Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
File: 2O6Q00LYZepn8rDS-3TAOfg-Skg.mft (raw, json)
Hash identifier: WVfTvF45WEUM97Mq3wGI4CtQbc5JLajv4lAEJIhN7a4=
Subject key identifier: 5B:99:0D:8A:74:27:7F:B9:89:4A:95:2F:70:BF:68:0C:BC:5E:01:F2
Authority key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
Certificate issuer: /CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Certificate serial: 019F22EC35D6A8F376A48E001A327A6296B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
Manifest number: 06B0
Signing time: Thu 02 Jul 2026 13:02:13 +0000
Manifest this update: Thu 02 Jul 2026 13:02:13 +0000
Manifest next update: Fri 03 Jul 2026 13:02:13 +0000
Files and hashes: 1: 2O6Q00LYZepn8rDS-3TAOfg-Skg.crl (hash: PLvr3LmJ576lcJecW+TCqZWPi3RVryJM3xWPuc380Ek=)
2: OExalT86I2jE92WcpxOz8v2EM5M.roa (hash: 4ql4+dXrno2rRd9rLsGdlFCa1N0RlG63lEsTRJIQb8w=)
3: jkJ-dpXyGf9S_poPiFsD4kU6mb4.roa (hash: cQtWmc7dZO030WCUTKzMCSngnAwQZjveS+i9Nuw4lVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:ec:35:d6:a8:f3:76:a4:8e:00:1a:32:7a:62:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Validity
Not Before: Jul 2 13:02:13 2026 GMT
Not After : Jul 3 13:02:13 2026 GMT
Subject: CN=5b990d8a74277fb9894a952f70bf680cbc5e01f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:c6:d4:44:de:87:19:86:cb:7d:3d:30:46:
79:e3:d6:b5:34:97:04:88:7e:37:ba:3b:77:26:a2:
86:7b:ae:a9:d1:cb:36:b7:42:3a:e6:b4:56:9f:e9:
0e:d2:48:17:63:8c:f7:a7:0e:61:7f:2f:6c:6b:1c:
a0:d9:0e:30:88:33:b7:3c:07:fe:c4:cf:7a:a1:65:
7f:17:64:4f:54:6b:5b:f7:be:cc:25:f0:80:87:11:
f5:5c:50:19:db:db:f1:1d:c7:2e:e6:85:38:c1:99:
fa:31:a0:d7:80:5f:f8:29:49:d6:0f:d8:e8:b5:fc:
64:d9:ef:da:f7:50:5c:49:7e:35:cf:db:55:2a:71:
66:7e:94:5c:ff:b6:59:d8:f2:8b:67:d4:db:56:ec:
12:9e:1d:ac:19:ff:11:60:b1:cc:e3:4c:2c:89:64:
9e:14:94:21:69:23:bd:bf:b3:c0:1b:f7:8d:15:ad:
d9:33:f6:b8:df:8f:9f:6b:49:37:d4:f7:35:29:62:
da:e6:0b:0b:53:1d:3f:df:42:7e:0b:78:8c:18:58:
b8:8c:14:2a:77:f4:7b:45:b1:8a:16:04:df:e4:a8:
ba:24:fe:d1:ab:22:df:1a:dd:1d:15:a0:8a:79:aa:
96:2c:64:76:a0:d1:45:f8:c9:e8:1f:b4:7c:90:43:
a3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:0D:8A:74:27:7F:B9:89:4A:95:2F:70:BF:68:0C:BC:5E:01:F2
X509v3 Authority Key Identifier:
keyid:D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:c8:e7:6f:ef:04:e5:0d:d2:a9:e6:32:11:59:f0:70:d9:
21:b5:b1:fa:c9:71:cc:00:9f:3d:69:10:a0:0a:7e:82:dc:f1:
cd:fc:13:8e:9d:2d:25:80:fe:ce:4d:55:3e:04:31:2d:8e:19:
5e:3f:6f:d9:91:73:c9:a0:3e:48:ef:3e:3c:42:71:39:00:1f:
0b:c7:09:a9:b9:57:e0:18:d6:14:f7:a9:75:0f:b2:a5:66:6d:
b9:c5:8a:19:14:6c:25:3c:e8:af:23:99:86:0e:d6:d5:fd:9b:
65:1b:bd:71:f0:d1:40:b9:3a:cb:88:f0:ad:80:cb:8c:ff:36:
12:cf:c0:06:eb:88:fd:88:7a:d9:ee:42:20:3f:da:f0:73:02:
90:1a:35:ce:1c:ef:76:49:00:48:40:7b:81:e8:4e:21:90:6f:
10:8b:6d:6c:b9:00:a3:00:75:90:91:43:ff:00:2f:a5:32:99:
94:cf:32:1e:f9:89:54:49:fc:20:0d:87:d0:ec:20:8c:20:be:
00:81:dc:ae:26:26:ee:74:b2:ab:01:aa:74:01:8d:71:15:0f:
03:67:ee:b3:f9:f5:07:55:07:96:e0:91:d0:4b:da:6c:cd:45:
a0:bd:7a:6f:32:66:2e:e1:24:4a:81:09:5f:86:0b:8c:6f:a6:
32:2e:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:48 2026 by rpki-client