Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json)
Hash identifier: W0A7XQHFPx2gCePSFfBpwxz1lncL6u0R6ntL6f5zB/0=
Subject key identifier: 5B:05:75:52:65:AA:38:A0:3F:A7:34:1F:71:DC:07:8F:17:58:0E:DE
Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Certificate serial: 019F2369E8F266A390B9DFA921B6EF168A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
Manifest number: 0A9A
Signing time: Thu 02 Jul 2026 15:19:31 +0000
Manifest this update: Thu 02 Jul 2026 15:19:31 +0000
Manifest next update: Fri 03 Jul 2026 15:19:31 +0000
Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: e+OuqSGQ4AV8/CwgvkGwWEGyKJvPvA5UjPQMig1pIRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:e8:f2:66:a3:90:b9:df:a9:21:b6:ef:16:8a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda
Validity
Not Before: Jul 2 15:19:31 2026 GMT
Not After : Jul 3 15:19:31 2026 GMT
Subject: CN=5b05755265aa38a03fa7341f71dc078f17580ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:64:31:d4:78:10:68:ef:e3:b9:90:49:45:
ae:f1:f0:f4:cf:a8:bd:8d:f9:08:c1:44:d6:6d:da:
1a:97:2e:e8:6e:e9:60:3d:a3:a3:17:c8:98:29:fc:
c0:d3:c8:19:aa:1c:fb:b3:61:12:08:f0:90:63:58:
e7:54:f8:8c:c2:d6:93:3a:ae:98:29:af:67:30:1e:
e2:55:ea:95:cd:e8:f9:a3:53:da:c6:74:f7:92:0b:
42:76:8f:1e:3d:54:4f:9b:56:b0:c8:8e:e6:73:e2:
bd:38:ec:c2:74:31:8b:fb:1f:be:12:45:4c:a7:4c:
f9:e3:25:4c:e5:fe:d7:42:12:93:75:f1:17:7f:24:
9b:f9:e4:8c:22:8d:da:3b:15:11:30:78:81:18:12:
a4:3b:27:72:30:34:d9:8a:9b:98:f2:50:7b:c4:14:
a9:21:b3:d6:5d:f5:b6:3a:1f:b4:7c:ba:42:0b:a8:
f2:4f:17:9b:38:0d:ee:68:3c:c7:84:dd:0a:28:b9:
22:8e:b7:ed:f1:8d:db:66:0f:f2:75:7a:9a:d9:81:
6e:4c:47:66:7b:74:9c:f8:de:ea:31:6f:f8:60:de:
04:01:4b:24:65:cb:07:4d:01:65:0c:56:bb:22:c2:
14:23:79:3c:f6:25:c8:6d:99:7c:53:9f:8d:1f:9c:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:75:52:65:AA:38:A0:3F:A7:34:1F:71:DC:07:8F:17:58:0E:DE
X509v3 Authority Key Identifier:
keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:14:2e:9f:ae:5a:1e:b2:dc:42:e3:6d:02:98:9f:c8:57:70:
48:1e:e4:7e:5c:99:bd:15:28:42:1e:b9:fe:72:80:51:d5:07:
03:ae:6d:99:6f:86:51:4d:5d:37:d1:4d:40:fc:16:a6:4d:6c:
ed:1a:1a:f0:11:2c:eb:4e:9e:02:54:c4:19:fa:b5:04:f2:68:
89:13:44:a0:d5:6c:f4:1a:7a:6b:f9:9a:1a:d9:13:e4:8d:a0:
4c:b9:d6:f3:b2:4e:cc:6f:39:4a:d6:27:91:e0:41:06:bf:e7:
90:92:74:bc:22:a4:a0:32:fe:8b:c6:8c:96:42:83:b7:c8:9c:
df:3d:21:5d:e9:08:3e:a9:a9:cd:5a:8e:71:0d:19:a2:07:ff:
c3:35:fd:23:fc:4e:2d:92:b1:ec:3b:e0:e0:c5:e4:df:b7:59:
e7:fe:ab:29:fc:6b:1d:6e:f5:61:b1:92:65:3a:d2:38:7e:f8:
38:8a:75:43:65:88:f7:45:1b:ff:fa:10:34:42:c7:fd:01:14:
1d:10:8e:78:12:0d:c6:18:0d:bf:7c:b2:a2:6d:d8:5f:ff:18:
da:49:6b:7f:96:30:1d:f4:13:26:3f:f8:7b:e0:04:c2:e6:8e:
d0:a0:83:52:73:8a:59:50:c7:22:14:0a:a9:f7:5d:f1:c8:77:
56:bb:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:03 2026 by rpki-client