Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: 5K/bevfhhUKFhRcQyaedtKhjTx35MpR6vf5W3nxO4/E=
Subject key identifier: 25:92:11:57:63:95:DA:6D:2D:B7:EF:FD:DB:41:78:54:E0:DB:B6:B5
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 019F236A58650CBFBC8E9A8C5C4842F6DFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 1384
Signing time: Thu 02 Jul 2026 15:19:59 +0000
Manifest this update: Thu 02 Jul 2026 15:19:59 +0000
Manifest next update: Fri 03 Jul 2026 15:19:59 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: VWgUE9OQXa5zKECGhAY8EnhDWL94WQXpkpfoqH+8zOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:58:65:0c:bf:bc:8e:9a:8c:5c:48:42:f6:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Jul 2 15:19:59 2026 GMT
Not After : Jul 3 15:19:59 2026 GMT
Subject: CN=259211576395da6d2db7effddb417854e0dbb6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:80:2f:ef:f3:2b:37:84:99:17:0d:13:ab:f3:
28:cb:96:47:0f:b4:8e:f5:88:1a:d8:18:3b:0a:bc:
c5:c8:f7:9a:b5:97:b0:2d:63:dc:c1:17:2c:8a:32:
f2:99:41:da:7b:14:98:db:03:93:d9:21:63:a4:6f:
01:aa:8c:80:b7:37:90:9f:b4:8d:f0:c1:5f:5f:bb:
47:b1:9d:ff:d1:7c:4b:3a:9a:ff:e4:38:9a:4c:c8:
15:2c:83:14:a2:dd:f3:e3:df:d1:78:c3:ce:71:45:
84:0c:f0:26:52:db:29:ac:7a:c6:5c:5b:59:ca:04:
91:c7:8f:e0:9a:15:07:43:08:93:62:68:e8:b1:46:
5f:ac:d0:77:b3:0d:86:f6:1f:d3:64:65:66:52:9a:
fe:61:84:7a:8c:33:0f:5f:1d:e4:ea:f6:b8:8f:c9:
fe:ea:84:ad:72:df:a6:f3:77:24:64:d7:bf:26:e7:
9f:27:57:94:9c:6b:0f:4f:2b:92:ef:bf:a8:fc:e1:
43:56:81:88:14:90:6e:3a:75:f5:03:75:92:77:b0:
64:4b:3b:47:64:90:15:be:da:81:22:1c:12:e4:dd:
8a:14:49:40:7d:e6:da:02:4e:a1:56:42:b7:c0:ce:
8f:b4:b2:87:0b:63:44:e0:8c:f5:23:8b:3d:cf:92:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:11:57:63:95:DA:6D:2D:B7:EF:FD:DB:41:78:54:E0:DB:B6:B5
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:7f:36:ef:31:46:91:9b:2f:91:50:70:ee:5e:af:32:aa:
59:98:e7:aa:40:61:b3:42:c2:f7:f2:9a:0f:e9:90:a1:42:3f:
8b:24:af:87:f1:40:5d:58:54:cc:f5:71:34:b5:41:32:be:bc:
8a:93:1c:10:81:8a:2f:ad:15:ab:cb:50:31:68:99:51:8d:cd:
6c:d8:9e:8c:a8:e4:f1:fd:42:40:b2:ad:35:e1:11:cc:34:9c:
6a:00:85:e2:82:ac:ef:2a:34:5c:74:a8:b6:d4:e4:25:4e:7e:
09:d3:24:eb:fc:12:37:2b:32:ae:28:67:92:14:f4:c2:c3:cd:
c4:53:b4:11:36:5f:d0:e0:76:87:25:12:9e:29:b7:65:a5:d0:
eb:bd:67:2e:ca:2f:99:97:6d:8d:70:c3:37:61:cc:97:00:bb:
05:6a:3d:50:92:8a:1e:52:d0:8c:9f:27:71:72:36:a4:50:99:
66:73:93:7b:c3:75:86:2c:8d:b8:4f:a9:e9:e5:a3:f7:0d:cd:
a4:e5:6c:11:86:37:f5:4b:8c:09:e3:e3:95:33:fe:c5:af:a1:
c9:c7:6e:46:3f:23:3b:21:74:17:6e:49:d8:c8:d1:dd:8c:b0:
9d:c9:c9:cf:5a:7b:ea:d4:42:ee:a9:dd:84:85:17:f7:f4:5b:
d4:99:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:07 2026 by rpki-client