Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: 95czTU7rtgMgwRcyGMeWRm4IsPFNF1x15QJA+jDSDGU=
Subject key identifier: 79:BD:67:3C:1F:19:CD:FC:EE:C2:1A:2E:0A:B5:F5:04:A6:89:D8:25
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 019F16E6B4A4D93760E365AD68901F88B3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 136E
Signing time: Tue 30 Jun 2026 05:00:45 +0000
Manifest this update: Tue 30 Jun 2026 05:00:45 +0000
Manifest next update: Wed 01 Jul 2026 05:00:45 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: TMmzMp3knCcPdFS/SPkh2nmM1BqwR/vIcf0AdXW+5+s=)
2: sM3-PVw7H2S2QCTsd9xAReC1Zz4.roa (hash: HErOiReW/QS9bORmD9/1nLbG9V5jF7k+5+v0K8DY6i0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:e6:b4:a4:d9:37:60:e3:65:ad:68:90:1f:88:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jun 30 05:00:45 2026 GMT
Not After : Jul 1 05:00:45 2026 GMT
Subject: CN=79bd673c1f19cdfceec21a2e0ab5f504a689d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:c0:01:7e:53:04:39:f2:2a:c1:e3:ba:d4:
21:62:06:03:2f:8c:90:40:6a:9b:91:2d:82:cd:19:
a4:bd:41:82:9d:64:0b:f9:5f:59:ad:ad:cc:31:53:
5e:e5:fc:31:07:c7:a3:55:a0:4e:31:dc:4f:fc:48:
86:76:03:76:26:f1:d8:5a:98:f2:9f:bf:7d:e2:bb:
53:88:41:31:1f:19:a3:c0:59:c8:38:c7:bd:76:ac:
83:83:a5:36:de:18:0a:89:84:69:22:b8:2f:ca:1a:
6b:78:bf:b5:0c:51:1a:6c:af:aa:bd:c8:52:41:a5:
1f:39:72:14:6d:92:9e:11:c6:27:65:9a:d2:72:0a:
c9:63:bd:79:7a:89:76:7f:93:c1:51:8e:8d:f3:6b:
1e:39:bf:49:ce:1c:8f:bc:45:2a:7e:b7:cc:ff:48:
1d:2c:2b:4e:b0:8c:26:71:6a:5b:a9:ff:4d:e1:12:
7b:f8:08:31:de:a2:fd:f4:12:6b:cf:ad:2d:e2:46:
f5:d0:4d:f7:e0:63:3b:20:15:7f:da:06:0d:a4:e2:
9c:6c:3b:a7:d8:c9:df:7d:5a:28:cc:63:ad:4f:15:
b8:f7:35:a0:85:20:e8:12:bb:b6:11:78:d9:80:1b:
8b:4c:5d:b8:3f:9e:5a:15:dd:85:7f:6c:94:1a:88:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:67:3C:1F:19:CD:FC:EE:C2:1A:2E:0A:B5:F5:04:A6:89:D8:25
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:19:57:29:9e:40:1e:f7:9a:cb:fc:93:17:bf:6a:9c:ef:ed:
cd:9d:81:48:42:08:e8:94:63:f3:96:c7:b6:c9:63:f1:63:97:
db:f0:70:95:dd:cd:eb:a3:51:a3:6b:4e:ef:65:64:27:6a:47:
2a:52:d0:5b:5d:e3:3d:45:eb:f0:ed:05:a3:54:2a:e7:ec:e7:
5b:bb:18:94:5a:f4:08:c1:6f:1b:aa:ee:13:6d:08:93:5f:9d:
73:7a:94:e9:24:9e:c7:03:c9:fe:a7:c1:3d:d9:0d:14:22:76:
aa:49:25:4f:af:f5:09:d5:22:2d:c5:e6:08:a0:b2:51:0c:40:
b1:09:40:70:2a:16:3e:48:9b:8d:e2:cc:41:fa:21:f4:51:9f:
57:7e:80:3e:d6:05:bf:44:af:d7:11:8a:fc:b1:1e:0c:d7:2c:
5f:b0:99:90:57:74:4e:9b:30:53:68:ab:3f:f1:f7:22:fd:bf:
c7:11:28:7e:f7:09:ad:a9:f7:f6:4e:65:6f:00:23:1a:3e:12:
ac:50:ab:40:f7:fb:0e:e2:fa:13:9e:42:7e:06:74:8a:7a:2f:
37:c5:60:1e:65:6f:7f:eb:b8:d0:0a:ce:c0:6a:d7:dc:b5:83:
0c:99:0f:29:38:01:d2:ed:6a:24:83:06:af:f7:c0:2e:2e:ad:
cd:38:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:59 2026 by rpki-client