Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json)
Hash identifier: x54T/t0k6qle/Q+z7hO7WUGdlvaSIIDiHnkaFLf/9QY=
Subject key identifier: C5:4C:71:7B:10:70:D3:D9:16:51:AC:7B:6D:F7:13:03:A7:94:FC:EF
Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Certificate serial: 019F227D864EA0222F0E626BC699034003DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
Manifest number: 1355
Signing time: Thu 02 Jul 2026 11:01:19 +0000
Manifest this update: Thu 02 Jul 2026 11:01:19 +0000
Manifest next update: Fri 03 Jul 2026 11:01:19 +0000
Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: ySrPRwD1MEim4HbTs90mP0mtS7wPrwMwkXO5DM0XxnU=)
2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:86:4e:a0:22:2f:0e:62:6b:c6:99:03:40:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca
Validity
Not Before: Jul 2 11:01:19 2026 GMT
Not After : Jul 3 11:01:19 2026 GMT
Subject: CN=c54c717b1070d3d91651ac7b6df71303a794fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:b0:8c:a7:5f:1d:ed:23:f3:4f:7d:78:3a:
8e:20:a7:6b:1d:9e:ad:de:35:f7:cc:6d:ea:87:5b:
5b:bc:b4:95:02:95:11:ab:6d:2e:25:27:6b:98:2d:
7d:5f:fd:44:af:bc:e0:45:67:13:88:4e:0b:62:de:
e1:64:b1:8d:8b:fe:b3:98:69:3e:93:54:f3:c3:c9:
ca:f2:dd:c7:5b:50:a5:28:ac:05:6e:4d:fd:8f:75:
98:b7:87:93:a8:50:8f:42:ae:94:3c:40:ea:a6:bf:
f3:d2:59:04:7d:3f:9e:80:d3:0b:ef:f9:e5:60:ca:
c5:94:c7:16:cc:ed:2e:da:66:ac:04:7b:3d:be:46:
a0:62:a8:e3:2f:bd:bb:2d:7f:8c:9d:3b:f7:f8:93:
62:ee:40:09:2f:24:33:34:10:ce:ab:2e:ba:37:e6:
d7:00:59:1c:6b:1a:ad:68:91:dc:25:86:3e:dc:c0:
2a:bc:f6:17:21:c1:a0:91:d3:9b:2d:eb:05:2e:c0:
c4:b6:95:d4:a9:15:64:c9:e7:ad:4e:3b:ac:fe:f1:
bd:26:49:87:75:d0:32:09:56:74:de:5a:27:72:2c:
fe:05:92:ac:52:39:47:8e:f7:a3:92:02:56:98:2f:
7b:a8:0a:09:0a:3f:f8:2f:d4:4b:d3:d4:2d:2b:cf:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4C:71:7B:10:70:D3:D9:16:51:AC:7B:6D:F7:13:03:A7:94:FC:EF
X509v3 Authority Key Identifier:
keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:8c:af:0e:f0:1d:0a:10:de:b0:ce:10:30:d7:e8:f8:7e:
b3:2a:82:aa:a5:b3:9c:02:b9:70:77:49:35:67:ec:87:29:e7:
47:9f:13:e2:a8:b9:27:e7:cb:1b:4e:fe:8c:f0:43:66:d0:34:
a3:87:10:72:dc:84:7e:bb:a4:bb:c2:b8:33:2e:fc:3a:5f:47:
ad:de:64:76:c0:cc:22:d9:a1:b3:c9:3f:a9:79:2b:0f:03:d2:
fc:e3:63:e3:27:06:8e:a7:d7:36:88:1a:a0:74:d0:fa:40:b8:
ca:40:aa:99:83:f3:5a:ba:ae:9b:ac:83:ef:e6:e5:2e:b9:e7:
5e:de:22:27:4a:f9:69:d1:8a:c1:c7:ec:2c:c7:a0:a2:f9:fa:
ee:d1:6e:e0:37:70:25:14:dc:40:b4:ce:01:95:ab:c9:72:03:
2c:47:ab:48:ab:7a:28:da:0d:d4:ac:0d:4a:a3:55:69:62:02:
82:5a:98:c4:e4:47:3c:c3:74:21:24:bc:fc:50:f6:34:39:9b:
ee:80:03:44:e6:f2:9c:24:0a:6d:07:a5:fb:b9:4c:c6:74:6e:
05:59:9f:47:5b:7b:23:85:21:d8:43:a7:07:77:35:2b:59:75:
8c:87:25:6b:3b:d7:c3:95:3c:bf:03:90:8d:3a:3d:56:28:e7:
b6:ce:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:52 2026 by rpki-client