Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
File: bHwktnELOtfXKCoMlH9rlTHVjsU.mft (raw, json)
Hash identifier: BmaTkUMIAnau5r2h++z+qF/5k247S0Uwrr+QhipHpMM=
Subject key identifier: 4F:5A:C5:E9:48:EE:00:23:27:07:B4:3F:D5:1F:62:70:C7:54:4C:FE
Authority key identifier: 6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
Certificate issuer: /CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Certificate serial: 019DF238E95BCF8AD8F9AFD1C1E2B3AE3DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
Manifest number: 18EB
Signing time: Mon 04 May 2026 09:01:49 +0000
Manifest this update: Mon 04 May 2026 09:01:49 +0000
Manifest next update: Tue 05 May 2026 09:01:49 +0000
Files and hashes: 1: bHwktnELOtfXKCoMlH9rlTHVjsU.crl (hash: MOyqq5O81PeqfGSHKjU6vO3iTzxn/v0WrOOju20aDSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:38:e9:5b:cf:8a:d8:f9:af:d1:c1:e2:b3:ae:3d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Validity
Not Before: May 4 09:01:49 2026 GMT
Not After : May 5 09:01:49 2026 GMT
Subject: CN=4f5ac5e948ee00232707b43fd51f6270c7544cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:d0:52:37:b4:4b:94:ff:27:a6:d4:fc:6d:
cf:e1:56:64:95:ce:c4:10:75:6d:da:4a:a5:ee:1d:
99:a2:2c:1b:ff:f3:bd:84:36:e2:62:53:e0:77:44:
20:14:68:ba:e3:6d:d9:d6:8e:b2:8f:23:ab:10:dd:
59:89:28:56:e2:87:bf:5e:f0:fe:52:5d:c5:51:ac:
a2:cf:58:cd:2e:9a:40:f4:33:f6:63:03:5e:54:c7:
d6:6a:f9:37:0e:5c:6b:6c:ea:18:98:f8:14:32:d1:
d4:13:70:06:70:7c:39:b2:c7:6c:bb:a3:c4:81:ef:
0c:50:2f:7b:92:2a:0c:36:dc:fd:47:db:d5:af:b3:
6c:1d:e2:b5:1b:46:bc:97:fb:eb:ec:af:f9:73:07:
d0:29:91:1c:81:48:2d:47:15:6f:64:7f:c0:7e:32:
fb:a6:fd:bc:8d:84:3c:71:ca:24:dd:57:db:d7:0f:
8e:ad:cf:5e:ed:26:11:72:b0:0c:e4:15:f5:d4:51:
a1:5a:55:54:17:01:64:36:d6:56:d9:43:42:f2:de:
bc:67:ae:28:3f:fb:d6:a1:27:1e:e2:a9:49:31:06:
9e:46:06:d8:c0:18:51:53:24:7f:bc:da:90:dc:c8:
fc:d1:ce:a0:c6:77:25:e0:58:eb:24:86:f1:3c:64:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:C5:E9:48:EE:00:23:27:07:B4:3F:D5:1F:62:70:C7:54:4C:FE
X509v3 Authority Key Identifier:
keyid:6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9f:ed:d6:6e:d7:23:b8:58:bd:c4:30:54:29:e1:25:52:7f:
69:13:19:5f:29:ec:b1:7b:2a:3d:f0:34:8f:7d:68:f4:6b:8d:
07:97:8f:65:0e:52:64:de:d5:fd:eb:2c:f2:2d:9d:8b:03:e8:
2f:46:c3:af:83:c3:f9:81:d2:d1:d3:e6:a9:74:7d:46:24:94:
f6:22:f6:71:b3:3a:49:ad:dc:03:90:e0:6f:09:6e:b1:01:88:
88:3e:7f:1a:6e:5d:a6:41:d9:03:cb:94:57:4e:52:e1:22:01:
e2:c2:f3:7c:40:f2:0b:e3:ce:e5:b5:4b:0c:1c:1c:fd:bb:89:
2a:95:da:0c:c6:de:31:01:83:50:ba:d5:0d:74:c1:b3:f0:e7:
76:c0:30:e0:a5:ab:70:76:c9:49:73:62:84:f2:f8:e7:4a:28:
11:d5:0a:8c:eb:e4:38:b2:e4:4a:53:8e:63:33:6c:5c:d0:13:
89:c3:37:dc:2e:7b:73:ce:90:90:a5:61:80:a4:aa:57:b5:e0:
43:6c:90:5c:c2:ef:ed:bd:46:dc:ad:d0:6d:f9:ba:22:45:db:
2c:4b:1c:6f:43:cc:cf:11:04:5f:d2:2c:7d:0b:84:67:b9:08:
e6:f4:be:2b:ab:f2:49:4d:0c:3b:46:26:c5:68:7e:83:05:08:
4c:97:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:52 2026 by rpki-client