Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: H3l4DWv2cCIoN0wrR0i10K5A7WgolMh0hrukU7MsyHU=
Subject key identifier: D1:97:CC:66:9F:64:F0:F8:D3:E4:11:33:CA:71:69:0E:68:90:AF:2E
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 019F227D039F83B27FA9D58EFD8F1C3E5096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 198D
Signing time: Thu 02 Jul 2026 11:00:46 +0000
Manifest this update: Thu 02 Jul 2026 11:00:46 +0000
Manifest next update: Fri 03 Jul 2026 11:00:46 +0000
Files and hashes: 1: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: Nbz1kao23OuV68vpfUodHT1wjD/GUprobecxOPtXQ7M=)
2: 7-BHgIfd8UJXQcrdaeCEGNqT0DU.roa (hash: r7iG2JSHeb88gixTYl7AFD1jnKrQ0a+iH+yjlWvhS9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:03:9f:83:b2:7f:a9:d5:8e:fd:8f:1c:3e:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Jul 2 11:00:46 2026 GMT
Not After : Jul 3 11:00:46 2026 GMT
Subject: CN=d197cc669f64f0f8d3e41133ca71690e6890af2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:53:b8:15:5e:b1:ec:b9:13:16:c4:2b:03:
96:6c:3e:e6:f5:90:bf:9a:53:47:e4:aa:3e:77:a4:
f9:02:ab:3d:58:ed:0a:b3:59:10:ed:86:dd:27:6a:
3b:72:12:a1:a0:16:7f:6e:75:38:0b:05:99:2c:29:
c3:44:a5:db:da:67:97:dc:8a:be:e5:83:45:b9:c7:
7c:31:90:7d:49:c9:2c:30:cc:ff:2e:4f:09:70:e4:
b4:c3:de:06:ba:ca:f4:98:28:49:cb:65:fe:34:6b:
44:87:b2:81:2c:72:71:e3:27:cf:8a:6a:d7:46:8e:
26:b5:1f:b8:6e:b6:24:73:a4:f1:4a:59:bf:cb:38:
c1:02:37:ba:d2:5d:d4:67:44:31:f8:48:11:91:d0:
5e:4c:3d:fb:94:1a:32:f4:70:82:ab:0f:98:fa:69:
0d:b7:c5:24:7a:5d:dc:83:93:9a:ee:b9:7b:f4:85:
87:fe:de:2d:64:f6:5b:11:89:ab:f7:42:7a:a4:b8:
87:53:2d:d8:30:93:36:6e:44:e1:cf:ff:22:b0:f4:
cb:1c:60:f3:13:28:38:1e:11:b7:ca:81:86:9b:bc:
da:f6:51:de:6f:be:68:99:b4:f6:86:f2:6e:6f:e3:
bb:f6:c8:d7:6c:59:3d:76:62:87:0f:cb:9d:49:db:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:CC:66:9F:64:F0:F8:D3:E4:11:33:CA:71:69:0E:68:90:AF:2E
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:78:57:9a:06:8f:14:ec:af:bc:f0:57:68:f8:83:16:42:5b:
e0:5d:e3:ad:52:62:4b:11:9f:25:9a:89:b7:9d:af:de:40:a0:
2a:b1:90:08:62:34:2a:76:52:e5:f9:97:ab:5b:b1:ec:fb:25:
67:21:f0:02:05:ab:46:a1:1a:47:d7:a0:ed:30:cc:ae:4f:e7:
73:88:e6:7c:47:86:40:76:5e:7a:7b:36:0e:5c:00:ff:aa:81:
b7:d2:cb:6d:d6:af:d5:1e:e1:71:c4:e4:88:4d:99:e3:55:4f:
05:ee:50:68:33:58:8c:83:ee:e8:21:56:a2:dd:bd:36:ac:84:
b0:31:94:0d:6f:e0:65:90:df:cd:d2:d2:ff:34:52:62:61:14:
c3:ab:e3:b3:10:1c:43:36:79:e1:3f:e8:73:51:53:ef:54:4c:
ad:4f:0d:cd:8e:0e:cd:e2:ac:26:2d:9e:84:55:c0:8b:a3:cc:
9a:32:cd:9a:5e:3d:5f:35:cd:09:43:f3:47:3f:2e:25:e1:ca:
e9:74:16:65:e5:0f:86:9c:85:5f:14:2d:c5:42:3b:91:b2:00:
9c:da:91:a8:9b:d5:76:ed:1c:8b:fb:95:44:23:a2:0f:32:c1:
b8:bc:fe:91:5b:73:5c:df:9e:c7:54:ff:80:5d:61:5b:6c:74:
ab:4b:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client