Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
File: 2zdeFqGTZ96ZuySsEV0lmioEgaw.mft (raw, json)
Hash identifier: W2fpljh1zXUf4cqXbmDsRUcJZJTL5tGH29hDI6SXdPk=
Subject key identifier: 42:1E:D7:98:EC:A8:09:08:73:A3:8F:7B:49:AB:93:1C:F3:7B:77:74
Authority key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Certificate issuer: /CN=db375e16a19367de99bb24ac115d259a2a0481ac
Certificate serial: 019F216B8CBA0C3B93CCD4A8F181926ECBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
Manifest number: 0F26
Signing time: Thu 02 Jul 2026 06:02:04 +0000
Manifest this update: Thu 02 Jul 2026 06:02:04 +0000
Manifest next update: Fri 03 Jul 2026 06:02:04 +0000
Files and hashes: 1: 2zdeFqGTZ96ZuySsEV0lmioEgaw.crl (hash: rmFuWvnhQuevzqAOAVdQJKWD55XkpKSDxR+lK5ZhJjE=)
2: uej861Aq66aiTbTh46AGK_JiRjQ.roa (hash: u2XmnqcYHbAJLSpNo2ks9hVCb6DlSKyd8Mczf2hO9GI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:8c:ba:0c:3b:93:cc:d4:a8:f1:81:92:6e:cb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db375e16a19367de99bb24ac115d259a2a0481ac
Validity
Not Before: Jul 2 06:02:04 2026 GMT
Not After : Jul 3 06:02:04 2026 GMT
Subject: CN=421ed798eca8090873a38f7b49ab931cf37b7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:81:bf:f9:3a:34:b5:74:8a:32:4f:3f:dd:
7f:0b:c8:e7:d3:28:06:a2:9d:93:4c:78:19:c0:98:
25:10:47:50:08:4f:e8:1f:19:ca:77:ea:9e:50:67:
e5:fd:e1:99:27:53:34:72:27:56:ba:0f:86:0c:c1:
cb:ae:00:30:31:4b:7f:5a:5f:5e:7c:cf:1c:a8:1d:
46:b1:8f:a2:23:23:d5:e8:64:7e:f7:34:6f:bf:91:
d8:53:02:ba:3f:5f:ef:46:b8:2f:21:4c:6f:08:ba:
31:6b:71:a5:10:d6:ed:fe:8f:2a:a9:5c:4e:28:b3:
a2:2c:31:cb:1b:e4:57:90:02:46:76:1b:3b:04:a2:
03:eb:9f:73:de:fc:74:96:ad:6d:e0:dc:4e:f4:b0:
ea:2c:c1:34:db:88:fc:b7:a6:0a:bd:8b:de:cb:a8:
71:a0:ea:f3:62:91:90:4a:04:a5:74:91:9d:15:05:
25:82:62:6c:f6:20:0f:47:0b:69:bc:f5:18:92:2c:
d8:fb:4b:67:f6:7a:85:12:bc:f7:17:b5:52:c3:4b:
a2:5e:41:bd:48:67:19:3e:35:d9:f2:7a:58:50:7f:
67:b0:a1:4b:43:93:ef:ef:37:8f:c5:dc:58:d5:e8:
0f:eb:d6:41:08:8c:b1:97:5c:9c:4c:14:2d:8d:bb:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:D7:98:EC:A8:09:08:73:A3:8F:7B:49:AB:93:1C:F3:7B:77:74
X509v3 Authority Key Identifier:
keyid:DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:11:80:69:52:42:08:89:fc:a7:16:48:49:07:96:8e:26:06:
8c:bf:45:9b:78:84:d1:a1:59:fb:b7:e0:6d:9d:4b:47:c8:c2:
87:14:f3:3d:e9:26:c4:23:b6:d7:0b:31:2e:c7:04:b9:fc:3d:
f8:fc:77:6d:3b:e4:a7:57:3b:a1:9b:41:24:77:ea:51:9b:97:
79:93:c2:c7:7a:13:c7:c7:8f:19:04:f0:6d:78:4e:be:fe:6d:
4d:65:15:7c:b2:61:08:a2:f8:b0:0e:ee:0a:e6:34:1f:fb:55:
be:2f:f7:f7:d3:27:44:3e:06:26:9c:39:00:4c:33:27:76:7d:
da:d4:88:27:63:b7:b5:4e:f9:1b:be:8d:46:45:a9:e3:ac:e8:
d7:13:4b:03:03:eb:5e:16:08:27:f3:cf:da:35:0d:ea:b1:d4:
0b:72:7a:23:b8:b1:54:8c:14:b3:39:80:17:35:b6:70:cf:4d:
b4:79:0e:07:31:97:88:d1:ed:a8:37:f1:f7:9a:81:2c:5d:46:
3c:ee:69:46:b7:4d:e3:61:b7:9f:a2:64:e2:a9:30:80:19:b0:
3e:8c:a1:71:ce:3e:d0:dd:3d:d9:d1:ff:4e:30:8c:d9:fd:5b:
eb:f5:4e:c1:ef:0e:56:33:68:51:ac:f8:f9:7e:2b:6a:d8:78:
83:e6:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:44 2026 by rpki-client