Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
File: cop1W_9p20tgWlFDplt9w5y6u7E.mft (raw, json)
Hash identifier: PgivX2IUC1xVDW/eKjZ80rnFTWgr3XXqJsMIZPo8ZCs=
Subject key identifier: 8D:24:60:93:6E:09:C5:F0:AE:DE:0A:D0:5B:51:0C:4E:2A:8D:7B:20
Authority key identifier: 72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
Certificate issuer: /CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Certificate serial: 019BFF8B08D2A279FD1A886FF148B29D33A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
Manifest number: 11AC
Signing time: Tue 27 Jan 2026 13:01:00 +0000
Manifest this update: Tue 27 Jan 2026 13:01:00 +0000
Manifest next update: Wed 28 Jan 2026 13:01:00 +0000
Files and hashes: 1: cop1W_9p20tgWlFDplt9w5y6u7E.crl (hash: F0yE+lvi1tK5xyI1ZOBolkdB1CVNle9ubJS485PfGAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:8b:08:d2:a2:79:fd:1a:88:6f:f1:48:b2:9d:33:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Validity
Not Before: Jan 27 13:01:00 2026 GMT
Not After : Jan 28 13:01:00 2026 GMT
Subject: CN=8d2460936e09c5f0aede0ad05b510c4e2a8d7b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:3d:a8:bc:2c:ac:a5:78:64:57:84:98:d1:
2b:2b:04:69:8c:2c:35:8b:6e:af:cc:d2:40:00:37:
64:d7:b7:2e:74:2a:90:9b:6d:f6:eb:2e:b9:96:fa:
4b:7b:ea:2d:3e:5e:61:76:22:58:26:27:08:94:42:
82:02:62:69:42:97:66:c9:e5:b0:6f:fa:a8:d2:51:
ac:06:7b:6f:d2:03:9a:01:68:87:3a:9b:8c:93:c8:
1a:e6:22:7b:b8:1b:e7:0b:a0:b5:03:2c:de:33:1e:
12:5d:bd:d2:b0:6b:08:31:09:b6:d1:64:ab:aa:a8:
6f:14:95:bb:5b:90:72:02:8c:d5:05:9b:8c:83:82:
bf:36:d7:44:3b:c4:76:06:51:95:e2:b9:86:bc:5a:
d4:a3:68:96:eb:2c:b3:e4:85:42:e4:36:18:8f:a5:
42:ab:21:11:5c:49:ee:7a:a8:55:7e:a0:02:e1:65:
61:9c:f7:b9:4c:ce:e9:1a:86:c9:85:be:a6:07:e9:
1b:fa:96:7f:51:a4:57:f3:47:3a:79:2a:0e:fe:de:
a7:e5:be:51:22:ca:95:df:f7:04:cc:8f:70:d4:14:
89:fe:d7:ba:70:1a:48:56:df:15:66:f3:2e:88:31:
08:af:64:83:2c:77:82:ff:e2:c2:4d:c2:35:80:82:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:60:93:6E:09:C5:F0:AE:DE:0A:D0:5B:51:0C:4E:2A:8D:7B:20
X509v3 Authority Key Identifier:
keyid:72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c8:cd:bf:cd:51:f2:7b:78:07:66:41:5d:6a:fa:90:87:21:
78:1a:71:88:05:f8:17:80:e3:4e:43:a9:18:20:8b:39:97:c2:
72:25:fc:48:a4:d7:78:3e:ad:a0:a0:c6:3a:a2:1b:26:b4:84:
c1:11:e4:64:c8:62:b9:9b:d7:ff:21:fc:53:25:06:36:e2:39:
ba:21:a8:e0:15:09:9a:ba:6e:a5:5c:b7:8c:eb:14:14:10:26:
31:5c:1c:aa:83:77:15:89:27:50:c4:ae:f1:80:ca:e8:4d:e7:
d4:39:4c:48:3d:12:ca:e5:0c:8e:40:7e:5f:b9:cc:a3:3e:f8:
9e:97:09:f6:fd:00:14:de:f4:46:1d:4b:92:47:0f:5f:a0:0d:
71:53:77:0a:24:cf:ed:b7:2a:5f:57:12:61:11:9b:3d:b8:46:
87:51:f6:fb:96:52:5f:90:98:5c:69:bc:3a:2d:ff:68:b6:76:
a0:77:57:0f:92:82:a4:ca:62:ce:df:09:33:94:69:a4:26:04:
f2:69:3c:2a:50:65:2e:24:81:7f:da:63:de:a4:86:b3:a4:30:
a6:31:f2:9c:6d:1b:01:bf:70:d1:b3:93:7e:ad:39:09:bc:2a:
a6:6f:f7:af:8c:77:f7:62:f2:18:17:b7:f7:a8:a7:3b:82:e9:
72:24:ef:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv/iwjSonn9Gohv8UiynTOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOGE3NTViZmY2OWRiNGI2MDVhNTE0M2E2NWI3ZGMzOWNi
YWJiYjEwHhcNMjYwMTI3MTMwMTAwWhcNMjYwMTI4MTMwMTAwWjAzMTEwLwYDVQQD
Eyg4ZDI0NjA5MzZlMDljNWYwYWVkZTBhZDA1YjUxMGM0ZTJhOGQ3YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrE9qLwsrKV4ZFeEmNErKwRpjCw1
i26vzNJAADdk17cudCqQm2326y65lvpLe+otPl5hdiJYJicIlEKCAmJpQpdmyeWw
b/qo0lGsBntv0gOaAWiHOpuMk8ga5iJ7uBvnC6C1AyzeMx4SXb3SsGsIMQm20WSr
qqhvFJW7W5ByAozVBZuMg4K/NtdEO8R2BlGV4rmGvFrUo2iW6yyz5IVC5DYYj6VC
qyERXEnueqhVfqAC4WVhnPe5TM7pGobJhb6mB+kb+pZ/UaRX80c6eSoO/t6n5b5R
IsqV3/cEzI9w1BSJ/te6cBpIVt8VZvMuiDEIr2SDLHeC/+LCTcI1gILKiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0kYJNuCcXwrt4K0FtRDE4qjXsgMB8GA1UdIwQY
MBaAFHKKdVv/adtLYFpRQ6ZbfcOcuruxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29wMVdfOXAyMHRnV2xGRHBsdDl3NXk2dTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OGNjYmMtMmI3My00MTc2LWI5YWEt
OGMzNzhhZTE4NjBiLzEvY29wMVdfOXAyMHRnV2xGRHBsdDl3NXk2dTdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81OGNjYmMtMmI3My00MTc2LWI5YWEtOGMzNzhhZTE4NjBi
LzEvY29wMVdfOXAyMHRnV2xGRHBsdDl3NXk2dTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8jNv81R
8nt4B2ZBXWr6kIcheBpxiAX4F4DjTkOpGCCLOZfCciX8SKTXeD6toKDGOqIbJrSE
wRHkZMhiuZvX/yH8UyUGNuI5uiGo4BUJmrpupVy3jOsUFBAmMVwcqoN3FYknUMSu
8YDK6E3n1DlMSD0SyuUMjkB+X7nMoz74npcJ9v0AFN70Rh1LkkcPX6ANcVN3CiTP
7bcqX1cSYRGbPbhGh1H2+5ZSX5CYXGm8Oi3/aLZ2oHdXD5KCpMpizt8JM5RppCYE
8mk8KlBlLiSBf9pj3qSGs6QwpjHynG0bAb9w0bOTfq05Cbwqpm/3r4x392LyGBe3
96inO4LpciTvLA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:42:31 2026 by rpki-client