Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: LF8x6ccYO0ErYDjM2dEqHQ6OYXF5lJJYVdWu6z2+qOA=
Subject key identifier: 16:D9:01:8A:5E:FC:61:8D:A1:7A:92:FF:FB:75:C7:B3:FE:CE:77:4A
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 019E1CEB9956D04C483E59315B8D5996F611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 16:01:02 +0000
Manifest this update: Tue 12 May 2026 16:01:02 +0000
Manifest next update: Wed 13 May 2026 16:01:02 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: xmUVc8/0GPzmIzlFcOboDCr112mrMHEZKI2qN//iENQ=)
2: dfr7uobX_w4lQ4i9yNjUHYWp4ow.roa (hash: M74uU1K2KPG63rDAm5lv4SwVTXIBc7q05CCX0TzlAgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:99:56:d0:4c:48:3e:59:31:5b:8d:59:96:f6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: May 12 16:01:02 2026 GMT
Not After : May 13 16:01:02 2026 GMT
Subject: CN=16d9018a5efc618da17a92fffb75c7b3fece774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:dc:60:fd:dd:fc:a0:79:ce:9e:e1:9b:a9:
1e:c8:29:59:84:44:18:86:2f:ea:9f:08:67:90:ac:
4a:d2:0f:86:44:5a:ab:1f:7f:3d:10:5a:02:2b:fa:
dc:20:19:f2:ae:98:b3:96:28:43:c5:83:36:fc:59:
4f:98:ad:c8:80:66:a4:63:ff:df:c2:b1:e6:1e:26:
95:15:f9:c1:19:a2:9f:0e:88:d4:f4:bc:de:1e:d9:
32:f6:b7:98:1c:2c:33:91:d1:43:ae:f7:b1:e2:c3:
cd:bd:7f:c9:60:7c:83:db:1d:ee:29:a7:59:78:74:
a9:00:67:72:ed:cd:a9:be:66:73:a4:08:27:78:19:
e2:64:dd:25:1d:db:e8:d2:e4:27:a0:76:ec:56:4c:
f8:1e:be:d6:85:4c:ea:b7:d0:c3:3c:79:60:73:76:
09:aa:12:87:de:b6:96:af:d6:fd:9a:c9:e4:de:f0:
4e:ad:b0:ee:4f:5e:22:4f:4a:bb:bc:0d:ad:51:f0:
ed:ec:e3:5c:6b:f3:17:21:f9:0f:8c:bd:d6:60:c3:
9a:47:2c:3d:e3:af:e7:c2:7c:b1:63:b7:d9:35:77:
f6:f4:8f:6e:99:da:e1:01:42:be:4d:ad:76:cb:6a:
c2:13:7c:57:22:b7:10:41:94:be:83:51:4b:38:cb:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:01:8A:5E:FC:61:8D:A1:7A:92:FF:FB:75:C7:B3:FE:CE:77:4A
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0f:39:2c:87:5a:6a:96:9c:c6:ac:ea:d7:5f:eb:6b:c6:85:
b4:05:a2:af:71:25:22:31:39:fb:a7:36:2e:80:41:16:d5:60:
5f:4a:57:7e:0f:19:e5:fa:42:42:62:d1:1c:4f:88:60:a3:65:
54:4d:36:34:3d:e2:34:26:1d:47:d0:82:e0:b1:11:6b:0e:ec:
55:d6:dd:74:47:68:d3:84:5d:a7:29:71:0a:66:98:1e:1c:2d:
eb:dd:85:44:bc:82:2a:c5:b8:d6:b5:16:77:88:58:4d:b3:32:
1c:32:4b:74:ee:46:4e:95:ca:13:33:0b:44:75:10:6c:a6:10:
bd:38:c3:85:40:fb:5f:53:5b:22:5e:22:af:47:ec:cd:dc:2e:
b0:60:37:43:b9:f3:c4:22:39:2f:5c:92:8e:c1:97:46:5b:b5:
59:79:d2:db:6e:73:74:48:3b:e6:62:de:99:c4:81:9c:ba:71:
f6:2f:48:e8:c4:fc:1a:6e:e6:2f:d1:c1:d1:18:27:4a:05:04:
a3:53:e3:51:36:09:f6:ab:10:64:19:a5:11:59:31:f3:57:06:
b5:10:58:87:6c:93:a7:7b:0b:71:e7:c0:54:90:35:10:e2:38:
97:94:12:ed:1c:8b:5c:00:b9:10:f7:ef:69:21:14:54:44:17:
51:5e:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:02 2026 by rpki-client