Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: tzdGyzQXNWxTc63fCgKLCk2aYo+HQmc2ucaSLUtgn98=
Subject key identifier: 1E:F8:0B:C4:71:F9:76:2C:D7:6B:6D:D0:E3:B0:4E:8C:18:FE:DA:B6
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019FD68578FD514D80F8CA9EF7B26A4020DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0F75
Signing time: Thu 06 Aug 2026 10:01:39 +0000
Manifest this update: Thu 06 Aug 2026 10:01:39 +0000
Manifest next update: Fri 07 Aug 2026 10:01:39 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: VzJ63wageSt6dlfjuKh8qCbCU8AVQ8a9tU2pimWxy+A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:85:78:fd:51:4d:80:f8:ca:9e:f7:b2:6a:40:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Aug 6 10:01:39 2026 GMT
Not After : Aug 7 10:01:39 2026 GMT
Subject: CN=1ef80bc471f9762cd76b6dd0e3b04e8c18fedab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:16:b1:bd:61:34:34:bd:06:a9:7e:4c:14:
1f:ad:2f:1f:03:8e:81:88:79:f4:26:2f:2b:7e:b9:
ba:90:ac:60:84:93:88:9e:9c:85:88:96:45:e7:d3:
14:c6:35:e2:58:d1:a0:c7:e5:f8:68:63:74:ad:1b:
ce:57:d1:d8:9a:de:4b:5e:e6:58:2f:f3:a3:9e:71:
1b:10:5e:36:90:f6:24:b1:d3:19:20:32:0d:bc:82:
26:c7:2d:92:d3:47:21:e3:c9:fd:68:64:f6:30:a4:
10:5e:57:0a:2b:95:0f:7e:01:51:59:f7:f7:3e:38:
e8:d3:7a:d5:de:70:61:cd:92:73:0f:18:d5:d8:c5:
b2:a0:6a:9c:62:10:d7:15:32:c0:a3:be:38:78:2a:
67:22:f5:3b:08:f0:98:70:ce:6f:be:b7:19:cd:ee:
58:44:4f:af:c7:64:6c:79:6f:dd:c5:4e:dc:f9:e6:
01:77:40:12:c3:06:88:d3:2f:76:d6:d1:7b:a0:66:
36:6c:28:6c:90:18:97:86:29:a6:53:30:93:78:96:
9c:1b:93:72:41:97:6e:9c:3c:27:6f:71:53:83:f0:
19:1a:81:d0:af:bf:7e:4a:ba:0c:71:4f:a2:5f:b3:
8e:b5:75:35:73:ee:82:0f:45:b9:9e:63:d0:b2:25:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F8:0B:C4:71:F9:76:2C:D7:6B:6D:D0:E3:B0:4E:8C:18:FE:DA:B6
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7c:b5:fd:92:6a:f6:24:7b:9f:a3:e4:ed:bc:8a:a0:3a:ba:
fb:4f:b5:d3:23:05:70:4c:57:61:bd:9b:15:c2:d9:f3:50:04:
26:c2:66:f1:df:e2:ad:f2:03:30:c0:15:a3:eb:07:1c:dc:59:
1a:b7:4a:ef:86:91:6a:6d:11:89:f6:3c:a9:38:32:74:92:12:
22:39:29:5d:76:2c:86:2f:69:80:19:a8:28:5e:07:14:5b:b9:
da:db:ef:cf:4e:09:7a:9e:03:1c:8f:bd:94:aa:47:9c:e0:41:
68:61:ed:cc:ea:53:bd:99:b7:13:48:06:4d:80:23:85:57:f6:
b7:b0:38:0b:d7:ae:ea:6c:75:a0:31:87:de:29:52:05:5c:b1:
1c:12:2b:5e:b7:e8:c8:f1:b5:5e:41:ff:b9:da:51:fa:c2:0e:
fe:1a:e2:23:ca:00:72:a7:9c:91:34:10:be:d3:eb:b3:79:75:
31:a5:81:ea:c9:50:99:09:47:4e:fb:52:24:7d:a6:12:8a:6c:
de:66:ab:72:02:89:64:90:ca:9b:9e:f4:42:c6:35:17:08:4a:
cc:ce:27:4b:48:72:29:fc:97:fd:d7:70:35:6c:dc:d2:52:38:
79:51:e1:5d:b1:5c:32:67:eb:86:21:4e:ba:22:c0:f2:3a:34:
b0:cb:f7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:27 2026 by rpki-client