Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: RgJGIO6fmTE0y3vKSVnKpdgVQVuO0NriKnHOB+8n920=
Subject key identifier: 32:B3:4A:CA:E6:DB:66:BD:24:A8:A4:3B:B6:30:D9:76:EE:29:09:9C
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 019F236995BAB6C2679CA12914D1F87ED617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 198F
Signing time: Thu 02 Jul 2026 15:19:09 +0000
Manifest this update: Thu 02 Jul 2026 15:19:09 +0000
Manifest next update: Fri 03 Jul 2026 15:19:09 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: J4nN6G6mMQMQVh+h8OPWV/4UZubcNwyAkpv4aB+6vD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:95:ba:b6:c2:67:9c:a1:29:14:d1:f8:7e:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jul 2 15:19:09 2026 GMT
Not After : Jul 3 15:19:09 2026 GMT
Subject: CN=32b34acae6db66bd24a8a43bb630d976ee29099c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:5b:76:70:6c:eb:2f:0f:fe:f7:0d:b9:f1:
b2:c6:ff:c5:07:5e:a3:59:8a:4f:85:db:2b:33:0c:
35:3b:8a:fc:f8:aa:fa:d0:62:bc:5a:7d:b1:2a:ea:
23:06:80:d2:12:48:c1:d6:16:8c:ea:3f:cd:47:8b:
08:26:53:49:34:43:46:dd:d2:85:08:c7:99:21:57:
7e:19:29:e3:47:29:43:91:82:4d:a0:69:0f:a0:46:
e3:cf:ac:ce:03:e3:37:02:4c:07:52:cb:9a:83:b3:
87:ae:cb:91:82:5f:05:a5:89:c0:47:80:b5:a2:b4:
18:65:49:42:ea:b6:86:88:11:bf:bc:6b:61:19:fe:
e2:77:d8:4e:ef:12:49:82:90:d2:d2:e7:02:67:0a:
ad:c9:e2:63:57:a5:20:2a:cd:34:36:70:95:9e:af:
0e:29:86:c8:b5:74:e3:1a:8c:8e:3d:be:2c:bc:66:
7b:f9:f6:2d:31:08:1b:6f:80:26:52:1a:a5:a8:f0:
0b:98:70:1b:b2:3d:fe:57:8e:f2:ff:fd:7b:99:e7:
a8:24:be:c0:28:70:9a:f4:51:f3:65:2e:84:e1:b7:
7e:85:bb:1b:c5:5c:95:d7:ff:b5:4c:36:d5:4b:f6:
20:fb:09:99:95:bb:4f:a4:bb:67:1f:f0:71:0e:ea:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:4A:CA:E6:DB:66:BD:24:A8:A4:3B:B6:30:D9:76:EE:29:09:9C
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ba:f1:1a:13:15:66:a4:21:a0:f9:ee:8c:fb:09:1e:bb:77:
58:f7:ae:94:7d:db:48:cf:46:51:b4:15:1c:c9:33:cf:9c:7d:
ee:97:ca:8b:a8:ca:1f:e6:a9:be:ef:5c:48:f8:e1:4d:ea:7d:
7c:fa:5f:65:c2:38:4b:d2:25:8a:c0:f7:f7:cf:ba:7f:f1:c7:
7b:47:87:bc:b8:5c:a3:65:05:13:33:31:da:b9:9e:c2:a2:a3:
9a:9b:8c:1a:9c:1f:ef:0e:3f:44:43:d9:48:d4:20:ae:8e:97:
b3:13:29:a8:73:57:2f:fa:02:ff:1e:fe:00:92:bb:37:0d:ba:
a3:fb:05:70:62:d3:57:d3:95:b0:d1:56:bf:7e:c8:fd:bc:53:
a4:3c:e1:c9:d5:77:f9:cf:c1:15:2d:d4:da:11:ab:6b:8f:e0:
56:4e:df:9c:2f:c2:93:04:36:fe:7c:56:16:26:f8:60:49:35:
ec:bd:48:f1:73:ff:1b:46:58:35:cc:60:56:e8:a3:d7:e7:78:
a9:77:b9:64:25:bf:af:ea:87:c0:b4:69:97:fd:9b:ec:ec:19:
55:52:3b:e6:f5:e8:e8:6c:b9:a2:97:60:15:6b:f8:f6:2a:f1:
8c:6a:27:64:08:b9:62:79:e5:ff:bd:0a:00:52:c1:20:f6:a4:
3f:dc:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:07 2026 by rpki-client