Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: /+ZNYaKUE7f0Q0q3evqbyP5a/153KB/jo5sIE70Ty1k=
Subject key identifier: 9C:A7:62:86:4B:7D:D5:74:4E:75:CD:7A:78:6E:2B:60:F2:F0:5F:C1
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 019B68E9AAC86C9D008D220FA014BADF4EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0FBF
Signing time: Mon 29 Dec 2025 07:01:42 +0000
Manifest this update: Mon 29 Dec 2025 07:01:42 +0000
Manifest next update: Tue 30 Dec 2025 07:01:42 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: XQe30tc0StJk8ijnNMwtdnCLm9nuK3NeFCEV7Bvdyrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:68:e9:aa:c8:6c:9d:00:8d:22:0f:a0:14:ba:df:4e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Dec 29 07:01:42 2025 GMT
Not After : Dec 30 07:01:42 2025 GMT
Subject: CN=9ca762864b7dd5744e75cd7a786e2b60f2f05fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6f:9e:a8:70:55:b3:da:ec:78:c7:ac:ad:bb:
a4:e0:3b:00:ae:23:68:f3:c1:8d:70:cd:73:94:d8:
f0:bc:36:01:c2:e0:08:d1:f4:d4:25:31:24:4f:b9:
9c:2f:a2:1b:4a:61:26:09:d8:57:d2:cb:35:29:6e:
38:a4:06:09:ab:7b:a2:c0:34:38:8f:89:57:80:92:
8f:58:09:27:bd:0b:b7:f3:5f:eb:6b:a0:da:d5:dd:
87:50:43:10:98:ce:af:8c:1d:93:d5:7e:ed:ae:a7:
9c:41:68:20:39:eb:6b:5a:0f:08:ba:00:bf:67:7b:
1d:45:b9:e2:c9:2e:49:c2:49:3f:9f:43:c8:1f:3e:
f6:57:e1:51:37:4b:07:92:28:be:f8:d0:a4:b1:24:
29:11:0a:43:80:57:17:b3:26:0b:4e:ca:7b:7e:db:
a3:58:8f:5f:bd:3a:0f:21:f7:4a:50:4f:ed:74:d4:
17:69:35:9d:f2:8e:fa:c1:32:d0:6f:df:22:26:cb:
6c:18:46:ed:e0:35:d4:7e:3d:eb:40:a6:07:22:60:
21:0c:4c:98:05:19:ce:12:56:7f:b6:b8:c6:b4:27:
fd:99:45:6e:61:99:2b:ea:75:fc:c9:51:27:c0:cb:
b2:1f:d9:de:fc:93:33:b4:e2:c3:5a:14:a7:77:fc:
95:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:62:86:4B:7D:D5:74:4E:75:CD:7A:78:6E:2B:60:F2:F0:5F:C1
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0a:ae:be:d2:dd:f4:a1:f5:12:b4:32:e8:57:4d:3b:7a:df:
d7:85:73:48:73:fb:7e:f3:d4:d8:41:7c:34:ba:1d:83:99:ec:
85:29:e5:cb:28:df:e2:4a:f5:b9:3e:ac:c3:3c:6b:af:db:ed:
cf:2c:18:aa:6a:65:6b:52:c9:56:a0:50:5b:69:0f:e7:fa:99:
db:31:60:9c:e8:1a:13:e7:50:bc:a0:b0:22:a6:ca:37:2d:e3:
e7:7a:43:ed:f7:0d:86:94:f0:b1:6b:67:15:44:f0:04:5e:4f:
66:98:3e:8e:a4:56:0d:67:33:c0:a7:e0:6a:de:e9:bf:37:a7:
52:dd:52:0d:ac:f1:5e:55:d7:74:b0:d3:b0:25:2e:be:eb:fc:
b6:c4:1c:23:ae:a8:c1:bc:87:10:ab:7b:44:b2:5d:2d:ec:06:
da:91:7e:21:47:37:c8:13:4d:39:db:e3:cb:af:a3:e9:5d:5e:
e6:59:c9:56:ca:d1:3d:8b:1a:89:a6:70:76:d5:57:f5:2f:25:
74:a1:d2:1a:30:0f:3c:ec:4f:a4:c7:fe:e6:2c:ac:62:46:62:
ff:58:60:f9:16:57:af:57:2a:a4:b9:c2:48:6e:97:5d:12:77:
4b:4e:9b:c9:76:22:00:b6:c9:42:e2:c2:22:5f:28:c8:68:6c:
56:54:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:44 2026 by rpki-client