Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: fUSdYRdRrFxgw2UAvbkVXwrGB7qhjvNlZIVT3nHNbnI=
Subject key identifier: C2:8D:70:BD:A1:F2:99:9B:2C:6E:B0:D6:F0:EE:EF:61:00:52:79:0E
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019F2369F071038AA09ECE8AEA67E4EE0D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 18B3
Signing time: Thu 02 Jul 2026 15:19:33 +0000
Manifest this update: Thu 02 Jul 2026 15:19:33 +0000
Manifest next update: Fri 03 Jul 2026 15:19:33 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: 2QAGG/OO7/LmGHmm8KRRBeTRHtbQJsdjn5RqgFWYqa4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:f0:71:03:8a:a0:9e:ce:8a:ea:67:e4:ee:0d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Jul 2 15:19:33 2026 GMT
Not After : Jul 3 15:19:33 2026 GMT
Subject: CN=c28d70bda1f2999b2c6eb0d6f0eeef610052790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:21:6d:60:76:ec:28:a5:c2:60:ba:7e:21:35:
3b:21:90:5f:41:cb:95:ff:cd:f9:67:fd:6d:33:25:
21:42:55:1b:9a:72:d8:76:d0:85:fd:fe:bc:54:77:
60:8a:3d:40:d2:28:69:83:53:1d:ef:e0:91:11:a8:
3b:a3:76:a5:57:91:42:54:a9:43:8b:7b:68:64:bc:
2b:7d:ae:7a:9e:e8:7c:fb:ba:7c:f1:5d:bf:23:27:
86:56:40:2b:75:0e:e4:1a:46:42:9f:91:e9:12:81:
16:f8:da:07:58:d9:1e:78:f3:cc:a6:4c:30:a3:98:
2b:fc:89:52:55:ee:2a:fe:d9:c6:e0:ef:ea:66:88:
38:68:a2:bd:79:bb:71:82:07:9f:9e:e8:da:4b:3a:
49:67:2d:4f:2f:ad:88:66:db:0f:99:47:af:f8:37:
95:e3:1e:5d:a6:c5:25:28:9b:69:d0:97:1f:2c:bc:
53:31:3f:57:04:7d:b8:6b:71:70:98:d6:d2:54:b8:
f6:4b:1b:02:e1:d6:c1:a2:77:5e:c0:e5:19:39:dc:
4b:d3:38:b3:67:5f:f7:a7:07:a7:f6:a4:ec:1c:61:
1e:1b:93:16:b3:99:72:7a:b0:bf:1c:f7:35:a9:e0:
b9:70:48:79:f1:08:76:7b:02:6e:09:8c:60:27:87:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8D:70:BD:A1:F2:99:9B:2C:6E:B0:D6:F0:EE:EF:61:00:52:79:0E
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1c:ac:77:b0:52:9c:ca:1d:26:49:fe:3c:ae:7b:34:ae:84:
15:2f:63:58:42:8b:6c:74:e9:ef:13:a6:b7:21:c3:fe:be:56:
28:b8:65:68:a4:27:02:ed:3e:d4:2e:fb:42:d3:a8:84:d9:66:
6f:3e:b4:0c:97:65:ff:f5:93:b0:85:cf:ee:1c:4f:bd:da:f6:
f2:38:41:f4:06:75:1e:00:df:06:a2:f4:10:2d:81:71:fe:b4:
ff:6d:3a:c9:e9:7f:a7:f4:0f:06:68:52:8a:10:6a:9a:11:8c:
55:c7:fa:f0:e8:aa:6d:e9:18:31:31:50:f9:93:52:af:ff:62:
13:76:ec:97:7a:6a:0e:2f:14:24:4e:59:cf:d7:c1:a9:72:06:
67:46:8e:73:4c:79:b0:c7:55:a6:5f:f0:36:c8:23:3d:7f:3d:
ea:43:37:a8:eb:23:65:d7:24:7a:54:c9:fc:29:19:ad:ef:68:
59:b6:23:18:8f:22:89:4d:01:ca:3e:4d:ab:c3:31:5f:63:4c:
77:db:df:65:b4:36:46:8e:43:df:b7:4d:ad:71:fa:17:9c:ca:
17:59:c1:f4:c9:25:5c:4f:74:05:88:30:b6:f9:ac:2e:6b:51:
00:99:c2:49:96:89:7e:0a:68:b6:96:f5:ef:08:4e:1c:0b:30:
ce:b0:b7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jafBxA4qgns6K6mfk7g0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjM2OWUyNzA1Y2I0MzNkYjA2NThhYjY2NmQwOGI2N2Ix
NTUxZGMwHhcNMjYwNzAyMTUxOTMzWhcNMjYwNzAzMTUxOTMzWjAzMTEwLwYDVQQD
EyhjMjhkNzBiZGExZjI5OTliMmM2ZWIwZDZmMGVlZWY2MTAwNTI3OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iFtYHbsKKXCYLp+ITU7IZBfQcuV
/835Z/1tMyUhQlUbmnLYdtCF/f68VHdgij1A0ihpg1Md7+CREag7o3alV5FCVKlD
i3toZLwrfa56nuh8+7p88V2/IyeGVkArdQ7kGkZCn5HpEoEW+NoHWNkeePPMpkww
o5gr/IlSVe4q/tnG4O/qZog4aKK9ebtxggefnujaSzpJZy1PL62IZtsPmUev+DeV
4x5dpsUlKJtp0JcfLLxTMT9XBH24a3FwmNbSVLj2SxsC4dbBondewOUZOdxL0ziz
Z1/3pwen9qTsHGEeG5MWs5lyerC/HPc1qeC5cEh58Qh2ewJuCYxgJ4fd9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKNcL2h8pmbLG6w1vDu72EAUnkOMB8GA1UdIwQY
MBaAFAZjaeJwXLQz2wZYq2ZtCLZ7FVHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAt
MzRhOWU5OGE1Zjg2LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC82NGU0OWEtNWZlMS00NWMyLTgzMTAtMzRhOWU5OGE1Zjg2
LzEvQm1OcDRuQmN0RFBiQmxpclptMEl0bnNWVWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhysd7BS
nModJkn+PK57NK6EFS9jWEKLbHTp7xOmtyHD/r5WKLhlaKQnAu0+1C77QtOohNlm
bz60DJdl//WTsIXP7hxPvdr28jhB9AZ1HgDfBqL0EC2Bcf60/206yel/p/QPBmhS
ihBqmhGMVcf68OiqbekYMTFQ+ZNSr/9iE3bsl3pqDi8UJE5Zz9fBqXIGZ0aOc0x5
sMdVpl/wNsgjPX896kM3qOsjZdckelTJ/CkZre9oWbYjGI8iiU0Byj5Nq8MxX2NM
d9vfZbQ2Ro5D37dNrXH6F5zKF1nB9MklXE90BYgwtvmsLmtRAJnCSZaJfgpotpb1
7whOHAswzrC3lA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:55 2026 by rpki-client