Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: 7AiFOsyUPT4JVt/7MJ/Hvdw4X5aJ3MB+82SWnckYhko=
Subject key identifier: B9:6E:46:02:98:01:E5:A3:00:A6:52:27:69:48:4F:55:DE:25:DF:F2
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019F22EC56373E8889546B83913A786A9FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 179B
Signing time: Thu 02 Jul 2026 13:02:21 +0000
Manifest this update: Thu 02 Jul 2026 13:02:21 +0000
Manifest next update: Fri 03 Jul 2026 13:02:21 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: uZoO+LJyuOWupx7TU9OQiVUNiVCUcPzRm7xMnj3ekLE=)
2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:ec:56:37:3e:88:89:54:6b:83:91:3a:78:6a:9f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Jul 2 13:02:21 2026 GMT
Not After : Jul 3 13:02:21 2026 GMT
Subject: CN=b96e46029801e5a300a6522769484f55de25dff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:89:1c:db:a7:f7:85:f2:bf:c7:e3:89:3d:
f7:7d:3a:36:31:fb:9a:93:91:d0:a6:65:4e:8d:54:
ac:0d:93:41:e7:a6:08:51:0d:28:33:d8:b0:ba:96:
fe:ec:94:f2:e5:56:5a:60:6e:31:33:8d:da:09:3d:
4f:3e:1e:7c:f0:09:d5:3a:c5:9e:38:ce:b8:9e:7b:
81:aa:7e:1c:0f:d5:3a:ec:6b:43:a6:ef:f8:9d:12:
f9:ba:7a:28:dd:f9:da:7e:5f:28:04:cc:26:79:4e:
9e:f9:40:1f:96:cb:74:75:cf:cd:98:b0:ff:91:1e:
bb:a3:5b:72:d1:64:76:c2:27:ff:35:98:b2:c3:13:
8c:17:16:17:b3:13:3b:c2:7d:4a:91:fd:07:ae:bb:
d4:ea:c6:40:25:be:be:47:9b:f8:ca:e1:4e:a8:ca:
a1:02:51:20:4d:73:df:99:1a:de:31:7d:68:b2:54:
aa:05:d6:b6:e4:01:4d:ec:fa:9f:1f:04:23:b3:d8:
eb:c9:15:59:6a:6e:30:e7:50:50:13:d9:63:77:53:
44:f2:dd:ae:3a:8c:f8:40:d8:aa:06:c5:67:cd:ef:
2f:36:39:ee:6e:e1:a1:e0:58:80:1c:fe:7b:92:ea:
94:5b:67:75:36:18:fc:a5:7b:e1:eb:30:a9:6f:f5:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:46:02:98:01:E5:A3:00:A6:52:27:69:48:4F:55:DE:25:DF:F2
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:10:1b:74:db:28:07:8e:b5:c7:a1:66:97:83:60:73:5f:87:
d1:f7:d7:4d:11:9c:2b:27:3d:c1:ac:5a:a4:d7:af:91:ad:a8:
21:11:63:21:74:85:1e:72:f0:8b:33:b4:73:19:04:f3:93:d1:
8a:bc:3a:f0:dd:4b:84:30:da:e5:af:e5:60:9c:59:dc:75:56:
da:43:56:2d:d2:4c:40:d8:8e:91:f0:22:94:86:00:77:c1:46:
e3:31:63:88:0b:84:f7:5e:e9:1c:b4:69:46:00:36:49:7f:3d:
45:18:f5:0c:39:71:fb:72:57:8a:b2:d2:8f:fa:85:24:36:e7:
a7:7a:e1:db:9d:ba:ec:13:61:3c:18:4b:40:93:84:1a:cb:80:
68:e1:dc:14:68:bc:34:17:f4:e3:22:61:ba:ca:aa:d5:7f:2c:
e0:ed:73:91:d0:10:54:fb:21:79:d8:f1:eb:e5:9f:90:4f:17:
09:08:68:94:3b:b7:4d:ba:ee:5e:12:78:0a:f9:bb:58:33:56:
7b:78:4b:22:5b:3d:e7:b7:e7:77:19:2f:22:fa:5e:23:66:93:
b4:03:79:25:71:d0:b0:18:85:c5:c3:f8:66:30:5e:07:4c:a1:
d0:50:e5:59:0f:74:fe:c1:b5:09:6e:bd:19:c1:69:91:73:6b:
d8:19:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:56 2026 by rpki-client