Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier: giWFJbA8/q48ouQpmxkwIS0MWDZBg/3RTPM+nEMVjqA=
Subject key identifier: 36:33:3E:7F:BC:33:CF:0A:E9:B5:E7:51:03:ED:59:2C:D0:19:ED:95
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer: /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial: 019F2369BC9CC502FA33CB85DCDB7DDC3A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number: 16A2
Signing time: Thu 02 Jul 2026 15:19:19 +0000
Manifest this update: Thu 02 Jul 2026 15:19:19 +0000
Manifest next update: Fri 03 Jul 2026 15:19:19 +0000
Files and hashes: 1: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: SAojGuLdjkCFl+ps9xBiQoHJ8W9+VcEZZTkMc9O1c0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:bc:9c:c5:02:fa:33:cb:85:dc:db:7d:dc:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Validity
Not Before: Jul 2 15:19:19 2026 GMT
Not After : Jul 3 15:19:19 2026 GMT
Subject: CN=36333e7fbc33cf0ae9b5e75103ed592cd019ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:36:31:aa:f9:18:ef:9a:f7:e2:91:d3:eb:
d3:ca:4c:64:6b:96:0a:46:dd:5c:ab:4d:54:ec:9c:
16:1b:81:45:69:0b:f3:7f:2d:c9:66:9f:83:50:2b:
25:cd:2f:bf:5b:bf:4e:69:6b:df:6a:ef:c4:dd:f5:
2c:01:61:56:51:14:6a:2b:13:72:14:0e:3b:04:fe:
f6:34:1a:c7:b5:d7:ba:28:17:26:9e:c1:83:01:c9:
a8:dd:ea:28:02:a4:d3:00:07:58:1e:ce:b8:ef:b7:
57:29:71:08:80:f0:4c:21:03:7d:0a:12:eb:6c:56:
da:ee:5c:eb:29:fa:9a:42:21:2f:7b:f4:ac:8d:d7:
aa:0f:02:66:84:4e:97:f0:29:24:09:51:ed:26:97:
ff:ef:48:38:56:ba:67:a2:01:e7:ee:9b:30:8f:d0:
44:17:a5:af:28:70:f1:60:8d:84:89:7f:b7:b0:06:
6c:00:c5:56:4e:c7:f9:75:5d:bd:a1:bc:bb:be:94:
08:8b:2d:24:58:11:01:c5:d6:68:58:43:31:43:9e:
f6:20:aa:5d:8c:af:a0:de:22:53:1d:1c:69:d0:b6:
aa:10:f7:ba:f1:d3:ad:11:86:f1:b5:7d:ca:b0:2e:
75:73:9c:b1:44:32:f8:4c:82:4b:2a:44:14:10:62:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:33:3E:7F:BC:33:CF:0A:E9:B5:E7:51:03:ED:59:2C:D0:19:ED:95
X509v3 Authority Key Identifier:
keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b3:1a:39:b7:41:51:7f:2b:80:d2:fc:c8:5f:9f:8e:e4:b2:
63:ac:3d:71:02:ea:fd:df:ac:5e:be:5d:3e:94:41:04:b5:67:
4d:bb:96:f8:ea:6b:e7:f2:d7:b8:e8:25:ef:26:6a:be:0a:57:
d8:ac:a5:25:66:cc:cd:dc:86:e8:bb:36:0c:66:27:db:d4:4a:
01:46:bc:78:c2:e7:a7:63:47:69:ba:f3:65:89:ed:23:21:f1:
bc:d9:21:c6:0f:f7:f6:d0:17:24:ea:9d:b5:14:8c:1f:60:00:
d1:55:39:ae:4b:fc:d5:45:07:c1:7f:c7:e2:c9:eb:32:e2:8e:
15:a2:dc:f4:1f:30:21:2c:27:68:f8:84:9b:23:27:31:a9:dc:
7c:01:b7:3e:04:56:6c:06:e4:da:26:4d:b2:a8:2a:42:37:d2:
6f:02:a2:7a:55:f0:4f:27:51:56:92:87:67:90:77:b9:84:23:
28:c7:6d:ce:06:31:ec:59:6b:03:f6:63:b3:d2:bf:1b:75:eb:
b6:b8:35:8e:d4:96:ca:87:bd:c2:e8:91:33:2b:1c:79:a7:01:
a8:b8:ea:22:ce:43:47:40:48:bf:37:e9:39:7f:85:ea:42:14:
4d:54:a0:98:4c:4c:a8:33:72:f0:59:26:be:8f:97:1b:a7:cc:
d5:2f:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:07 2026 by rpki-client