Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier: bRN+ZGUB5pUN4jqryyieWhnHIBpme6ZJOh145LuWtwQ=
Subject key identifier: DE:67:FE:58:F6:A7:E5:49:8B:16:38:5F:A9:84:FC:41:B5:7F:AA:7E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019F2369E209D63374C966AFAEB092FE5871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number: 1543
Signing time: Thu 02 Jul 2026 15:19:29 +0000
Manifest this update: Thu 02 Jul 2026 15:19:29 +0000
Manifest next update: Fri 03 Jul 2026 15:19:29 +0000
Files and hashes: 1: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: sHXz/LtKibAPM+S9Fb5f88+Q2oieYiUewVEQqtCDrZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:e2:09:d6:33:74:c9:66:af:ae:b0:92:fe:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 2 15:19:29 2026 GMT
Not After : Jul 3 15:19:29 2026 GMT
Subject: CN=de67fe58f6a7e5498b16385fa984fc41b57faa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:f2:b1:e1:84:46:bb:5c:fc:1f:f0:07:98:
de:de:69:49:c3:30:96:27:32:cd:e3:8c:89:55:53:
8a:09:96:6e:e3:33:ec:89:cb:bd:cd:ce:e8:14:2d:
65:d4:2f:b0:0f:78:96:c3:ba:76:67:21:4c:99:92:
17:84:d0:a2:fa:c8:b3:d7:cc:b3:68:bf:ec:57:c2:
11:8d:0f:e6:a7:76:ab:10:1e:ba:e5:74:58:60:36:
09:58:e3:56:8d:87:5c:e3:52:70:e4:43:1d:9a:b5:
9a:d9:5e:01:5f:f6:e4:16:63:9b:59:95:10:43:77:
d3:52:76:f0:a7:2f:02:8c:ce:2f:02:75:e9:ad:a1:
cc:1a:2f:b3:8c:93:f5:a5:20:1b:30:9d:ed:9b:37:
b8:39:24:2d:33:02:62:58:45:dd:b9:1b:54:88:c7:
86:72:d7:de:c3:7a:85:66:15:84:46:72:52:cd:20:
d6:44:23:c4:9a:f6:4d:80:2d:39:f2:6b:6d:40:f9:
46:14:69:25:7b:08:1d:ac:64:35:f0:c6:e5:c9:0c:
f5:10:c8:45:14:78:d5:7f:11:c3:d8:7c:d3:81:a1:
d8:85:1d:2f:9e:83:4c:eb:5e:bb:20:cf:49:7a:13:
3c:66:36:7f:c0:14:f4:58:d0:fc:66:d5:9f:3d:0b:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:FE:58:F6:A7:E5:49:8B:16:38:5F:A9:84:FC:41:B5:7F:AA:7E
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:92:f9:48:af:6d:7c:6f:71:0f:7d:a1:e1:97:57:66:b3:7c:
8c:95:f4:ce:e6:b5:ef:24:d0:95:de:e9:0f:c3:2b:82:29:1e:
8d:a9:0c:22:6f:f2:d0:bf:65:ef:62:a1:2f:99:2b:5b:85:60:
63:78:8e:eb:61:50:79:d7:27:6f:20:76:e0:a7:72:78:24:ba:
b1:1a:54:5e:b1:d5:c3:98:f0:7e:f0:77:c7:9d:63:49:57:c6:
d2:73:22:a3:f8:f3:c1:66:a9:71:62:a7:8d:a9:b9:d2:0e:f4:
da:66:f8:e7:64:66:7d:c4:f6:4a:b3:4d:73:b3:1f:1d:72:80:
2b:4a:ee:a2:ed:6f:7a:48:22:a4:99:d2:67:12:22:3a:3b:b5:
ec:e0:98:3b:eb:d4:b3:a8:68:45:77:c3:79:ad:65:98:c4:2c:
22:6f:b3:3a:8c:8a:8c:22:a3:40:7f:6b:6d:ae:66:e0:32:91:
18:30:9f:cb:dc:81:d9:44:a4:67:c7:66:c8:e8:7b:b7:07:41:
91:b8:cc:50:6d:f5:8b:00:6b:14:97:18:19:fd:f0:93:0e:fc:
4e:18:ff:49:64:c9:c3:bd:a6:08:0d:6a:8f:87:c5:74:16:e6:
66:0e:21:2a:a8:a0:28:9b:02:81:d2:fe:54:bd:34:41:3f:62:
e4:eb:25:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaeIJ1jN0yWavrrCS/lhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwNzAyMTUxOTI5WhcNMjYwNzAzMTUxOTI5WjAzMTEwLwYDVQQD
EyhkZTY3ZmU1OGY2YTdlNTQ5OGIxNjM4NWZhOTg0ZmM0MWI1N2ZhYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojyseGERrtc/B/wB5je3mlJwzCW
JzLN44yJVVOKCZZu4zPsicu9zc7oFC1l1C+wD3iWw7p2ZyFMmZIXhNCi+siz18yz
aL/sV8IRjQ/mp3arEB665XRYYDYJWONWjYdc41Jw5EMdmrWa2V4BX/bkFmObWZUQ
Q3fTUnbwpy8CjM4vAnXpraHMGi+zjJP1pSAbMJ3tmze4OSQtMwJiWEXduRtUiMeG
ctfew3qFZhWERnJSzSDWRCPEmvZNgC058mttQPlGFGklewgdrGQ18MblyQz1EMhF
FHjVfxHD2HzTgaHYhR0vnoNM6167IM9JehM8ZjZ/wBT0WND8ZtWfPQs7uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5n/lj2p+VJixY4X6mE/EG1f6p+MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJL5SK9t
fG9xD32h4ZdXZrN8jJX0zua17yTQld7pD8MrgikejakMIm/y0L9l72KhL5krW4Vg
Y3iO62FQedcnbyB24KdyeCS6sRpUXrHVw5jwfvB3x51jSVfG0nMio/jzwWapcWKn
jam50g702mb452RmfcT2SrNNc7MfHXKAK0ruou1vekgipJnSZxIiOju17OCYO+vU
s6hoRXfDea1lmMQsIm+zOoyKjCKjQH9rba5m4DKRGDCfy9yB2USkZ8dmyOh7twdB
kbjMUG31iwBrFJcYGf3wkw78Thj/SWTJw72mCA1qj4fFdBbmZg4hKqigKJsCgdL+
VL00QT9i5OslHw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:22 2026 by rpki-client