Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
File: AV8u9ttQKZTXsMjknNSnd725NXI.mft (raw, json)
Hash identifier: 1W6pEz0by8kjmdPiPIgmrW1PtILtVwOwLe+Djwv2QtY=
Subject key identifier: 54:FB:61:F7:0C:4D:C6:6F:50:C7:03:FB:7A:F8:55:3E:AD:BB:CA:8F
Authority key identifier: 01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
Certificate issuer: /CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Certificate serial: 019F216B9388B4ECFA228FBF0F05E67A9F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
Manifest number: 165A
Signing time: Thu 02 Jul 2026 06:02:05 +0000
Manifest this update: Thu 02 Jul 2026 06:02:05 +0000
Manifest next update: Fri 03 Jul 2026 06:02:05 +0000
Files and hashes: 1: AV8u9ttQKZTXsMjknNSnd725NXI.crl (hash: ZijwVPfVBdnarwUPsj0YQmO/HidQ3SK5Ve5oXKC1JMo=)
2: zO6UKEO2UsX-uJJtYaV0kqdh2lk.roa (hash: BNJ+i4qsWrDUg9fXwYJtm2jlZYe3Zjo1dqX8YeGBA8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:93:88:b4:ec:fa:22:8f:bf:0f:05:e6:7a:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f2ef6db502994d7b0c8e49cd4a777bdb93572
Validity
Not Before: Jul 2 06:02:05 2026 GMT
Not After : Jul 3 06:02:05 2026 GMT
Subject: CN=54fb61f70c4dc66f50c703fb7af8553eadbbca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:33:0c:f1:67:d8:0b:0e:ee:6e:2e:d7:df:
46:6e:28:ff:34:99:9c:67:fe:c8:7a:a7:51:b9:93:
1c:58:cc:b5:2d:97:79:45:2c:76:fd:ef:8b:92:0f:
35:eb:09:e5:5f:0a:62:73:53:5c:e0:e8:72:be:b9:
08:ab:23:e2:47:c3:c7:9b:1d:c4:30:bc:32:0f:d2:
c4:2c:82:89:11:29:f2:9a:e6:5e:4c:3d:50:fe:a0:
a2:a8:90:d3:1c:58:f1:90:d6:bb:42:75:2b:7c:2c:
37:8b:e1:63:e7:d6:14:94:14:4d:f3:dc:02:ec:d9:
63:e1:6a:f2:98:98:be:61:11:21:b1:1f:07:64:76:
7e:d6:8e:27:68:e5:2d:dc:94:0e:6a:29:f8:bf:a9:
94:bc:62:33:8a:ae:74:41:46:6f:e5:72:b0:ac:ac:
25:01:2b:6e:b6:73:c6:7a:fa:c1:a8:55:c8:c3:5b:
a2:1b:67:22:19:92:c7:43:6c:52:f5:79:52:f9:4f:
39:12:72:69:a0:17:95:84:75:c2:ca:11:d8:46:79:
bf:e5:be:33:b9:58:d5:f4:9e:71:06:38:9d:0c:57:
2b:e4:84:8c:2a:06:06:a7:d3:20:20:0f:42:fa:02:
9c:17:7d:c4:67:06:30:d2:1a:d1:0f:76:22:84:0c:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:61:F7:0C:4D:C6:6F:50:C7:03:FB:7A:F8:55:3E:AD:BB:CA:8F
X509v3 Authority Key Identifier:
keyid:01:5F:2E:F6:DB:50:29:94:D7:B0:C8:E4:9C:D4:A7:77:BD:B9:35:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8u9ttQKZTXsMjknNSnd725NXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/AV8u9ttQKZTXsMjknNSnd725NXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:78:21:f3:39:55:21:36:ea:fe:50:65:38:65:18:91:18:c4:
08:bb:d0:1f:ed:84:95:0c:a6:4a:ff:61:4a:d0:29:d1:da:5b:
a8:11:83:c4:b5:08:d6:5e:b8:cd:21:11:6c:0c:95:d0:26:0a:
77:20:a1:d3:b8:39:cc:0e:e6:53:cb:04:82:6e:e6:41:7c:a4:
73:07:6a:2a:3a:45:17:02:4c:e3:28:6c:00:2c:4d:cc:e3:87:
b0:65:ee:7e:b3:02:7e:d6:f6:c7:95:71:df:95:35:e0:cc:ff:
98:a0:54:e8:ea:69:e5:18:d2:60:73:4e:d2:b8:d0:d3:74:91:
30:84:f2:ae:4f:04:48:2b:2d:21:b7:5b:df:86:35:b5:a0:0e:
a7:30:49:c1:ca:c2:9d:73:7e:d3:15:f6:b1:bf:ec:b4:bb:25:
81:91:45:d0:60:e8:39:0a:c8:8d:e6:d8:e9:db:66:1d:19:cf:
5a:68:3c:be:df:e0:b1:c0:0e:c8:6b:72:f1:95:a1:b0:5d:b9:
25:76:43:b1:8b:e7:65:de:20:71:da:ca:52:4c:42:13:e7:d0:
4f:2e:73:be:16:a2:5c:90:89:4d:c6:9e:70:70:4f:b0:4d:f6:
a9:3e:b2:0e:bb:fc:c7:1c:df:e5:e3:f7:55:65:05:2f:a5:f5:
40:fd:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:12 2026 by rpki-client