
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft
File: BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft (raw, json)
Hash identifier: 0E3LmQGtIj+DFNEqJtRtfwzM5UJK8ImSBwsg9wTq/UI=
Subject key identifier: F3:CB:05:AA:34:C8:52:85:E0:64:EB:CA:B7:82:9D:72:90:63:CD:F1
Authority key identifier: BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A
Certificate issuer: /CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a
Certificate serial: 33558412B3A89185D338A186EB84CFC48C9B9973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft
Manifest number: 30
Signing time: Thu 12 Feb 2026 13:42:40 +0000
Manifest this update: Thu 12 Feb 2026 13:37:40 +0000
Manifest next update: Fri 13 Feb 2026 17:31:40 +0000
Files and hashes: 1: BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl (hash: yJsLbfzJvjsy9+i8E9M/viKDWQKMJ/cQSi1lyVTbrDk=)
2: AS214749.asa (hash: 2iw7qq1PK9/2+VG3tdvEFfUZZfycE5Xs4RhTnmRhJLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:55:84:12:b3:a8:91:85:d3:38:a1:86:eb:84:cf:c4:8c:9b:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a
Validity
Not Before: Feb 12 13:37:40 2026 GMT
Not After : Feb 13 17:31:40 2026 GMT
Subject: CN=F3CB05AA34C85285E064EBCAB7829D729063CDF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:62:cd:f4:e4:69:7d:17:6b:ed:41:9e:45:
38:c1:49:71:4e:63:b6:a5:93:f6:42:38:71:86:4c:
51:de:29:1d:e9:6a:51:2d:63:6b:da:5c:1f:d1:b5:
62:86:41:5d:00:0c:1b:fd:9c:9b:fc:7e:82:14:f0:
a8:41:0e:95:36:e7:1e:61:fd:ba:da:53:05:fc:0d:
d1:51:26:6d:f6:89:9c:ae:03:e4:3b:c0:df:16:a3:
be:41:05:ed:0e:40:bb:ac:d1:8f:71:de:e1:63:07:
74:cc:2a:e0:c8:43:26:dc:ad:c1:7e:d2:49:32:44:
76:54:e6:f0:a4:a9:9a:51:a9:00:ce:02:2e:85:fa:
8d:2d:7d:7d:1e:2e:8b:1f:9e:1c:b1:36:a3:83:ef:
bc:4f:ea:89:56:b0:83:99:2c:38:be:f9:fb:ee:01:
e4:00:d6:4f:87:f4:59:b8:30:b3:8f:5e:2a:6c:44:
c0:d9:93:cd:14:e9:ca:be:f8:8e:4b:43:5a:5a:4d:
33:bf:0c:7a:55:dd:ca:b5:28:89:36:60:08:be:73:
15:0d:6e:3e:bd:86:34:44:f6:9e:db:bd:27:44:53:
89:f8:70:18:48:8a:2b:b7:72:11:5c:39:e3:67:78:
32:49:55:80:8a:2f:db:11:b2:22:98:8f:2c:7a:39:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:05:AA:34:C8:52:85:E0:64:EB:CA:B7:82:9D:72:90:63:CD:F1
X509v3 Authority Key Identifier:
keyid:BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8d:c9:a6:0c:fc:05:20:8c:3b:e3:1d:80:a1:03:d6:40:73:
9e:6b:d6:e1:ea:7a:a1:38:31:d0:60:89:27:d5:a7:50:26:b2:
7b:5e:88:a9:76:9b:b6:ad:12:21:d0:0e:e9:e7:35:d9:99:a7:
ea:54:58:0b:db:51:14:a6:67:2b:bf:ad:e1:92:0a:a5:4d:95:
01:50:bb:2a:d6:d5:4f:41:88:5d:d6:b3:6d:28:a0:ac:7a:fe:
79:76:d2:e7:8f:36:8e:3f:55:a3:71:ac:38:81:bf:87:a2:61:
50:ce:36:2b:43:03:67:fa:84:e5:72:5c:99:4a:17:3f:a7:cc:
1b:a1:2e:19:6a:a0:43:2e:19:46:de:41:5c:88:d5:48:d2:87:
2a:ab:11:a0:87:2a:09:1f:d4:83:17:52:5f:7c:92:ae:0d:14:
6f:09:da:68:78:46:4f:78:67:04:ac:42:0b:9f:f2:95:a6:cc:
4b:e4:35:02:63:4d:03:20:a8:5e:28:23:c5:b5:93:31:86:99:
67:fe:2e:6c:32:bc:78:17:a2:c3:cc:19:f2:57:9d:9f:0e:8c:
74:5c:65:aa:66:f8:5a:aa:95:d5:d6:0d:b6:20:25:29:36:cd:
38:33:65:58:b0:50:d7:c5:c7:fa:3e:9e:7d:28:84:99:8d:24:
56:86:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 10:21:32 2026 by rpki-client