0:d7:3b:b0:01:cc:9a:b5:75:de:c1:1f:ee:d2:
70:ee:0b:9a:cd:82:bf:79:88:f4:66:aa:10:98:e7:
d8:0d:69:1f:75:75:90:17:d2:1d:61:c2:ce:4a:be:
5f:4e:2c:1f:3f:79:d9:c9:7d:27:a2:67:b2:60:69:
6f:62:2c:30:12:bb:17:d0:05:96:d8:1a:05:56:a2:
57:3b:6c:7c:3d:c0:84:fc:dc:77:aa:6a:eb:26:70:
09:d8:83:e4:e1:8b:28:db:26:17:6e:b5:e5:af:cc:
6a:b0:47:90:88:10:ae:11:cb:c4:37:fa:f3:b0:84:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:88:D2:11:D1:29:FE:10:62:0C:52:59:D2:71:1C:DE:37:61:07
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:29:05:1e:00:03:85:bd:fc:f8:b7:aa:d0:96:20:c8:9c:bb:
67:4d:b0:b9:c9:9d:3e:46:e8:06:a7:44:72:d7:23:84:d7:4a:
0a:0d:d3:01:b4:fb:a1:0f:cc:88:f7:d5:7d:72:4f:dc:da:4c:
28:d4:9e:88:0e:45:2d:4e:c1:6c:23:ea:0d:59:d7:1c:d8:c2:
97:58:a1:46:e5:a6:6c:4c:9c:12:6a:71:cf:d2:ac:b6:98:b7:
24:bb:6f:20:49:ac:15:9f:9c:76:1c:7e:49:54:46:08:cd:fc:
45:31:4b:48:44:34:0c:e0:68:a0:8d:e4:8e:05:23:69:0b:c6:
05:d4:3c:97:53:3d:ff:0b:4c:5e:8d:8c:56:55:a5:8c:25:93:
f2:7e:17:0b:1b:9b:d4:8b:ab:66:10:b6:54:48:b0:21:d9:8d:
5d:a9:02:2b:26:ec:f1:38:95:57:5f:78:3b:76:ce:32:02:a4:
9f:85:6a:45:4b:2c:8a:5f:66:5f:41:e8:6d:55:80:e3:1b:c9:
03:d6:4b:91:10:d6:41:a5:f9:e7:b9:8b:00:ad:34:f1:52:78:
31:61:47:37:33:5f:76:19:09:46:10:46:f1:10:a5:ce:78:5a:
53:04:59:43:45:31:7a:2c:9b:2f:a2:31:5b:eb:78:8b:a3:06:
4f:6c:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:47 2026 by rpki-client