Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: oy3nYeDtIQek+dpMe+8VLVsV9UwLpEtbN7g3VhTKcM8=
Subject key identifier: 13:4E:55:8A:01:04:36:3D:61:C5:70:7D:53:B4:E0:AB:25:87:17:FB
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 01A0C4B29B421D06F5EDC7EBF459DB5F552D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 16:00:34 +0000
Manifest this update: Mon 21 Sep 2026 16:00:34 +0000
Manifest next update: Tue 22 Sep 2026 16:00:34 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: FGC4aPgId0PefUlAl25huOKMKwcL5EYyl+KCxkur/e8=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:9b:42:1d:06:f5:ed:c7:eb:f4:59:db:5f:55:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Sep 21 16:00:34 2026 GMT
Not After : Sep 22 16:00:34 2026 GMT
Subject: CN=134e558a0104363d61c5707d53b4e0ab258717fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:34:63:04:5e:29:9a:a4:66:53:c7:be:c4:
91:97:41:3d:b0:ce:b1:22:c6:21:2e:84:21:56:12:
10:b7:a7:10:06:7d:09:49:3a:b4:1f:4f:0c:c9:53:
6a:45:d1:f5:b2:4e:19:33:bc:a1:56:0f:62:87:07:
58:c3:2a:30:25:60:6c:34:89:8e:5d:8c:e8:48:f5:
72:5a:55:74:b7:ab:53:86:ef:f3:66:a3:7f:7a:69:
92:0a:59:71:e7:87:05:a6:f9:d3:f9:00:8c:2b:94:
6f:16:c6:89:50:06:22:06:a6:78:fd:8e:b1:1f:d9:
cc:10:0a:0d:8b:c2:dd:ef:f0:96:59:dc:4d:68:01:
ff:34:da:f9:a3:dc:c2:5b:98:27:04:61:f1:03:4c:
6c:b6:7e:69:44:5d:26:e3:47:72:7e:d2:82:62:34:
e8:87:34:81:1b:b3:1a:55:38:d7:58:9a:02:cb:c3:
98:e2:e7:c1:3e:12:ae:c0:cd:79:1e:fa:55:95:44:
d1:99:a0:fb:c2:f9:b0:c7:ad:ba:92:a9:ce:0a:bd:
75:54:a4:9e:3e:8c:2d:7b:54:39:4f:2a:95:61:22:
79:0e:91:a2:63:b6:2f:d3:9a:f5:ff:7e:31:be:75:
10:15:b9:c7:25:24:75:d6:9e:e0:b4:91:c5:07:3f:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:55:8A:01:04:36:3D:61:C5:70:7D:53:B4:E0:AB:25:87:17:FB
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:df:bd:74:75:65:ee:38:c0:8e:64:fa:e1:27:13:45:8c:
d1:39:09:43:d2:0d:90:cd:ec:35:2a:df:5a:c9:5a:50:4e:78:
16:75:3e:4e:30:87:19:38:a0:df:99:fb:1b:70:a2:8e:70:4c:
60:9c:c5:a8:b1:73:bb:26:ba:6c:78:11:cd:f6:4b:27:85:80:
ae:df:a5:a5:04:8c:86:22:d7:8a:09:92:2b:70:0e:21:16:02:
cf:12:fc:2b:8e:3a:e7:58:88:67:c6:1a:1c:29:bb:02:96:43:
ed:85:82:a9:08:89:ba:9b:8b:4e:e1:37:d3:4d:dd:3e:1b:dc:
82:61:91:ae:0d:99:a7:99:30:2e:66:d8:1d:e7:94:ce:48:01:
6a:eb:f9:a0:ec:38:ac:4a:40:e8:5d:e7:d0:f2:c1:d5:66:7c:
1a:29:c2:b2:7e:62:1c:9e:1b:29:ef:d3:01:65:b3:86:22:23:
e6:a2:67:db:ea:73:ea:b9:41:d6:6f:8d:e7:67:e5:48:48:21:
39:9f:2e:6a:32:0a:ec:d3:25:2d:a7:66:08:da:c0:b4:28:5c:
89:40:0f:a3:dd:6f:44:41:8f:71:25:c5:8c:40:7f:4b:9e:9f:
7f:5c:9e:de:9d:af:2b:05:81:87:1c:c6:c1:29:d0:71:da:d3:
68:e3:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:08:54 2026 by rpki-client