Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: 4jQQF9b/THTa+FWLFFbk42x3mvCkOjki/zxCIJGyKPo=
Subject key identifier: 47:BB:38:B1:E7:6E:98:E6:C6:D3:07:A3:F2:9D:A0:4F:E8:BE:FA:74
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 01A1DEA75C2678777C25D786C7E358189C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 10:01:12 +0000
Manifest this update: Sun 15 Nov 2026 10:01:12 +0000
Manifest next update: Mon 16 Nov 2026 10:01:12 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: 0hp1k08hsmceblV1GC+Y071iqx9U/teYCyVIn/HZpIg=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:5c:26:78:77:7c:25:d7:86:c7:e3:58:18:9c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Nov 15 10:01:12 2026 GMT
Not After : Nov 16 10:01:12 2026 GMT
Subject: CN=47bb38b1e76e98e6c6d307a3f29da04fe8befa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:82:59:dd:50:a7:ab:f3:70:20:2a:1e:27:
aa:29:3f:d8:c5:1d:6c:45:c9:11:68:2a:41:92:f7:
3b:28:19:71:65:32:27:c0:33:36:e0:11:6c:97:08:
9e:20:46:1d:9d:e8:b6:2d:9d:d1:d4:af:44:af:26:
bf:9c:4e:f3:b4:3b:6c:33:db:a1:3d:d6:2f:07:1c:
d7:6c:f7:d8:ee:81:27:a0:6f:ba:f2:1e:1f:50:63:
88:48:53:4f:ae:fa:1f:b3:a9:e2:d9:1c:53:cd:4f:
b3:c6:c8:49:a8:63:84:56:fd:fb:65:b5:d6:fb:a9:
66:2a:f3:8a:f8:4e:61:58:aa:02:73:bb:4e:3e:44:
e9:db:7c:17:b1:28:25:02:45:15:9d:fd:f8:82:15:
7a:18:a5:e9:31:bf:36:02:0a:64:7d:14:f2:18:b2:
0e:e9:6f:6e:dd:46:d7:85:5e:20:84:89:1d:7d:af:
84:f8:b0:35:dd:f4:96:8a:a5:97:e2:1c:44:f1:46:
90:1d:2a:ff:12:86:ac:cb:4c:51:82:ce:8b:02:b4:
5b:80:aa:75:83:a6:44:8b:28:b1:f0:14:66:a5:31:
4a:ca:9a:85:7c:9f:2c:3f:15:f0:ab:4d:cf:83:26:
21:ad:87:ae:86:a0:bb:a2:79:2b:cc:d3:d9:8c:53:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:38:B1:E7:6E:98:E6:C6:D3:07:A3:F2:9D:A0:4F:E8:BE:FA:74
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:7b:b2:32:f0:78:a7:49:21:e0:60:9c:71:20:06:fb:07:
21:b3:3b:b3:11:80:0d:a6:47:4a:ba:96:45:94:ce:21:91:2b:
98:92:e7:4c:80:4e:cf:44:a1:12:d9:7c:08:98:48:76:23:b5:
15:ec:1d:d5:0a:49:a2:d7:30:9d:78:f4:62:77:98:4f:3d:7e:
73:af:4c:75:ed:a9:a1:f4:24:86:da:f8:b8:ed:03:f6:26:05:
7f:92:bd:b2:e1:a7:b9:8e:55:37:e3:81:93:62:68:66:20:75:
c7:e5:92:82:db:d2:71:77:a4:94:06:6c:11:b1:80:78:3a:c6:
6e:18:db:b3:d1:99:25:97:81:99:0c:dd:28:14:28:2f:5f:94:
a6:43:cc:63:5a:45:05:ad:af:f1:0a:b4:cd:3a:80:9e:34:4b:
ab:83:07:68:9f:dd:ad:3c:e3:d5:db:cb:9f:62:4b:6c:d0:bb:
70:32:00:b9:4f:20:7b:0c:42:17:6e:16:fb:30:1e:b8:5f:9d:
61:81:79:44:f1:4e:26:af:f4:03:dd:f8:5a:85:5a:cd:1d:2c:
68:ab:30:80:ca:a2:2f:24:af:c5:2f:ae:54:f2:06:86:15:c4:
d2:e5:c9:ac:82:66:fb:72:cb:ad:e5:b6:ae:7b:7f:82:72:03:
f6:3c:5f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep1wmeHd8JdeGx+NYGJxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjQ4NTA0YjU0NTU1YTk0NDNiMDJhMzNkMzUxYTkwMjg2
M2JiOTkwHhcNMjYxMTE1MTAwMTEyWhcNMjYxMTE2MTAwMTEyWjAzMTEwLwYDVQQD
Eyg0N2JiMzhiMWU3NmU5OGU2YzZkMzA3YTNmMjlkYTA0ZmU4YmVmYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznCCWd1Qp6vzcCAqHieqKT/YxR1s
RckRaCpBkvc7KBlxZTInwDM24BFslwieIEYdnei2LZ3R1K9Erya/nE7ztDtsM9uh
PdYvBxzXbPfY7oEnoG+68h4fUGOISFNPrvofs6ni2RxTzU+zxshJqGOEVv37ZbXW
+6lmKvOK+E5hWKoCc7tOPkTp23wXsSglAkUVnf34ghV6GKXpMb82AgpkfRTyGLIO
6W9u3UbXhV4ghIkdfa+E+LA13fSWiqWX4hxE8UaQHSr/Eoasy0xRgs6LArRbgKp1
g6ZEiyix8BRmpTFKypqFfJ8sPxXwq03PgyYhrYeuhqC7onkrzNPZjFM9MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe7OLHnbpjmxtMHo/KdoE/ovvp0MB8GA1UdIwQY
MBaAFAQkhQS1RVWpRDsCoz01GpAoY7uZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2Yt
NDcwMTVhNjA3N2IyLzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iOGJiMWEtYTg4ZS00YjJmLTk4N2YtNDcwMTVhNjA3N2Iy
LzEvQkNTRkJMVkZWYWxFT3dLalBUVWFrQ2hqdTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUx7sjLw
eKdJIeBgnHEgBvsHIbM7sxGADaZHSrqWRZTOIZErmJLnTIBOz0ShEtl8CJhIdiO1
Fewd1QpJotcwnXj0YneYTz1+c69Mde2pofQkhtr4uO0D9iYFf5K9suGnuY5VN+OB
k2JoZiB1x+WSgtvScXeklAZsEbGAeDrGbhjbs9GZJZeBmQzdKBQoL1+UpkPMY1pF
Ba2v8Qq0zTqAnjRLq4MHaJ/drTzj1dvLn2JLbNC7cDIAuU8gewxCF24W+zAeuF+d
YYF5RPFOJq/0A934WoVazR0saKswgMqiLySvxS+uVPIGhhXE0uXJrIJm+3LLreW2
rnt/gnID9jxf+Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:33:46 2026 by rpki-client