Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json)
Hash identifier: hTTPK/qoMjEobdkZUezP9HNVoQwADJChwE4ZqZ8BBoI=
Subject key identifier: BA:D9:FA:3D:EA:9E:10:0C:2F:12:8F:31:DA:A7:9C:DD:07:68:F7:9F
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 019F236A4DF63DD76B0B9534E66DBA5C03F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
Manifest number: 05FC
Signing time: Thu 02 Jul 2026 15:19:57 +0000
Manifest this update: Thu 02 Jul 2026 15:19:57 +0000
Manifest next update: Fri 03 Jul 2026 15:19:57 +0000
Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: JINITJiv7jL3WeR40QYHo1lvK13t+MyxgkicGbLrs0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:4d:f6:3d:d7:6b:0b:95:34:e6:6d:ba:5c:03:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jul 2 15:19:57 2026 GMT
Not After : Jul 3 15:19:57 2026 GMT
Subject: CN=bad9fa3dea9e100c2f128f31daa79cdd0768f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:f2:96:1c:cc:dd:b1:95:94:5f:45:fe:2b:
40:94:a4:ea:b7:59:3d:aa:5f:fe:89:b1:73:13:78:
7d:51:72:18:12:1b:cc:36:35:a6:9e:72:d8:66:6d:
b2:cf:81:d1:00:46:a9:0a:a2:ab:01:d4:3c:66:52:
a1:8a:a8:be:bd:14:0e:8b:94:95:5b:a2:e7:b4:45:
a3:f0:88:93:52:8a:65:2a:5c:a4:c8:a9:03:66:b3:
38:fa:29:da:5e:b4:87:4a:a4:a1:ff:bf:44:0f:07:
f0:45:26:d5:50:d1:99:ee:22:90:08:c1:de:63:f0:
79:4d:0f:f0:40:72:f9:59:ea:70:9f:13:05:76:9e:
d9:9d:16:06:28:11:89:0f:81:7c:2d:f6:3d:e0:4d:
e0:3b:97:08:ea:d6:6e:0b:44:8f:e9:08:46:a1:3a:
8e:85:6c:39:ac:5e:e4:3a:d7:91:08:91:ff:e0:34:
d7:9a:21:02:01:e1:60:7d:52:11:9d:73:6d:f4:40:
2a:68:c7:23:5d:78:af:fd:fb:f5:61:b3:d4:9b:56:
d6:74:3b:e1:1d:93:d8:59:3e:f3:f9:ce:24:d1:1f:
f8:f1:2f:98:92:7b:c5:99:db:16:a3:2f:0d:5e:87:
ec:0f:75:2d:84:07:76:55:f4:00:6a:a6:64:0a:13:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D9:FA:3D:EA:9E:10:0C:2F:12:8F:31:DA:A7:9C:DD:07:68:F7:9F
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0f:d8:81:91:ad:7d:3f:ae:e7:f8:70:e2:99:de:88:95:8a:
f3:72:32:1f:3a:7d:0c:eb:0d:dc:a2:8a:e4:ac:4f:ea:52:8a:
9c:13:e0:66:26:f5:c6:d8:98:ca:7e:ae:8a:3e:18:1b:25:ed:
fa:6f:87:ac:ca:51:cf:a8:02:74:cf:01:1a:3f:69:6c:51:7d:
58:57:25:6e:49:1e:cc:f5:23:3e:ea:25:a9:ee:02:b6:45:2c:
7c:f5:7c:b1:59:77:ab:ba:a3:c2:59:f6:5b:2e:58:eb:79:6b:
d8:77:b5:ca:59:c4:48:59:36:0a:45:12:4e:72:4f:65:92:a1:
76:6b:42:52:a7:3f:f8:32:bc:91:10:b1:55:3e:6c:c0:55:32:
6b:cf:69:a7:d6:a5:5d:ef:18:ca:f0:40:39:8e:e5:27:76:68:
ad:dd:89:e9:44:cb:c8:12:af:34:33:ff:a2:f5:14:30:db:64:
36:8b:77:fb:81:bf:0d:c2:1d:04:98:b5:9f:b5:e5:4f:1a:33:
b2:eb:af:a8:3d:65:3b:ee:2b:2b:29:e2:a9:2d:55:02:58:8f:
30:34:9e:b9:ce:78:0d:ea:fb:eb:02:60:87:0b:5d:6d:b2:b6:
1c:1b:35:02:67:a3:ec:ec:16:fe:75:46:d4:e1:a0:b3:89:72:
37:d0:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:56 2026 by rpki-client