Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: u3c2p42XD6u38mcLLHmIwjATJ1g77A+8Fwxx/9htHkE=
Subject key identifier: 11:73:4A:20:60:07:CC:74:79:82:0B:B4:04:61:52:9C:29:C5:AA:A6
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 019EFC4C5E56A363F0DED61CB44C237A801A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 09C8
Signing time: Thu 25 Jun 2026 01:02:03 +0000
Manifest this update: Thu 25 Jun 2026 01:02:03 +0000
Manifest next update: Fri 26 Jun 2026 01:02:03 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: nY+wQqgtDozCS+UBowa4mVBd48Pr2DKLgThD31sV1cg=)
2: 2yhdKHvPD6x57cR2KCiWvDWOuNI.roa (hash: P8G4fD653ANAlH3OwS5YzFRY2dEK5yZI+P33CF+4huY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4c:5e:56:a3:63:f0:de:d6:1c:b4:4c:23:7a:80:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Jun 25 01:02:03 2026 GMT
Not After : Jun 26 01:02:03 2026 GMT
Subject: CN=11734a206007cc7479820bb40461529c29c5aaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:f4:4e:b3:9e:35:ca:62:d7:d2:b9:5f:5a:
52:22:0f:a6:fa:c6:e3:d6:dd:f4:12:b7:3e:3b:75:
03:f4:11:ad:6b:12:06:0b:68:83:21:d6:2f:44:dd:
cd:b1:8b:52:33:8a:77:a1:16:4e:5c:38:80:e6:08:
62:3a:26:90:77:a6:36:fc:03:81:68:1b:78:c5:57:
d9:ff:ab:f4:92:74:63:0e:66:e8:fc:a8:31:fd:00:
19:09:b6:df:04:2c:85:67:e3:05:49:00:ec:f3:04:
9a:45:7e:ec:7a:8e:8e:be:3e:10:07:31:6e:40:cb:
70:71:29:0c:7d:9b:51:17:38:79:7b:38:a0:1b:82:
f6:33:54:99:fb:90:21:52:32:0f:f9:49:dd:d5:32:
bc:4b:b3:96:7e:57:4d:ac:90:87:c2:54:61:e9:d6:
98:77:98:ac:35:35:b9:ec:d9:f0:e3:b2:64:cd:2e:
7a:40:ea:42:00:94:20:d9:61:1c:c1:16:ff:6f:76:
31:49:41:5f:2a:b5:49:88:1e:80:38:fd:a2:03:ca:
d4:b0:c8:4a:49:67:05:d4:7a:a8:c2:9b:4b:25:87:
c2:04:50:dd:b7:13:26:2a:54:bb:3e:bd:05:42:bf:
23:ac:79:8f:f2:cf:7e:94:0b:ee:fe:e2:c7:3a:28:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:4A:20:60:07:CC:74:79:82:0B:B4:04:61:52:9C:29:C5:AA:A6
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:75:30:2b:38:91:b7:58:85:07:8f:08:18:62:8b:d2:3b:f6:
88:68:39:95:7a:d9:3e:b7:1e:68:5e:66:62:87:51:64:e7:c3:
83:f8:f9:ad:de:79:5f:23:fe:a5:ac:cb:93:8b:fe:21:a9:c3:
e1:46:23:fa:c9:b5:10:fc:c5:57:f0:4a:d3:61:a5:2a:0e:33:
39:6a:b9:28:ed:9c:80:01:98:64:68:e6:39:ce:ef:bc:ae:62:
59:62:e6:db:0d:08:84:22:b7:29:2c:82:e5:44:a5:c9:12:bb:
1c:be:56:d8:cf:7a:f8:c1:0a:af:f6:42:31:54:14:34:46:b7:
8e:49:bb:84:61:02:3d:00:f7:ae:2b:49:18:d1:e8:84:48:35:
56:42:92:8b:aa:97:9f:91:8a:97:31:93:cb:00:c9:12:c5:e0:
7e:f8:8e:bc:69:fb:b0:7c:68:76:e7:59:a8:ce:99:34:19:13:
56:dd:84:f4:9a:fa:f5:34:6d:72:70:a2:8e:76:b4:99:5a:aa:
65:48:24:ef:91:e4:93:05:db:bb:ab:91:02:e9:e6:f4:45:d3:
6c:b9:c9:58:2c:f8:d2:f2:ef:6f:bf:24:06:7e:ad:f8:15:97:
8d:6d:81:a6:3e:72:fa:1d:22:ba:22:e8:1f:43:34:1d:bb:29:
3e:46:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:34 2026 by rpki-client