Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File: VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier: zoIrhdDNv5NpHvicIKTs/iOLFhCyBOBya7i54jubU5s=
Subject key identifier: B2:7B:ED:6C:11:24:7C:EC:28:FB:67:70:70:8F:51:F7:B5:D0:4C:44
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer: /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial: 019F216B8C2FAB9BB524B95B253C03A73259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number: 1607
Signing time: Thu 02 Jul 2026 06:02:04 +0000
Manifest this update: Thu 02 Jul 2026 06:02:04 +0000
Manifest next update: Fri 03 Jul 2026 06:02:04 +0000
Files and hashes: 1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: vU3Q+HhiI/hrSsK/QwC7dSqRPCKD+1o36iCLLnrt9pU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:8c:2f:ab:9b:b5:24:b9:5b:25:3c:03:a7:32:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
Validity
Not Before: Jul 2 06:02:04 2026 GMT
Not After : Jul 3 06:02:04 2026 GMT
Subject: CN=b27bed6c11247cec28fb6770708f51f7b5d04c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:16:c6:4c:96:6d:c9:77:66:be:3c:f0:e7:
87:dc:29:7c:6e:0d:12:2f:b9:e5:55:15:38:48:eb:
59:df:5f:e1:a5:90:88:bd:55:9c:36:40:f9:4a:94:
d2:59:50:3d:36:bc:e6:47:11:d6:34:5d:6e:5c:ac:
b8:1b:90:5b:ca:bc:65:6c:64:56:d2:3f:b6:5f:12:
ba:95:31:7c:71:b3:d0:76:26:06:f9:99:a3:ee:03:
00:80:07:4a:86:a3:a0:0f:03:fd:14:20:54:c0:da:
75:3a:64:b8:82:10:71:0f:c2:07:47:99:98:6f:21:
d8:bd:bd:3c:c7:c9:92:36:6b:c4:1e:d9:d2:61:5c:
cc:ca:b2:54:8d:cd:c5:1e:c1:80:c1:5a:d3:01:02:
23:8d:26:fe:93:4b:cd:b1:2d:14:e3:e4:b2:0f:94:
fb:bc:61:26:83:8b:07:81:ce:93:2e:92:1a:aa:59:
3c:79:04:77:11:4a:43:a1:8c:94:72:5a:b8:aa:2a:
a8:7a:a2:85:50:18:00:bc:ed:85:86:67:0a:66:ac:
ad:ef:e1:4b:d9:7c:e2:5c:40:3a:22:64:c8:eb:27:
36:20:7e:02:6a:5b:48:c5:4e:dc:a5:6f:34:77:0f:
ad:0d:3c:12:d0:38:95:7f:9f:5e:32:64:a4:26:6c:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:ED:6C:11:24:7C:EC:28:FB:67:70:70:8F:51:F7:B5:D0:4C:44
X509v3 Authority Key Identifier:
keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b3:65:cd:2c:a6:30:12:75:7f:9c:b3:0b:b2:14:e9:58:53:
fb:8d:a8:ee:f0:a6:60:8f:ad:01:a3:23:b4:00:69:56:8c:af:
d6:80:a0:41:6b:b5:f0:19:68:7b:59:c6:6c:41:de:8e:c2:06:
1d:0b:6f:00:bc:d7:18:9a:36:a7:c4:02:d8:67:98:21:fe:c2:
95:e8:bf:3e:91:e9:0c:2b:99:fb:65:24:cc:d2:88:0b:e5:de:
2e:35:fe:a8:9a:74:ce:e4:16:25:46:57:89:a9:7a:c4:4f:63:
8d:94:cd:21:07:5d:21:a2:de:4c:a3:e1:4a:28:a3:42:9f:4a:
79:ba:db:b9:85:b8:4a:e3:30:52:f4:26:79:f1:da:c3:30:ba:
11:ca:52:0d:3f:4d:6c:cb:71:ba:41:a4:5d:b5:11:95:4e:46:
97:66:eb:d1:1b:79:77:1a:d3:4f:91:dd:35:e7:15:c8:cd:e8:
3b:bd:61:ad:1b:1d:af:93:ac:8c:ea:be:0b:fa:a9:ed:fc:fd:
2f:ba:43:5f:3c:22:91:3b:5a:84:f6:4a:3c:b2:aa:b7:aa:69:
aa:ac:97:9c:1c:98:14:c9:17:48:7e:59:9a:18:d0:e1:d6:be:
6e:6a:d2:fc:55:ad:bf:bf:c7:10:f8:18:fe:c9:7a:3e:de:48:
05:c6:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:12 2026 by rpki-client