
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
File: rS2L1OZ06M7VoJfUPepxhETnivU.mft (raw, json)
Hash identifier: iTv4NKuziIFnz8lUxzDwyir0bM+Q/lsG4lnct3houuk=
Subject key identifier: C3:B2:3F:35:66:F7:19:D1:E5:62:E1:08:D4:8B:16:99:59:30:3B:78
Authority key identifier: AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
Certificate issuer: /CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Certificate serial: 019F224776653FC741E5535FB530CC53D960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
Manifest number: 165D
Signing time: Thu 02 Jul 2026 10:02:16 +0000
Manifest this update: Thu 02 Jul 2026 10:02:16 +0000
Manifest next update: Fri 03 Jul 2026 10:02:16 +0000
Files and hashes: 1: rS2L1OZ06M7VoJfUPepxhETnivU.crl (hash: 0zluPezKZLe7whU8GhEXWTLlQFHZ3a29fahTH3tKsKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:76:65:3f:c7:41:e5:53:5f:b5:30:cc:53:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d8bd4e674e8ced5a097d43dea718444e78af5
Validity
Not Before: Jul 2 10:02:16 2026 GMT
Not After : Jul 3 10:02:16 2026 GMT
Subject: CN=c3b23f3566f719d1e562e108d48b169959303b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:1b:ea:80:4f:cd:ef:7b:1c:29:c1:c5:d7:
a6:31:61:0f:5d:f2:c5:88:d9:b7:3d:5a:4a:d3:fe:
de:bf:8c:87:c7:13:b4:68:c9:f5:26:44:59:06:f4:
e7:9d:7e:dc:e5:7f:3d:d5:3c:6b:09:fe:4d:a2:94:
b6:f4:08:95:3d:d5:5f:42:fd:c2:a9:b5:58:68:07:
3f:cd:e5:a9:1d:7d:33:e8:b9:45:08:15:49:e3:75:
6f:83:7d:d1:84:be:99:ac:d3:a2:34:97:c8:05:80:
52:e0:01:9f:1b:52:d5:bb:f0:8a:62:70:f2:0d:b9:
8e:94:33:16:18:d4:11:84:ed:dd:2d:74:37:4e:01:
d1:da:16:6a:f6:d2:66:24:fa:08:4b:02:b8:74:29:
53:25:e9:e8:4f:7c:88:6d:30:82:ee:d3:d6:6c:60:
dd:4b:e1:30:99:29:45:d7:54:40:da:46:8b:9c:de:
be:d3:03:f1:cd:4e:2d:45:47:97:0d:be:cb:05:88:
71:93:43:1c:30:44:e4:18:5d:29:f0:0a:8f:74:7c:
e4:bc:bf:68:37:61:59:f5:31:5f:bc:f6:11:5f:9a:
a5:1f:95:5a:de:59:75:0b:f9:0b:7f:24:09:4c:6c:
b0:96:55:9a:92:18:74:af:2c:f7:8f:df:80:47:ea:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B2:3F:35:66:F7:19:D1:E5:62:E1:08:D4:8B:16:99:59:30:3B:78
X509v3 Authority Key Identifier:
keyid:AD:2D:8B:D4:E6:74:E8:CE:D5:A0:97:D4:3D:EA:71:84:44:E7:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS2L1OZ06M7VoJfUPepxhETnivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/rS2L1OZ06M7VoJfUPepxhETnivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f0:96:69:7e:e2:27:31:19:fa:7c:86:87:f8:bb:14:34:84:
48:1a:b3:db:9f:e3:36:57:0d:67:5d:b3:0e:5f:9b:fd:b8:05:
98:24:e5:97:97:b6:98:34:b3:c7:99:c3:72:7c:1b:3e:2a:d9:
f0:bc:67:bc:2c:fd:ae:73:e5:63:10:c9:21:65:c1:e4:43:23:
1d:17:95:ca:4f:e3:9e:a8:ac:6c:86:31:31:3e:ca:ae:94:8c:
b7:9b:75:12:95:61:d7:e8:11:ec:23:d3:dd:d3:bc:6c:92:47:
4e:d3:b2:a6:95:ce:ea:77:a4:67:8f:8d:a1:25:bb:7c:83:58:
08:a7:90:d1:88:dd:0a:4c:47:50:0d:33:c2:77:71:1b:52:b5:
d3:1c:3c:72:95:4c:fc:c3:ca:77:c0:9a:b4:50:ef:6b:36:0c:
b3:36:ba:42:14:8d:cc:1f:54:4b:da:73:98:c5:80:97:22:6c:
03:a8:d1:ef:00:fa:29:7e:18:b1:5b:76:0b:72:fa:d2:24:49:
b4:e2:6f:49:6c:19:73:38:31:75:fc:e3:57:f7:9e:07:b0:91:
9a:2a:18:87:1b:64:1c:0e:6e:03:de:49:5b:d1:e8:76:8b:e9:
98:6c:ef:44:b7:f1:cd:20:7d:22:11:7b:59:02:21:cf:9c:ae:
e0:62:dd:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iR3ZlP8dB5VNftTDMU9lgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmQ4YmQ0ZTY3NGU4Y2VkNWEwOTdkNDNkZWE3MTg0NDRl
NzhhZjUwHhcNMjYwNzAyMTAwMjE2WhcNMjYwNzAzMTAwMjE2WjAzMTEwLwYDVQQD
EyhjM2IyM2YzNTY2ZjcxOWQxZTU2MmUxMDhkNDhiMTY5OTU5MzAzYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL0b6oBPze97HCnBxdemMWEPXfLF
iNm3PVpK0/7ev4yHxxO0aMn1JkRZBvTnnX7c5X891TxrCf5NopS29AiVPdVfQv3C
qbVYaAc/zeWpHX0z6LlFCBVJ43Vvg33RhL6ZrNOiNJfIBYBS4AGfG1LVu/CKYnDy
DbmOlDMWGNQRhO3dLXQ3TgHR2hZq9tJmJPoISwK4dClTJenoT3yIbTCC7tPWbGDd
S+EwmSlF11RA2kaLnN6+0wPxzU4tRUeXDb7LBYhxk0McMETkGF0p8AqPdHzkvL9o
N2FZ9TFfvPYRX5qlH5Va3ll1C/kLfyQJTGywllWakhh0ryz3j9+AR+rL2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOyPzVm9xnR5WLhCNSLFplZMDt4MB8GA1UdIwQY
MBaAFK0ti9TmdOjO1aCX1D3qcYRE54r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wODNmMjMtMjZlYy00MDMxLTg1M2Mt
ODJmMTUxYjY2NGM1LzEvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wODNmMjMtMjZlYy00MDMxLTg1M2MtODJmMTUxYjY2NGM1
LzEvclMyTDFPWjA2TTdWb0pmVVBlcHhoRVRuaXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/CWaX7i
JzEZ+nyGh/i7FDSESBqz25/jNlcNZ12zDl+b/bgFmCTll5e2mDSzx5nDcnwbPirZ
8LxnvCz9rnPlYxDJIWXB5EMjHReVyk/jnqisbIYxMT7KrpSMt5t1EpVh1+gR7CPT
3dO8bJJHTtOyppXO6nekZ4+NoSW7fINYCKeQ0YjdCkxHUA0zwndxG1K10xw8cpVM
/MPKd8CatFDvazYMsza6QhSNzB9US9pzmMWAlyJsA6jR7wD6KX4YsVt2C3L60iRJ
tOJvSWwZczgxdfzjV/eeB7CRmioYhxtkHA5uA95JW9HodovpmGzvRLfxzSB9IhF7
WQIhz5yu4GLdkw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:50 2026 by rpki-client