Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
File: OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft (raw, json)
Hash identifier: VCatt6gBUCemwNjgIm+PpZHqgahNfbZZmotXjDw/TUU=
Subject key identifier: 52:F0:4E:0B:FD:74:30:DF:9C:F4:F2:2A:C0:8D:55:97:BC:C6:D3:A1
Authority key identifier: 3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
Certificate issuer: /CN=3a611bc291ff1de02256f2315345680603fa4edb
Certificate serial: 019DCAB13EBCDB936E10C18D214D7D2A6EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
Manifest number: 07A1
Signing time: Sun 26 Apr 2026 16:48:26 +0000
Manifest this update: Sun 26 Apr 2026 16:48:26 +0000
Manifest next update: Mon 27 Apr 2026 16:48:26 +0000
Files and hashes: 1: OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl (hash: dlYtV6FEzPNaXMHN8lCgN0Nu+E2zfALwoK41Zg2KTWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:b1:3e:bc:db:93:6e:10:c1:8d:21:4d:7d:2a:6e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a611bc291ff1de02256f2315345680603fa4edb
Validity
Not Before: Apr 26 16:48:26 2026 GMT
Not After : Apr 27 16:48:26 2026 GMT
Subject: CN=52f04e0bfd7430df9cf4f22ac08d5597bcc6d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:9b:bd:fb:d7:e1:3a:d3:cb:c4:7b:dd:43:
4e:f7:42:e7:49:1b:92:bd:b5:9c:e9:f4:82:22:26:
ab:44:90:95:31:75:fd:22:ae:20:ad:f0:c7:23:5e:
74:4c:1d:7e:c0:47:33:b2:be:3b:ce:64:4a:5c:b8:
15:60:14:b4:52:89:3d:76:cf:1a:6d:10:e4:0f:6d:
bd:3f:d5:5f:d0:af:03:6e:03:20:ef:78:1f:6c:b8:
4b:b3:56:3f:14:77:1c:d7:2e:2d:04:ab:36:18:7f:
5f:6d:cd:3e:3f:4f:41:33:91:2b:18:1a:08:a2:4b:
da:31:f0:60:98:55:e6:66:83:ef:13:65:85:e0:c9:
0f:fc:82:2f:27:ac:6f:3a:f6:40:82:93:e4:9e:c1:
00:88:b4:14:37:8a:6f:b2:54:20:8b:43:e5:fa:83:
32:a9:35:c0:ac:0c:63:6a:cc:d4:46:12:09:b9:9d:
1c:88:38:bc:7d:63:c9:fc:06:d0:d2:6a:a4:36:61:
1e:ac:48:b6:0e:cf:13:17:c3:cf:35:d4:a6:37:5b:
28:d4:51:99:a1:ec:26:bb:ac:cb:78:e2:29:0c:5a:
69:ab:fe:f3:f9:46:54:0e:18:23:b8:cf:43:ed:ca:
fb:c5:11:87:ce:2d:43:8d:49:e7:cb:af:1f:62:3e:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F0:4E:0B:FD:74:30:DF:9C:F4:F2:2A:C0:8D:55:97:BC:C6:D3:A1
X509v3 Authority Key Identifier:
keyid:3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e9:ca:35:47:21:09:55:14:f0:19:5e:18:5d:18:24:2a:b4:
22:ee:0e:f6:c6:de:16:ab:46:7a:49:5a:6b:9a:a8:18:36:5d:
e3:4e:a7:14:65:75:11:70:81:23:bd:7d:ff:ae:19:1f:5e:0f:
74:55:ed:26:1a:27:52:ab:df:b1:4f:3b:cb:d5:bb:65:2a:f3:
a3:66:74:01:b4:23:69:5d:d3:fb:f0:f0:94:ec:06:16:68:22:
cc:fe:36:9e:cc:0c:35:cb:7b:c8:49:fe:d9:12:4a:7c:22:a4:
55:56:18:9b:33:15:af:17:00:dc:05:59:6e:b1:58:cb:f5:b6:
71:97:f6:0e:e9:fe:13:b1:df:e3:42:1c:5a:6f:29:95:02:3d:
75:0d:2d:69:cd:aa:25:80:b0:4a:bc:2f:bd:9c:b6:0e:d5:d3:
9d:95:7a:69:2e:b2:6e:71:4f:83:62:cf:c4:d1:5f:00:74:2f:
db:df:f2:74:90:e1:6f:fa:40:bb:b2:86:f9:cf:da:20:08:de:
80:b6:63:07:65:15:e7:9f:39:62:02:20:4b:42:60:42:ed:ba:
c8:e6:c7:38:e9:e4:21:40:8c:25:9d:54:f4:e4:1a:58:0b:57:
59:62:7e:3a:e7:6b:b2:84:cd:20:d8:23:3f:9a:71:ab:01:2e:
e5:dc:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:20:30 2026 by rpki-client