Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: R+7c3Dh+yX9Jm5I6VuFiVjihgh/jwz7/D9+/OwEO5lk=
Subject key identifier: 62:6E:6E:63:E9:BF:6A:0F:82:E2:4F:E1:22:2C:2D:70:F4:8F:CA:F5
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 019D27A8D2103821CAF1147803872F2AF994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:08 +0000
Manifest this update: Thu 26 Mar 2026 01:01:08 +0000
Manifest next update: Fri 27 Mar 2026 01:01:08 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: jpJ/HRMyjAgMnzPItZRDoTsWKNicYLb5r/zxjfv4GiA=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d2:10:38:21:ca:f1:14:78:03:87:2f:2a:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Mar 26 01:01:08 2026 GMT
Not After : Mar 27 01:01:08 2026 GMT
Subject: CN=626e6e63e9bf6a0f82e24fe1222c2d70f48fcaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:bb:b7:b1:7b:91:6e:9c:7c:58:b9:0c:8e:
65:58:db:43:d6:67:4b:c0:51:a8:66:2b:d6:7e:dc:
6f:bd:51:64:60:0d:9f:cd:50:49:7a:70:ab:c2:f4:
9e:c6:b8:5a:a0:41:c9:13:eb:35:2e:ec:1b:11:41:
b1:b4:6a:db:c5:90:09:20:a2:48:00:f6:f0:e9:37:
54:85:30:43:16:35:da:51:b5:52:5d:7d:54:7d:d6:
76:58:55:8a:6d:61:bd:ce:2a:97:93:cd:fc:65:0e:
4c:50:db:0c:ac:1b:6e:69:d1:f1:23:94:10:da:52:
02:77:06:ee:ba:98:1b:87:29:0e:fc:13:f1:34:dd:
ee:66:35:fd:2f:33:4f:76:56:f0:76:ae:f7:94:71:
41:86:d2:b1:a5:ee:2f:1b:fe:73:b0:24:0f:fc:4d:
9c:85:be:a2:f8:8d:7f:42:a3:95:a4:37:fb:91:8d:
03:ec:36:1e:2d:aa:81:fe:89:1e:67:c9:e1:c4:d8:
98:b6:ce:5e:36:e7:f4:60:de:6b:26:aa:14:82:79:
05:8d:f8:93:e9:9a:2a:c4:7a:a3:b2:d8:7e:32:75:
91:33:a2:84:66:bf:64:b4:05:c2:2e:9a:55:b7:7b:
f8:15:40:ae:6a:60:96:45:f4:7d:83:a6:c7:e0:55:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:6E:63:E9:BF:6A:0F:82:E2:4F:E1:22:2C:2D:70:F4:8F:CA:F5
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:54:37:8d:91:fb:8b:37:d3:06:4b:56:e9:15:6f:be:5c:0e:
3a:38:84:58:c4:dc:6d:6c:9a:1a:cf:78:9f:62:1b:c6:9a:9a:
2e:5a:97:63:aa:9c:24:a9:66:b2:4e:ff:36:49:5f:6c:f0:44:
20:06:b2:15:1c:3f:cf:6b:d2:df:5e:fc:f8:43:2c:17:0c:8a:
f1:f4:ca:b4:64:8b:7a:ae:78:73:90:7e:07:24:82:01:00:10:
73:c2:7c:95:99:26:67:6d:fd:f4:29:8f:5d:ec:68:b2:30:27:
76:7d:3a:a8:d5:2a:fb:b6:e9:a6:0f:22:8a:20:9b:0b:73:db:
b2:09:8c:1e:54:3d:e7:be:1f:47:15:a9:42:fb:94:35:a9:8e:
ea:f8:5d:80:55:2b:a6:5f:43:dc:8a:a3:79:fb:f1:93:df:7f:
33:3c:33:08:93:7c:08:51:a0:b6:f6:02:d6:d0:93:48:1c:25:
f3:36:af:99:98:33:3c:7c:79:91:9a:a1:00:88:ce:b4:a6:b2:
6d:6b:55:ce:24:bb:9d:70:50:3a:98:c7:2c:c5:0e:83:e3:f4:
92:fd:e8:3d:a5:57:49:7b:f2:4d:94:c7:cc:90:fa:15:f4:87:
34:cd:4c:86:47:f9:e0:17:01:c9:c5:10:52:3a:7f:92:96:d8:
ae:6d:c7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:13 2026 by rpki-client