Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: 6HPeqt6AQnERbxfoV9WT23c2nQC9Q0TTsW8psOshjaA=
Subject key identifier: 9C:EA:1C:52:3E:2A:5A:70:5E:67:50:9C:49:77:0C:72:7F:FD:A2:8A
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 019DF539C988C461D80F627DC0A2F46256A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 125D
Signing time: Mon 04 May 2026 23:01:38 +0000
Manifest this update: Mon 04 May 2026 23:01:38 +0000
Manifest next update: Tue 05 May 2026 23:01:38 +0000
Files and hashes: 1: 1-_xreJrOs3w9ZGU1IhIWpYpavKY.roa (hash: cDUbfiWVCS31IunzF5QHEKWOVDVj3fc59oC6ui5b0TI=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: 5hoQ4JzccJCpax/p9njK0vf1imQOlIc5YYww4wHxElg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f5:39:c9:88:c4:61:d8:0f:62:7d:c0:a2:f4:62:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: May 4 23:01:38 2026 GMT
Not After : May 5 23:01:38 2026 GMT
Subject: CN=9cea1c523e2a5a705e67509c49770c727ffda28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:ea:a2:5a:46:00:c0:0a:5a:b7:48:bb:56:
f6:f0:89:19:83:b5:1b:34:80:9d:b8:8d:2c:37:d7:
68:76:bb:53:c9:ef:62:2c:e4:82:98:c0:bb:1b:15:
df:f9:29:f3:d7:47:f0:ec:a9:fa:af:d9:cd:b0:31:
93:bf:2d:20:6b:9e:1e:b4:39:82:76:18:6e:29:46:
54:08:ab:70:45:74:53:b4:8c:38:04:4b:1e:43:b2:
32:b0:bc:d8:34:86:53:3d:18:2b:6d:67:aa:85:7a:
cf:33:5b:e6:56:2a:e9:b9:f3:8f:96:1d:b6:bb:33:
1e:27:fb:91:65:83:8a:84:71:a4:6b:23:34:ca:66:
7a:88:20:f4:cc:b6:d0:4c:0f:41:df:a0:6c:2c:27:
44:77:ef:0b:7d:91:1d:55:97:ee:b4:6e:b4:11:89:
31:92:d9:a1:af:17:4a:aa:cb:78:2a:35:29:ab:4c:
5f:47:f2:da:9d:7d:80:5e:ae:d1:7c:b7:fc:e8:b2:
60:49:7b:3e:47:6f:dc:9d:8b:00:b0:7d:8a:b1:1f:
6b:ad:38:9a:04:5d:cd:56:6a:84:30:1a:93:1a:96:
90:95:11:8e:31:aa:b0:89:48:0d:2f:10:15:a3:dc:
f1:25:50:c8:10:44:d2:1d:ab:aa:93:31:2a:8d:aa:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:1C:52:3E:2A:5A:70:5E:67:50:9C:49:77:0C:72:7F:FD:A2:8A
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:95:58:1a:30:af:26:74:9d:5c:f5:1c:ae:99:24:fc:aa:e5:
bf:a8:fc:7b:86:c1:e1:be:b3:05:37:e5:6c:0c:58:c9:23:f7:
30:9d:3d:59:95:59:99:fd:3a:34:28:b9:1f:d4:4c:58:bc:e6:
eb:ef:b9:36:69:b5:bc:78:96:ca:20:36:23:26:d8:b7:e2:0f:
fa:d1:d9:14:97:5d:bf:c8:b8:71:db:c3:11:36:a6:7f:fb:93:
ad:61:d0:af:d8:22:ca:1f:e0:be:40:8a:3f:1b:6c:e1:8c:5b:
87:af:6a:ee:0a:c6:ea:5a:fa:e6:64:84:a6:79:99:44:e2:bc:
12:7d:2c:d0:df:49:34:72:34:f7:0a:82:c4:32:2a:82:d7:f7:
83:ed:cd:ba:bf:9e:46:f7:56:30:e4:e0:e0:ab:4f:06:93:d9:
11:b8:7d:dc:d4:f6:6c:f9:59:f4:6e:a2:53:6f:df:8b:85:db:
a7:20:f5:be:89:84:fa:e1:b7:8f:ec:e1:b7:e0:bb:f6:e2:fe:
e3:ad:31:46:e5:1f:7c:4b:11:e9:29:1a:93:0e:da:ca:a5:2f:
d9:e9:a9:b0:95:f9:c7:da:03:d9:90:4a:86:f4:b1:68:03:b9:
79:6e:fa:63:58:03:d5:b7:bc:62:a1:cc:32:57:a1:d0:60:9d:
53:77:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:04 2026 by rpki-client