Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: WhbvWQHm4XZKP83SflpQH7qU3v9NAbrsAY9u4zcYnNQ=
Subject key identifier: 80:08:2D:BC:C9:B3:2B:CF:BD:D8:CA:A9:AA:18:FA:9D:B2:3A:17:9B
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 019F22EC1B5010F9DC4DBF28C93164EB7DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 0CEC
Signing time: Thu 02 Jul 2026 13:02:06 +0000
Manifest this update: Thu 02 Jul 2026 13:02:06 +0000
Manifest next update: Fri 03 Jul 2026 13:02:06 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: MWyjFPU9V62L1LyX7geigMGilmEoq3veKq/KfeVrceE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:ec:1b:50:10:f9:dc:4d:bf:28:c9:31:64:eb:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Jul 2 13:02:06 2026 GMT
Not After : Jul 3 13:02:06 2026 GMT
Subject: CN=80082dbcc9b32bcfbdd8caa9aa18fa9db23a179b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:bb:87:19:f5:f7:ee:52:eb:c0:0c:7c:35:
32:d5:1e:8f:d1:22:cd:e5:5c:61:da:5c:53:bb:64:
fd:4e:02:98:f3:9d:3f:3f:33:26:d9:9d:67:b5:56:
e9:b4:65:f3:87:44:4e:76:64:51:f7:4a:d2:46:b7:
ba:4d:d7:2b:0e:05:35:0a:98:83:f6:69:65:a4:d4:
06:80:ed:9d:7e:48:8c:77:b5:6c:7f:a0:1a:27:a7:
32:09:dc:72:03:21:6a:cb:90:34:12:b5:09:08:cc:
ab:10:56:c4:58:af:4a:69:98:9b:d0:91:4d:10:fd:
c6:8e:2c:a2:87:d4:1e:c2:1d:dd:67:87:97:34:83:
3a:f6:cb:b9:04:ac:a6:b9:5c:12:25:0d:e5:da:93:
f4:30:f9:ef:03:cb:94:e8:af:c1:d9:5f:03:3a:40:
00:3f:b6:60:ba:c9:0a:23:8e:94:72:9a:16:e8:a5:
2b:25:3e:2f:bb:5a:a9:b3:55:b3:b9:6c:05:79:4a:
30:9d:f1:19:1d:b7:e5:b5:76:65:1b:b9:bc:7e:c3:
60:ba:32:3c:20:fe:3f:37:12:15:0e:e0:ab:e2:8a:
c6:cb:72:c9:43:54:1e:aa:92:ee:d0:2c:77:0c:dc:
3b:08:f9:3b:f4:a8:2c:99:c1:29:64:35:b1:6d:08:
ad:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:2D:BC:C9:B3:2B:CF:BD:D8:CA:A9:AA:18:FA:9D:B2:3A:17:9B
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:52:c9:65:6a:46:d4:2a:74:ec:d6:dd:37:7f:f3:3c:d5:8f:
bd:64:bc:35:ff:0d:0d:3a:6f:f6:9b:50:1b:42:cc:f1:ed:eb:
1b:0e:bb:26:b7:c0:33:3d:3e:d8:6a:63:f2:c9:f6:97:ce:24:
28:5e:f2:73:73:6e:a9:40:71:b7:65:63:46:63:f9:be:a2:3d:
84:c4:75:b1:89:a1:ee:d2:e7:ed:a1:cb:8d:99:52:d7:eb:d9:
79:dc:86:ea:b1:1d:78:d1:d7:8c:a4:4e:ed:2b:f4:08:cb:48:
0f:19:15:f5:b0:14:21:38:16:ec:17:a0:7c:f7:6e:f0:07:a3:
50:bd:f8:b0:0c:c7:51:fa:7f:7a:e3:80:06:99:ea:29:76:4c:
f0:1b:cf:f1:2b:73:86:39:99:6c:3c:56:9a:e8:7a:3d:9f:ef:
70:95:13:dd:1f:80:9f:9b:71:eb:30:ed:bc:ba:c6:94:56:17:
5d:7a:01:31:0e:07:c0:89:4d:6e:70:bb:00:b4:d3:96:77:66:
50:22:24:90:32:2a:5d:00:fc:ed:be:19:67:a1:c3:c1:71:d9:
bd:d3:ae:f1:68:03:d7:cb:93:c2:b1:bd:8b:8e:b8:30:d4:ba:
6e:c2:9c:ba:5f:30:0c:77:cc:95:bd:b8:0a:82:10:dc:9d:c3:
01:8c:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:18 2026 by rpki-client