Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
File: JUIq59QSPce_KI8TeeQ39uHLKpo.mft (raw, json)
Hash identifier: /qI8Cty3sbpRnCgpdB8GCnuVLndVT+4FsvKndCuB0ms=
Subject key identifier: 00:D3:C6:EC:63:39:E6:B2:AF:94:84:94:FA:3C:FB:44:6C:57:9C:F1
Authority key identifier: 25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
Certificate issuer: /CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Certificate serial: 019C4B4A27DA59FCB62CD78ECA14DDBB23F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
Manifest number: 1190
Signing time: Wed 11 Feb 2026 06:01:16 +0000
Manifest this update: Wed 11 Feb 2026 06:01:16 +0000
Manifest next update: Thu 12 Feb 2026 06:01:16 +0000
Files and hashes: 1: JUIq59QSPce_KI8TeeQ39uHLKpo.crl (hash: iZ/wu4xVj3dxxks/8HR17Jl4Gxx3A+LZSBn/Q5t5WYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:4a:27:da:59:fc:b6:2c:d7:8e:ca:14:dd:bb:23:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25422ae7d4123dc7bf288f1379e437f6e1cb2a9a
Validity
Not Before: Feb 11 06:01:16 2026 GMT
Not After : Feb 12 06:01:16 2026 GMT
Subject: CN=00d3c6ec6339e6b2af948494fa3cfb446c579cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:ab:b0:3f:74:46:da:2a:1a:cd:90:72:78:
bf:c5:86:cc:7b:16:ab:5a:b9:d1:99:81:f3:7d:fd:
8a:2d:ac:e5:f2:5e:fb:d9:ec:10:0d:f7:d6:19:8b:
8e:35:0c:9c:84:e8:cf:e2:bf:54:d7:fc:34:a4:74:
88:f6:53:8c:33:95:62:f2:27:44:7a:85:41:28:49:
ab:cf:69:f3:e3:47:c8:88:4e:b9:f4:3b:99:1e:2c:
b9:d1:31:56:d3:5b:21:69:23:46:af:5e:47:b0:f0:
f8:d2:d2:04:80:1e:90:a0:14:38:b5:95:2e:08:24:
84:37:5f:61:13:60:92:3a:1e:05:20:26:31:2e:15:
73:fe:0e:a1:81:91:11:ca:e8:16:ee:9c:14:ec:df:
9c:b5:67:65:89:20:27:31:39:92:c7:af:45:00:c4:
3f:ab:51:b4:c2:d3:dc:62:aa:0b:7d:11:e9:c2:fc:
f5:b4:2b:2d:80:bf:4e:81:54:fe:8b:d9:11:41:7c:
82:c0:8d:10:a6:92:04:44:dd:26:d0:4b:0f:f6:69:
6a:24:ab:47:86:8d:41:76:0c:73:09:a5:b5:77:b9:
90:b3:ee:0d:e5:b9:d6:38:ea:82:a0:a2:c4:7c:4a:
1d:45:72:b0:35:65:43:c7:e1:52:72:07:25:6a:1a:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D3:C6:EC:63:39:E6:B2:AF:94:84:94:FA:3C:FB:44:6C:57:9C:F1
X509v3 Authority Key Identifier:
keyid:25:42:2A:E7:D4:12:3D:C7:BF:28:8F:13:79:E4:37:F6:E1:CB:2A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUIq59QSPce_KI8TeeQ39uHLKpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7bdd71-1553-47e4-aa00-faa6becdaf05/1/JUIq59QSPce_KI8TeeQ39uHLKpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:24:9c:82:50:d9:c1:0f:92:c3:f3:8f:72:96:d0:d3:73:3e:
e2:41:ad:4f:80:35:82:56:21:58:6a:0b:08:d0:0b:74:43:0e:
89:2d:4b:aa:b0:0e:d8:7c:4f:95:09:a3:3f:66:00:9d:71:f1:
b5:5e:c4:54:8d:91:31:01:10:14:9c:43:14:15:33:b0:15:cb:
e0:04:0c:98:92:01:d4:f0:a1:f6:f3:73:38:b5:e9:83:00:b9:
00:45:b2:ff:4b:d5:30:29:85:b7:0e:ae:8e:8e:e4:46:74:e2:
1d:43:91:6f:98:d6:74:3c:3f:72:cc:c1:5d:ab:16:c1:c7:b9:
b6:80:78:e8:f2:40:47:c9:30:69:32:3e:56:0c:40:5b:36:24:
16:2a:45:96:b8:d0:9d:21:14:fe:82:73:6d:51:e4:b7:69:77:
a6:15:13:08:a1:ec:e5:c3:79:b5:bd:5f:84:b2:41:14:86:d2:
1f:1a:dc:83:20:3a:f5:a3:03:af:de:6e:d8:a8:7f:7a:fa:64:
27:cc:a3:2e:e2:2d:40:63:99:b8:02:d7:db:ab:bd:82:59:a4:
4b:6b:7d:9a:58:dc:e5:0d:97:41:33:09:9e:29:f5:11:ba:9a:
74:cf:0c:3f:1a:21:e1:f5:33:b2:74:ad:2d:7c:82:69:a5:9a:
6e:65:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:40:53 2026 by rpki-client