Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier: THG0FlrhcAXTXHcYeLNlzc/66f/he9g8eDYYGwMZ4V0=
Subject key identifier: 1C:DB:28:D7:CA:9A:B1:9F:02:EE:06:F8:6C:2C:C4:24:33:CD:A7:CA
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial: 019F2369AF76DD3F64288B06462A92FA1EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number: 0868
Signing time: Thu 02 Jul 2026 15:19:16 +0000
Manifest this update: Thu 02 Jul 2026 15:19:16 +0000
Manifest next update: Fri 03 Jul 2026 15:19:16 +0000
Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: IWLUyXPFtNvSFKcLzLannCqkTlsifl1o5VWDVcX5Qeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:af:76:dd:3f:64:28:8b:06:46:2a:92:fa:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Validity
Not Before: Jul 2 15:19:16 2026 GMT
Not After : Jul 3 15:19:16 2026 GMT
Subject: CN=1cdb28d7ca9ab19f02ee06f86c2cc42433cda7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:da:9a:9d:f7:22:07:a5:41:b2:35:ed:43:
13:40:9e:0d:57:45:8e:c0:b0:5c:35:16:f4:be:b3:
d9:80:c0:07:a5:fa:db:ca:9b:ba:0c:53:ba:ca:e5:
92:f3:a9:a1:49:9f:22:47:d0:63:f2:12:ab:34:87:
e1:f3:e9:cb:fa:ce:ec:c5:f4:ff:14:72:07:4f:9e:
fc:72:c6:0a:fb:38:3c:8f:89:5e:62:38:36:37:c7:
e3:6a:c1:93:ee:98:fb:4f:b0:b2:7f:35:a6:9c:c2:
53:95:8a:b3:40:05:85:12:66:53:fc:02:5a:11:1e:
bd:3f:40:d7:01:35:df:12:bb:37:87:17:27:77:50:
6a:96:22:47:0d:cc:e5:53:28:c3:2f:fa:2f:82:26:
2d:2a:b8:79:a9:95:b9:69:3e:2f:7d:a5:81:1f:3e:
dc:32:94:dc:f5:9b:a3:1e:6a:ea:f1:75:fd:89:5f:
aa:2d:53:ed:71:cf:d0:b4:ec:bd:40:67:ed:28:40:
e0:4d:63:65:c0:65:24:16:b0:db:59:36:7d:16:ee:
ad:5e:0a:5b:a8:b4:16:99:fa:20:dd:46:c1:f2:43:
69:8e:61:fe:06:ab:03:4f:40:de:46:ee:c7:0a:6a:
1c:44:d1:09:cf:d3:03:61:75:8b:6c:ab:3d:d4:8c:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:28:D7:CA:9A:B1:9F:02:EE:06:F8:6C:2C:C4:24:33:CD:A7:CA
X509v3 Authority Key Identifier:
keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ef:07:33:e9:7c:bb:ba:95:bf:7d:56:f6:bc:32:cf:40:47:
af:fc:11:f8:81:f1:f7:79:db:cd:d0:60:a5:ed:c8:6e:fc:59:
9e:6f:d2:60:32:52:a6:28:b5:fe:2f:0a:45:c3:5c:a9:ee:5a:
72:bb:5b:50:24:6e:bd:1a:a9:de:e5:ce:5b:92:d7:9a:a5:7b:
97:c0:f4:f1:23:2f:e9:d9:5c:3d:ba:64:23:51:9b:57:db:20:
f6:bb:8f:57:1b:cd:4a:72:c7:2e:b7:84:d1:e4:30:c0:3b:fd:
43:ad:79:e8:be:f4:bb:fc:6e:a1:fe:3a:ba:6e:8a:41:e5:12:
0b:60:26:5b:0c:ef:11:5f:4e:91:dd:49:05:41:c4:2f:76:ec:
bc:ab:68:32:47:9c:f1:14:d0:b6:93:39:b3:aa:5f:42:7e:92:
5a:5d:78:04:62:30:42:08:ce:63:60:6a:78:38:ab:ac:74:13:
48:37:e1:ab:1c:c4:b2:37:e3:e5:65:45:ed:77:f1:ad:12:24:
70:f6:53:df:9e:47:69:c3:d4:9a:41:34:21:18:5f:18:39:01:
34:3f:85:dc:47:d1:f4:64:aa:35:27:b9:73:ca:71:26:86:12:
67:78:4c:4a:a0:67:c3:10:ec:44:89:e9:b6:d8:09:20:d3:da:
c6:10:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:53 2026 by rpki-client