Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier: TTZ8ULl6gPyRNH/b1W9TjC1G97jABbvAyagFYwpE8ps=
Subject key identifier: BB:EE:A4:A7:BB:FE:F3:73:05:3D:73:47:A0:F1:F2:E0:B9:F1:C7:DD
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019F2247B619A8C8EE97D97548AF2EEF005D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number: 1993
Signing time: Thu 02 Jul 2026 10:02:32 +0000
Manifest this update: Thu 02 Jul 2026 10:02:32 +0000
Manifest next update: Fri 03 Jul 2026 10:02:32 +0000
Files and hashes: 1: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: iWeMGxXSdNHNH/kB/Bdc/w65v26h46eXc6xuZZKd31E=)
2: I945miDFpQYT7r3liramnIH9Rls.roa (hash: e2W1mAyx8RsZ5wQIGm7sXapbFW0BtqtspvuqaFqFnSU=)
3: RyTAXO0kucVJKzc8XJ__L9yOiUA.roa (hash: XRsDlSNxnX2HTPHcD0o1CksNeN89d3dz50kkMUn9wcQ=)
4: e0dgq9Xhgse0R4bj80TVupAtpHw.roa (hash: UhSpFrBBiQsPvJGPY2abaeBtDnP7c1J1dWqODlHmS/A=)
5: eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa (hash: FpdqbdBj0pjjZR67UoCvnKhEhOtiPNxEJV1VXUIHPLk=)
6: oOhDRpFOR5JraODgtWxrIqn03So.roa (hash: eigDmTWjWV0xucfp3vjonLKwok/Ysn+jhYRmXORf2+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:b6:19:a8:c8:ee:97:d9:75:48:af:2e:ef:00:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jul 2 10:02:32 2026 GMT
Not After : Jul 3 10:02:32 2026 GMT
Subject: CN=bbeea4a7bbfef373053d7347a0f1f2e0b9f1c7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:1a:04:2c:10:a4:f1:31:24:17:3f:7d:4a:
17:2c:71:b3:ad:c1:c9:7c:a1:54:c0:05:5a:c4:5b:
5c:3b:cf:cd:ba:ad:5c:9b:d5:fa:ba:e6:06:a0:3c:
ff:5d:52:21:5c:d3:4e:69:ae:c0:13:dd:f2:4a:05:
2e:12:0d:f3:a1:1c:a1:5b:9f:32:37:70:89:5f:f1:
77:0a:e7:2c:fd:58:1a:40:18:f4:e1:09:2b:cc:0e:
0c:33:91:63:72:30:d7:3a:1b:3a:2e:19:a8:8a:d4:
5d:50:50:5c:02:d5:e3:e6:86:57:1b:07:5e:cf:c7:
fa:53:7e:82:4f:08:17:67:8c:e2:a5:29:45:f5:d4:
9e:5b:65:e8:7a:01:e4:9f:8e:94:ca:9e:21:5b:c3:
6b:e7:ad:c7:78:e4:e8:d0:04:b0:be:7a:00:dd:a8:
e0:82:97:ed:aa:34:b2:bd:53:4c:d2:75:f2:61:a1:
fe:66:d8:99:8a:56:bd:ff:ee:b4:2f:83:0d:6c:85:
f3:b6:1b:2d:31:9e:c3:6c:43:0d:09:29:06:e4:7a:
be:77:91:81:55:aa:1c:45:47:33:79:54:43:72:24:
e7:cc:f1:87:6e:76:ca:49:d6:b9:9f:d7:93:b8:15:
48:8e:ee:d4:98:86:da:c4:6f:07:db:f7:69:1c:cb:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EE:A4:A7:BB:FE:F3:73:05:3D:73:47:A0:F1:F2:E0:B9:F1:C7:DD
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:de:5d:1d:49:9b:5a:a4:49:5a:31:c7:e3:90:ed:6a:bd:
da:c9:27:de:db:51:dd:38:fc:87:88:ee:56:43:8a:66:be:5c:
96:a1:63:b0:34:d3:ec:97:3c:d9:21:e9:7a:9a:54:c6:e9:78:
2b:93:33:17:8b:5b:25:13:59:7a:b7:46:f4:d5:cc:87:a7:f2:
83:ab:d6:3a:fc:40:e5:73:9b:54:8e:58:ff:ca:3e:73:50:7c:
c3:95:cc:9e:ab:17:84:39:e5:4b:dd:9b:86:41:48:6e:49:a9:
33:76:98:ee:65:88:54:c5:6a:75:fa:67:f0:8e:a0:43:b5:ee:
8a:75:bb:12:d7:29:d2:e9:6f:3e:3b:3a:24:16:92:f7:ce:8d:
a9:c9:ce:8a:e3:a2:49:86:50:38:b5:de:01:a0:a6:09:18:6b:
72:e6:04:90:30:00:bd:c3:36:ef:ee:33:2e:bc:ea:f8:f2:77:
f4:34:fe:ee:e0:e6:a7:57:71:2c:3f:67:1e:a7:b0:ca:a8:31:
b5:77:c9:0a:c1:c4:cd:14:ff:28:48:df:6f:b3:0b:79:fd:b7:
82:1a:57:d9:ee:55:4c:36:50:dd:e1:50:2b:ca:8f:65:1a:84:
f5:c9:e6:4d:30:85:e0:fd:72:12:ca:af:07:ec:e7:7f:d9:d4:
ee:b8:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:21 2026 by rpki-client