Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: BIAp5SE6ah+ILzomdIgZhfQRqYsugZ0e8CH4HcZivaQ=
Subject key identifier: A6:90:C2:14:6C:42:E5:82:6F:C0:E7:E6:24:1A:6F:73:ED:CD:20:82
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 019FAABE60B4B813684C683ECD86A2E71BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 22:00:30 +0000
Manifest this update: Tue 28 Jul 2026 22:00:30 +0000
Manifest next update: Wed 29 Jul 2026 22:00:30 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: ZfczucwLa7y9vboj369VwbBRhyqeqEDoyOhOlRoSELI=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:60:b4:b8:13:68:4c:68:3e:cd:86:a2:e7:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Jul 28 22:00:30 2026 GMT
Not After : Jul 29 22:00:30 2026 GMT
Subject: CN=a690c2146c42e5826fc0e7e6241a6f73edcd2082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:cb:e3:ab:a7:7d:57:9a:fd:ee:dc:0c:8b:
3b:38:58:e9:84:d2:50:67:c4:86:f9:7f:c3:69:3a:
48:32:67:ec:85:30:9f:bc:fb:60:59:7d:b4:38:1f:
e6:31:3c:fa:93:e3:3b:51:b0:8c:15:cb:3c:a4:63:
e6:72:13:a3:3c:84:34:4b:24:6e:12:8f:5f:68:9a:
6f:38:0d:6f:45:50:e8:22:11:b6:45:22:50:28:91:
fe:36:61:9d:01:f6:79:b5:97:38:d0:c7:61:72:90:
ff:bb:28:e6:05:d0:04:1e:2d:39:01:d8:4a:ad:06:
b2:25:25:1a:37:e9:93:46:18:36:c8:31:12:3d:b9:
f4:20:91:b3:58:d7:b9:a4:57:98:43:7e:c4:ae:36:
54:6f:a4:8c:e7:d2:6b:c8:97:6a:a6:cd:cd:67:80:
90:c5:f4:ae:cb:b3:a6:9e:30:ef:f7:86:da:94:a2:
95:b0:4d:8a:f9:0f:3c:83:c3:6f:42:a3:80:16:ff:
0f:88:eb:3c:ca:92:82:c2:35:85:7c:f0:d7:07:8d:
e3:f7:c3:2c:9e:f1:60:b1:d9:e3:34:21:2c:c8:74:
c0:f8:17:bb:e0:b3:d9:a5:14:c0:b2:08:68:fe:42:
23:69:b2:09:85:ba:8f:81:9f:2b:6d:21:39:43:53:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:C2:14:6C:42:E5:82:6F:C0:E7:E6:24:1A:6F:73:ED:CD:20:82
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:ff:e5:e1:81:5f:a2:28:78:01:29:fb:10:7b:af:a1:34:
ac:ad:85:0f:ac:f0:93:59:0c:e0:b8:3c:60:e7:ec:54:52:aa:
20:4b:58:42:56:d2:11:b9:ca:ff:80:58:76:95:0e:5d:96:3e:
fd:de:f5:cd:27:a7:48:19:fb:50:11:83:3f:c3:e7:f5:f6:c8:
2a:20:2a:69:aa:86:5a:b4:2a:44:c0:f5:bc:89:8a:c3:84:de:
0d:c1:bd:63:58:79:15:38:f7:96:9f:14:15:5c:c4:43:4a:3a:
36:16:5e:e9:59:01:69:8c:9e:68:5e:d7:15:5e:15:68:1c:7b:
39:d6:bf:81:f7:39:d9:03:9f:38:df:71:8b:10:ec:16:9c:24:
a3:53:28:45:38:a3:14:12:b1:1e:3f:32:b5:cc:32:88:fa:83:
2c:b2:44:af:96:0c:21:d6:5e:2f:0b:8a:3e:21:72:38:96:68:
c2:ec:38:55:61:c3:c6:6b:df:3a:b9:67:3a:32:7a:33:24:14:
02:ea:fc:c5:dd:1d:f4:43:67:cd:9e:6e:37:ba:f9:d9:fb:15:
d3:50:45:43:f7:f7:30:66:7e:49:56:98:82:02:15:cf:cb:7c:
47:9e:a1:1e:12:8f:dd:27:d7:f2:bf:9e:3f:c6:f1:80:18:76:
d3:fd:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:32 2026 by rpki-client