Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: dnhZmS96v93Tq2caTMThHzLoqVtTopl/tqnD2a7aj/4=
Subject key identifier: B3:9C:BB:2C:62:44:61:42:86:C9:10:5B:15:3F:F2:2E:C5:DF:58:20
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 019F22EBC6161C71A3B3122CDF2014941302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 06B7
Signing time: Thu 02 Jul 2026 13:01:44 +0000
Manifest this update: Thu 02 Jul 2026 13:01:44 +0000
Manifest next update: Fri 03 Jul 2026 13:01:44 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: Y8vERqtAttvjW0bqq3VqYU6GVN7u1xZWHqeWxIEzy9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:eb:c6:16:1c:71:a3:b3:12:2c:df:20:14:94:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Jul 2 13:01:44 2026 GMT
Not After : Jul 3 13:01:44 2026 GMT
Subject: CN=b39cbb2c6244614286c9105b153ff22ec5df5820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:67:14:16:ca:5f:9f:b6:f7:d1:f0:c8:50:
7b:db:e2:73:55:da:e4:65:cd:1c:b9:1f:c6:0e:7e:
66:8e:1e:77:bf:20:c8:d1:97:a4:89:b0:a3:1c:75:
dd:46:87:68:ee:60:f6:3b:8b:db:7f:86:63:1d:75:
2a:27:da:f2:b0:f2:4a:99:b2:a2:e8:61:07:19:9c:
ff:23:58:37:3f:f2:c3:b5:08:d6:77:ef:7a:0e:31:
d6:3d:e0:1b:ba:20:75:21:96:b4:9d:d3:3e:45:8e:
82:47:2a:64:4f:f2:c9:1b:6d:af:20:63:a0:8e:40:
49:b2:33:d9:c1:b5:a4:7a:fa:1e:fe:c3:ad:6c:b4:
cb:8d:ac:1e:2b:19:66:f1:e3:65:53:38:5e:9d:be:
a0:63:e4:7a:df:70:be:32:42:87:7c:f9:6a:61:64:
a5:64:fd:25:8f:77:11:4b:7b:4f:65:c7:3b:ae:0d:
9b:09:d7:0f:ac:36:85:2e:26:66:0a:99:5f:11:00:
83:a8:ec:bf:cc:4a:ea:11:fb:c0:04:19:38:2b:aa:
05:f1:f4:56:4f:1f:c0:07:51:dc:18:f0:f0:8d:80:
59:8c:69:73:ff:52:44:58:ad:1e:ff:1d:e9:aa:db:
2b:7f:e2:c0:eb:c5:71:c6:9e:dc:4d:de:7c:0c:a1:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9C:BB:2C:62:44:61:42:86:C9:10:5B:15:3F:F2:2E:C5:DF:58:20
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d0:91:73:fc:bb:39:dc:80:5c:23:da:df:29:59:4b:fb:2a:
0f:cb:10:34:3d:39:b3:db:b0:ec:cf:11:27:82:6b:4e:7c:6c:
8e:9c:b9:fd:e8:f9:23:60:63:40:2e:cd:94:a6:b3:2a:b0:bb:
d0:fa:b0:b9:ab:88:90:2f:75:cf:4b:73:a0:e1:f0:c5:02:8b:
e0:b1:1a:b9:ce:d6:a4:9e:96:16:a2:d9:1a:bd:a1:75:04:03:
6a:37:56:c6:18:37:10:ce:1e:9e:63:ef:65:92:99:5b:4c:00:
79:75:59:28:5a:14:dc:44:d5:c6:55:75:c7:41:cf:75:9d:ee:
75:32:aa:3f:04:24:c1:30:60:56:71:73:d1:f1:db:79:fe:35:
c1:4c:7f:3f:a7:14:bc:a0:52:2a:39:1a:aa:54:fb:34:54:b3:
ca:ed:e8:4a:d6:7e:45:e2:36:d5:19:e3:3a:a5:1f:55:d0:5f:
d9:e3:66:93:3c:39:fa:57:45:16:db:51:8a:0c:ee:75:c5:18:
a3:9f:b3:cd:d1:44:9c:be:cb:c6:45:7f:ff:23:43:0a:09:ad:
f0:3f:46:66:60:66:96:ce:70:e5:0e:3a:75:bc:63:27:08:4f:
bc:b3:c3:67:ea:c5:f1:b8:c0:bb:94:25:ae:f9:8b:b4:9e:ed:
0b:78:69:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:21 2026 by rpki-client