Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: 3Lp8qI4eHgASY1vAcUXpdmuLr7Yp8nJCG+S3WRxIHUY=
Subject key identifier: 1B:F8:68:59:46:63:4A:F4:52:06:48:F7:4F:3E:0F:7C:9E:BE:85:23
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 019F216B6ACBF35007D997C08FC9ACF21474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 1989
Signing time: Thu 02 Jul 2026 06:01:55 +0000
Manifest this update: Thu 02 Jul 2026 06:01:55 +0000
Manifest next update: Fri 03 Jul 2026 06:01:55 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: 8Mn+Ld9ErWNf2m+uoClNyRYWctfd63S1LXSvHzmH57Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:6a:cb:f3:50:07:d9:97:c0:8f:c9:ac:f2:14:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Jul 2 06:01:55 2026 GMT
Not After : Jul 3 06:01:55 2026 GMT
Subject: CN=1bf8685946634af4520648f74f3e0f7c9ebe8523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:85:a3:9f:08:15:39:cd:6d:2f:ed:7e:80:
1c:1b:bb:2e:7e:a6:f5:b5:1a:08:f8:f4:48:62:db:
ac:fc:46:de:3c:1f:bb:16:4a:5d:83:cf:12:99:f2:
02:21:00:98:38:c2:26:05:93:d9:25:06:d9:c2:41:
e6:62:52:00:02:9a:c4:f1:fb:98:14:c9:50:7b:bc:
e4:98:86:fa:3c:a1:02:8c:94:0e:c4:a6:79:2f:b8:
0a:36:ab:d0:29:04:f4:70:cb:ee:20:85:a2:df:d5:
15:3c:a0:ca:6a:6f:88:e9:27:57:2a:0a:f9:52:49:
4e:6c:70:98:82:c6:2d:32:a3:b8:f3:12:8d:39:8f:
12:98:3f:56:02:7c:92:b2:a4:0e:a0:c6:35:bd:e5:
78:9a:c4:86:01:af:c7:f1:8f:79:ed:2b:a1:1b:93:
d9:b4:60:e6:61:94:9e:0d:78:54:1f:1c:d9:19:15:
f5:8d:68:a0:8e:70:af:c1:15:f7:dc:b5:3a:b8:30:
ff:41:f1:15:fc:a0:12:a2:27:e7:fe:82:78:89:06:
3a:bd:ea:07:7c:49:96:ee:44:82:a6:1a:35:8f:01:
3e:a6:bd:62:d6:d1:be:d2:8d:c5:82:d4:a8:73:4a:
af:83:89:d1:0a:5e:bd:f9:27:34:76:4e:ba:b5:53:
ce:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:68:59:46:63:4A:F4:52:06:48:F7:4F:3E:0F:7C:9E:BE:85:23
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:a3:76:f3:ac:e1:c5:62:b8:f7:40:67:f9:6f:86:04:63:
b3:e0:40:ac:d5:9b:68:17:3d:2b:0b:5d:44:fc:5e:45:6c:36:
3e:81:a0:7c:c7:45:cf:fc:a1:f6:0e:36:86:99:7f:3c:63:1f:
c9:fe:35:41:7b:bb:3f:2b:d2:30:78:3e:2e:fc:62:dc:9c:7a:
f5:91:f2:70:4d:b2:69:a7:91:93:eb:40:68:c5:b9:44:52:d2:
97:99:93:54:3d:21:26:be:96:96:80:e8:95:1d:e3:20:9c:de:
b3:7a:e3:b0:64:b7:cf:44:b9:ff:13:ea:55:7c:5d:3b:9e:12:
32:46:2c:eb:bf:4b:e5:d5:3e:4b:28:31:5c:75:ef:f2:db:03:
24:25:3b:37:02:2c:95:ed:1c:af:ea:19:f8:00:64:19:17:72:
33:2e:03:ed:16:d4:ac:7a:3c:2f:2e:17:f6:c3:09:53:9c:68:
52:7d:87:3b:c4:82:4e:01:a6:c9:a8:51:a6:1f:d4:d0:2e:fb:
3b:c6:15:df:ba:e2:64:d6:b8:03:70:8d:8d:84:74:af:ff:59:
6f:9b:96:4c:ee:4e:b4:6d:f9:0f:ce:6c:f3:0d:ac:01:63:01:
8e:b3:46:79:60:e8:25:98:a1:8d:29:ab:ea:af:38:b2:6a:9e:
5a:43:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 18:37:59 2026 by rpki-client