Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: 1aZp7x64pDe/yPh4LgJU5YTrepouCyF0G72fxd+2iVA=
Subject key identifier: C6:18:F5:F4:36:DB:39:59:50:3C:ED:AA:DF:45:4E:7A:20:A9:18:84
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019F227D9EE5192D4F135D43F1372572E1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 198C
Signing time: Thu 02 Jul 2026 11:01:25 +0000
Manifest this update: Thu 02 Jul 2026 11:01:25 +0000
Manifest next update: Fri 03 Jul 2026 11:01:25 +0000
Files and hashes: 1: ACMwaAvueA5hj2k5vPo_qhJ133c.roa (hash: cdrRftiXvx3VVL7eXRerOEoJNGRyUrwNZfHdITSoxdk=)
2: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: 8jP9g2ChCwktBNjGDTs/xWPzB+PMn6DiwcFy97dgbz4=)
3: jnbKsQGegNxjdm1zgvtf-2y2JHU.roa (hash: f0JFyB2CkMNujvorViUmIgNxI65wDl2h0L0eKcz8mXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:9e:e5:19:2d:4f:13:5d:43:f1:37:25:72:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jul 2 11:01:25 2026 GMT
Not After : Jul 3 11:01:25 2026 GMT
Subject: CN=c618f5f436db3959503cedaadf454e7a20a91884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:75:1f:8c:ee:0c:19:c8:19:33:c6:6f:a5:
45:b9:a8:bc:fc:e8:d8:56:02:7c:ec:5e:50:ab:08:
40:59:17:43:54:26:77:ca:bd:4d:10:6e:2a:27:65:
54:b1:68:0a:11:03:76:b2:cc:18:e8:bf:62:51:2a:
d8:e6:62:61:db:15:51:bd:68:40:14:07:4c:78:94:
5c:75:b1:25:2d:15:9c:66:17:bd:11:7e:e3:41:ae:
10:98:61:11:e7:1d:49:b8:bb:8f:22:c4:e0:a4:cf:
1b:90:3b:95:d4:c0:bb:30:e3:32:2d:3c:61:f6:74:
cb:3d:2f:80:ad:e6:63:70:c6:15:21:8d:77:a3:13:
d4:87:a1:02:d5:f0:0b:de:ef:4c:9a:8a:ba:a6:6e:
c4:f3:55:46:54:12:3c:4e:d7:5c:26:7c:3c:8d:5e:
35:51:77:2c:72:9f:60:1c:e4:b5:cb:75:6f:e0:1f:
14:cd:b6:fa:9a:28:dd:e0:f9:fd:29:aa:59:1b:94:
2f:da:b2:e2:51:09:6d:51:10:06:c2:bc:aa:47:21:
86:12:eb:98:62:7e:9a:16:64:07:54:0f:a9:2a:28:
ca:6c:72:2d:b2:a6:07:90:7e:d3:66:ce:08:cb:9f:
22:d4:2c:9d:22:3c:2a:00:de:78:2b:16:e6:ad:a9:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:F5:F4:36:DB:39:59:50:3C:ED:AA:DF:45:4E:7A:20:A9:18:84
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:d0:08:ff:c9:0a:c7:c9:07:05:27:3e:f2:5b:f9:0a:3c:
9a:2d:d4:45:06:0a:a1:d4:e4:82:0c:8b:a2:76:13:3f:0b:c3:
b5:a6:0e:a0:67:94:23:f6:a2:95:16:ad:b5:b0:85:bd:6a:90:
f3:61:12:2c:a5:0f:17:42:23:43:bd:66:2c:03:b1:77:8f:f4:
a0:df:eb:9f:78:44:e8:7d:8c:cd:3f:52:24:48:34:b8:e2:d8:
c8:67:91:eb:81:94:a5:9b:fc:92:41:00:a1:46:b0:e0:1b:00:
bf:f6:b3:4e:7b:ef:2b:9a:c8:82:19:fb:b1:0c:2d:8b:b1:10:
c0:ee:c8:b3:21:af:d6:fb:85:3d:f2:17:13:dc:a2:c2:c6:85:
c1:a7:2e:95:8a:fd:20:82:e9:cc:5c:51:19:28:79:52:ac:ff:
4b:00:e7:63:8d:d2:4a:4d:77:c4:90:e3:3f:f2:56:0c:70:37:
c8:74:47:f1:23:bd:76:8c:69:16:88:17:91:60:26:d8:47:51:
a6:5d:71:df:c8:1a:bc:f9:f3:e5:6e:4c:a1:26:20:b2:bc:fd:
32:95:61:a0:24:c0:f8:37:17:a2:04:4b:36:cf:f4:50:48:2e:
93:ce:a4:e1:c6:1c:e7:de:9e:95:e6:e6:88:e5:c7:fa:97:7a:
fb:82:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:32 2026 by rpki-client