Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: A5lXRGu0iA44Q2Lm/24YVG0Ncw9rGjO4BzteroXLtLc=
Subject key identifier: 7B:1C:D6:DB:3E:77:35:90:40:BF:C8:46:C9:43:DF:62:31:25:FC:FE
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 019F22EC4AB6EE248ADC59E5374412C99A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 198B
Signing time: Thu 02 Jul 2026 13:02:18 +0000
Manifest this update: Thu 02 Jul 2026 13:02:18 +0000
Manifest next update: Fri 03 Jul 2026 13:02:18 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: b0ffY73+Kbx5rgY9sCz043y0iEwvMQkmrJcMe/4Efvk=)
2: murlFmYx_3jII0U53z-9rIh7SG8.roa (hash: w5yfDhjnwIlIIwe71gL9gqS+X/CBCtrwx72RMbEM/eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:ec:4a:b6:ee:24:8a:dc:59:e5:37:44:12:c9:9a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: Jul 2 13:02:18 2026 GMT
Not After : Jul 3 13:02:18 2026 GMT
Subject: CN=7b1cd6db3e77359040bfc846c943df623125fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e5:a6:67:04:c3:00:8d:d7:32:61:28:5c:e0:
d9:c1:31:5b:28:9c:33:8f:c1:c6:22:a8:a3:7e:52:
fe:d6:1b:19:6d:0c:ec:72:0a:4d:da:0b:1e:97:77:
17:ca:06:36:cb:33:69:26:5d:f4:fa:f6:2c:7a:ce:
a2:46:ec:ec:00:92:75:d0:53:e4:77:02:5a:bf:b0:
c7:8e:7f:ae:52:6d:b4:84:4d:db:80:d6:67:73:e2:
31:a1:de:8e:b5:ef:0f:90:48:e5:54:81:32:44:96:
e8:43:9f:55:d2:fd:92:5d:99:13:bc:7b:9d:99:f5:
a4:79:0f:9e:e8:ed:66:e2:02:f1:45:e8:21:b9:97:
15:0f:30:1e:2d:fe:32:d8:7a:bf:66:9b:f4:fb:ae:
07:b0:c5:62:ec:c9:33:66:01:1b:be:d7:47:f8:96:
ea:f4:7f:fb:81:18:06:34:07:32:18:20:7d:84:0a:
95:80:cc:cb:2c:b9:e7:df:2e:d8:f4:be:da:ec:ca:
20:57:79:71:15:6c:90:c1:b2:62:25:cf:dd:75:67:
46:2d:e7:45:23:5b:3a:f1:4d:4f:bc:43:a4:d3:ca:
0f:b8:29:c1:c8:c6:c7:72:7b:bf:69:4a:ea:46:e4:
38:c2:73:97:67:41:19:39:34:fb:ee:6c:94:2f:81:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:D6:DB:3E:77:35:90:40:BF:C8:46:C9:43:DF:62:31:25:FC:FE
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7d:b3:cc:26:eb:b4:4a:ba:1f:da:f3:fa:1e:c9:b3:f1:b1:
b6:cf:e2:14:38:b4:89:7a:70:fe:90:4f:74:4e:be:38:7c:22:
2c:bd:bd:a7:ee:c6:17:1a:b3:5e:08:f7:88:0a:5b:48:d3:5b:
b3:e5:08:8f:9b:b3:f7:4a:64:39:b4:50:dd:6d:0f:7a:e4:52:
10:8b:f3:9a:28:44:85:16:96:e5:c4:25:bc:17:c7:31:05:fe:
34:c3:a6:c1:8b:13:34:2f:1f:b5:37:de:e5:74:b7:e6:f1:e1:
ec:9b:90:5b:6c:a1:5e:12:6b:84:cb:28:fc:38:12:37:47:06:
a4:c0:16:a4:ea:3c:dc:9e:66:e0:1b:9f:8e:d5:2c:94:94:8b:
0d:98:1a:02:ad:d2:a2:26:11:7d:18:3b:03:53:d4:a3:52:d2:
0d:0a:2c:79:58:51:10:de:b2:73:9d:a3:45:4a:1a:c9:d9:30:
26:d5:2d:cb:6f:6f:89:f1:8e:5f:26:7f:83:d5:95:5a:17:6e:
2a:8d:68:81:5f:62:e4:c0:70:44:0a:cf:f2:1c:15:4f:17:6a:
58:f2:77:c3:96:d1:65:60:bc:90:91:9b:74:de:55:8c:49:72:
80:26:dd:55:c7:92:51:99:6c:f7:10:f2:bf:a8:27:43:cb:a3:
c9:f3:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:15 2026 by rpki-client