Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: J6zghupoL4owgZwZ3vHn/W5AH9ct0F3cIM7xzKF4fho=
Subject key identifier: 87:9C:4B:A6:FB:FF:D9:E7:B2:96:94:F8:13:72:84:B5:4A:66:C7:1E
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 01A001A644AF8CE9FBCA958217C04BF6A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 19:01:08 +0000
Manifest this update: Fri 14 Aug 2026 19:01:08 +0000
Manifest next update: Sat 15 Aug 2026 19:01:08 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: tv9wQPRJgo1F/5HVe0kDWPOXTm6hEO6rLF2CDnikbYU=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:44:af:8c:e9:fb:ca:95:82:17:c0:4b:f6:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Aug 14 19:01:08 2026 GMT
Not After : Aug 15 19:01:08 2026 GMT
Subject: CN=879c4ba6fbffd9e7b29694f8137284b54a66c71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:2d:62:04:b0:14:fd:20:5a:6d:e3:88:f3:
fe:d8:52:7b:59:be:aa:07:54:b0:9a:74:40:22:6e:
12:fb:9d:84:c1:7b:eb:35:fb:4e:bb:d5:93:41:4d:
0c:d4:28:62:25:52:16:30:81:ad:ef:26:a8:31:e0:
df:1c:6d:fc:75:7d:5b:78:e3:eb:50:fd:48:95:b9:
8e:0c:38:b8:08:73:06:90:2a:1e:b4:bc:de:42:c1:
eb:76:5f:85:2c:fc:07:f8:a3:5d:9f:8d:ab:5a:1f:
8c:98:cb:88:40:db:2d:bc:02:e7:9f:9a:03:9a:e6:
63:81:0a:11:97:b2:ed:e1:8e:7d:3c:6a:0e:ff:ec:
a8:be:18:da:d5:57:a9:3d:2a:ee:be:0d:f1:94:72:
17:40:31:f1:0a:04:a9:ea:d5:03:82:4d:b9:d4:75:
9e:e1:4f:ec:f9:45:af:6c:f2:95:8d:c5:9a:5d:9d:
5c:02:49:74:78:f8:aa:42:9e:a2:1a:e3:c8:cf:8f:
89:0a:2e:c6:2a:92:d5:df:a3:25:57:0e:fc:af:82:
e2:35:c1:5e:ea:25:bd:7f:e8:57:e6:21:b4:ad:66:
7c:3c:61:58:07:d5:df:5f:c1:59:03:7f:39:6e:02:
68:ac:d9:6e:94:e4:3f:9a:b3:3b:46:a3:ac:5f:8f:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:4B:A6:FB:FF:D9:E7:B2:96:94:F8:13:72:84:B5:4A:66:C7:1E
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:38:6e:f8:7d:9e:bf:39:e0:41:19:ed:ab:80:a7:66:04:b0:
86:82:c8:c0:ea:df:83:45:42:ca:4e:2a:f9:22:5b:78:3a:93:
03:41:46:d3:cc:0a:a9:9a:55:3c:02:cf:ee:bb:b3:eb:5a:e1:
f3:69:0d:41:ca:7d:54:a2:7c:2c:95:3c:a0:58:ed:b2:09:da:
cf:e1:8f:b3:95:ca:1d:0a:9e:c3:d6:bf:e5:21:81:48:9d:3d:
0a:ca:3c:1a:ff:79:47:cb:b2:4b:c4:46:76:86:c5:40:50:74:
bb:69:3f:26:7c:7b:57:a1:86:1b:c7:ce:60:cf:6b:8f:e5:a9:
be:65:9a:ee:63:8c:6e:c8:10:d1:2e:8c:84:d1:dd:76:eb:aa:
49:d6:c4:a8:49:dc:15:bd:3a:91:14:e9:c2:d9:90:0b:18:06:
16:56:cd:a6:67:18:37:58:95:d7:60:9a:e7:d4:bf:17:2d:07:
d6:63:2f:b7:6c:24:e5:7b:b3:6f:e8:e0:15:c7:02:9d:ff:ff:
ed:9e:36:a7:9c:71:37:3a:22:33:87:d7:d1:a1:87:f1:68:7d:
de:f8:ad:42:bb:12:49:c8:c0:69:4f:73:de:e3:11:72:59:27:
65:2e:8b:77:ac:72:1b:f1:be:44:b0:ba:a2:02:6f:2b:36:7b:
d6:53:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:17 2026 by rpki-client