Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: 9gyfdCdEPWdq6AbNJ+6Bc/Bb9FlWJ7YKmz2q3tMkxTA=
Subject key identifier: 59:36:8B:95:2B:2F:27:98:00:10:78:75:14:68:89:51:01:8C:70:8F
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 019F2246AEDE55CA2E71468509E434D50285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 198D
Signing time: Thu 02 Jul 2026 10:01:25 +0000
Manifest this update: Thu 02 Jul 2026 10:01:25 +0000
Manifest next update: Fri 03 Jul 2026 10:01:25 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: uwkNX0PWr82cTXqQMLESDVoqlfSQKAxa/hskXL0w9r8=)
2: ZN4yF-e-6U6siCtfTnv-FW1OUx0.roa (hash: I9BYHq4fiuWBb+LO42h3XEWS7qzon5TJhCXafUyINuk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:46:ae:de:55:ca:2e:71:46:85:09:e4:34:d5:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Jul 2 10:01:25 2026 GMT
Not After : Jul 3 10:01:25 2026 GMT
Subject: CN=59368b952b2f27980010787514688951018c708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:63:b0:a0:48:43:0c:64:df:92:d7:41:73:
6e:35:f8:6c:35:a2:d9:de:1e:42:74:5c:3b:32:2c:
81:d2:f5:be:b1:63:f4:d8:ae:d1:77:fb:e3:b2:80:
5c:1d:54:e1:fc:eb:48:da:3e:ff:25:3c:9a:47:aa:
07:ca:b6:fa:00:d3:9c:42:61:85:8d:70:99:39:3e:
d7:19:33:8a:2c:ee:c3:72:35:e2:be:c0:de:10:79:
4a:a4:95:39:c8:55:a1:24:12:95:cc:9f:1c:bc:04:
e3:3d:0b:35:b8:37:bb:5d:9c:1f:9f:f2:f1:ae:84:
3f:79:60:ce:aa:7d:86:b5:9c:3d:c4:01:6f:de:43:
8a:5c:cd:19:20:78:58:11:c8:1d:ec:61:ad:e1:0a:
e9:90:a6:0c:c7:21:37:44:98:90:b9:b5:dc:cd:cd:
fe:b2:8b:24:fa:b9:46:41:0c:bc:68:fc:11:a9:59:
91:da:ab:51:55:f0:ed:63:82:cf:a7:5e:bc:b0:1c:
61:e4:d4:63:e0:95:56:40:22:7d:db:fb:20:41:32:
51:02:ec:49:67:8b:51:fe:0e:87:e7:ec:87:c0:f2:
4a:3b:a5:6b:3b:0c:75:4d:4d:6e:0a:ed:33:46:1e:
93:3b:75:7a:f0:6d:dc:1b:31:66:d7:5f:3d:52:89:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:8B:95:2B:2F:27:98:00:10:78:75:14:68:89:51:01:8C:70:8F
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:26:d6:ba:9d:86:a8:e3:68:95:ef:15:bd:49:c4:b2:0c:
63:da:bb:f6:fb:2f:e5:fc:95:01:88:19:25:55:c3:ad:47:3a:
48:13:35:b5:44:ab:1c:b7:e0:59:4d:3f:c1:c8:84:f8:d1:84:
8a:5d:95:d8:1f:84:c0:3f:95:26:70:0c:89:6a:16:f2:1e:0d:
2e:5c:a4:d6:54:e3:f4:93:5a:68:7e:dc:c0:85:57:2b:bd:17:
1a:e3:48:bd:e9:a4:5a:48:0a:ac:6c:74:f6:50:2a:b9:8e:fd:
40:ef:3a:84:55:ee:c1:5c:42:d8:30:e0:a5:a4:76:f5:03:7c:
d6:26:bd:41:5b:95:21:29:1b:71:fa:22:85:d7:d5:e4:be:55:
c2:25:d0:74:82:e5:45:00:d0:da:3a:e3:56:c7:ca:06:3d:bf:
9e:51:74:f4:fe:d8:96:49:54:9f:61:9d:58:d1:2f:bd:14:ee:
4d:55:f0:74:7a:01:a3:1d:77:d8:e7:9e:59:f6:0d:ba:a7:38:
e6:92:52:9a:39:a2:33:8a:cd:da:5f:68:3c:a7:61:df:3e:2c:
b3:e6:a6:93:6e:7f:4b:16:ba:6f:de:88:45:48:20:59:21:59:
62:6b:f8:09:28:62:24:c4:98:c7:49:c7:3e:4a:1f:44:96:3d:
fe:d2:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:50 2026 by rpki-client