Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: RreU9G0sbqIE0xNLn2XRIbmw3kuTOuLix5XKwDsgUz4=
Subject key identifier: D7:CA:3A:47:9C:0C:98:7B:87:34:B4:1D:D6:7E:38:69:F6:EE:8D:A8
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019FDC5074BFAD02B85CB304FF5553F0F9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 19E9
Signing time: Fri 07 Aug 2026 13:01:27 +0000
Manifest this update: Fri 07 Aug 2026 13:01:27 +0000
Manifest next update: Sat 08 Aug 2026 13:01:27 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: 8FfxTBpjyPDeOZ+lYGte3qmJE8J5wRWs2Dq2GneTjyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:50:74:bf:ad:02:b8:5c:b3:04:ff:55:53:f0:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Aug 7 13:01:27 2026 GMT
Not After : Aug 8 13:01:27 2026 GMT
Subject: CN=d7ca3a479c0c987b8734b41dd67e3869f6ee8da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:56:e7:b6:d3:16:f7:c6:72:53:3f:51:3c:
3c:6b:8f:bb:9e:d6:da:78:f4:e9:51:46:a7:50:1b:
7b:eb:d6:12:12:31:66:fd:bd:20:0c:8a:14:e3:1f:
a8:14:8d:d4:88:2b:08:58:49:22:3f:2b:5e:38:50:
4e:17:eb:dc:85:51:3a:9b:cf:b3:cd:88:13:4a:ba:
af:ab:73:d2:9b:92:68:08:ae:f8:83:71:c1:b3:aa:
7e:17:3a:44:09:bf:8c:e0:06:5f:94:9c:52:97:62:
be:cb:77:d1:6c:fd:eb:6c:c8:fd:88:15:93:15:a5:
26:48:9b:27:ad:85:9c:32:3f:12:a5:7f:80:bd:d2:
2d:64:7a:1d:bd:0a:e2:f0:01:0d:2a:33:1a:e2:b3:
66:bd:37:9a:e5:11:3a:8e:8c:a8:cf:71:25:e8:7b:
10:b4:71:87:dd:52:6a:f6:68:bd:90:6e:0c:20:02:
e0:c0:87:59:7c:aa:64:ba:67:73:56:56:2f:3a:4f:
ba:10:7c:d1:98:b1:75:3d:0a:5c:7c:b5:98:4f:72:
75:9a:49:44:ea:a8:47:ca:1a:ac:7e:71:f3:e5:50:
85:cc:1d:d7:89:da:79:c0:76:85:51:3d:f2:44:b5:
0f:31:44:9a:9e:c8:41:d2:43:6b:2d:d3:f3:18:be:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:3A:47:9C:0C:98:7B:87:34:B4:1D:D6:7E:38:69:F6:EE:8D:A8
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:69:86:2a:a1:e7:3d:6d:e7:cd:23:4c:79:5c:ba:95:ec:
31:81:9c:9a:b8:5f:9b:51:77:81:48:77:dd:1b:99:4e:69:57:
91:d3:fd:d7:50:dd:1e:55:50:ed:a9:be:e3:b6:c0:33:3c:eb:
23:fd:7f:ce:0c:69:33:11:43:4c:fc:21:52:73:6b:d1:a1:d8:
79:4a:92:38:ef:a2:8d:13:70:0f:6c:5b:18:6d:bf:28:a8:ea:
fc:12:7e:5e:58:c1:1f:9a:22:59:95:7e:7e:5f:b8:0a:01:b9:
87:4a:13:b5:d9:93:7d:c0:6d:f7:af:8d:dc:6a:49:30:e8:84:
11:28:34:6c:6f:9f:6c:98:03:76:c7:b8:74:e0:5b:cc:fe:7b:
49:fb:e3:7c:07:ec:b3:71:4b:27:24:12:ff:35:35:75:97:ac:
de:57:1e:63:58:78:56:c4:b9:e5:0c:12:e1:6f:27:92:47:8f:
9f:b8:ab:6c:70:3d:2b:c8:26:d3:a1:92:0b:59:4f:a2:08:26:
54:84:05:ea:88:05:aa:d0:59:f2:03:77:12:03:3f:24:3f:8d:
63:e0:7b:4e:48:ea:68:db:92:1c:66:02:02:f3:db:3c:42:bf:
45:3c:49:a2:09:b5:6c:0c:61:57:dc:15:72:d3:5f:0f:16:b1:
6f:27:d1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:44 2026 by rpki-client