Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File: 5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier: 4DJ68N92IQpLUEXePDn4BDuTkHVMdRNlJnx7tPqx9ZM=
Subject key identifier: D3:A9:86:D7:DE:D5:9B:F1:F4:8C:E8:0F:BB:FE:D8:F7:76:F1:DD:9B
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer: /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial: 019B7E278DD65DDDE982D008D6DDAF5B1E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number: 07F8
Signing time: Fri 02 Jan 2026 10:01:19 +0000
Manifest this update: Fri 02 Jan 2026 10:01:19 +0000
Manifest next update: Sat 03 Jan 2026 10:01:19 +0000
Files and hashes: 1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: VyKtnf5/HgDsnAtPxiZookHbktNQc9YDrT52kT0H7CA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:27:8d:d6:5d:dd:e9:82:d0:08:d6:dd:af:5b:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Validity
Not Before: Jan 2 10:01:19 2026 GMT
Not After : Jan 3 10:01:19 2026 GMT
Subject: CN=d3a986d7ded59bf1f48ce80fbbfed8f776f1dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:e9:54:c9:bd:be:b7:a4:4f:e5:fe:4e:95:
2b:76:03:98:cf:fa:6e:f4:1c:a9:c2:88:27:e1:57:
6c:bd:10:6b:3b:1c:61:65:01:8e:5d:64:89:3f:d0:
45:c4:87:34:a9:4b:81:c7:9c:c6:17:71:bb:cb:7c:
e8:e6:c7:41:c6:e6:1b:03:27:94:7a:a8:42:2a:f6:
d7:dc:f3:fc:3d:19:0a:5d:0c:e0:ea:01:cd:6d:cd:
ef:44:79:eb:c2:73:32:cf:b0:34:aa:64:f0:2e:c7:
c3:ec:3a:b5:c8:d2:e0:84:37:99:8a:db:38:fb:ba:
76:0e:a0:d6:ab:d1:00:4b:e5:17:18:25:aa:3a:e5:
a6:7a:38:9a:3f:90:10:76:3f:02:09:8b:41:ed:ec:
2c:32:31:53:67:2f:da:81:6e:76:8c:e2:84:60:aa:
71:bb:97:4b:59:83:9b:d2:16:2b:26:29:b6:00:0c:
2a:a8:9e:1a:7d:0f:a3:eb:a2:14:3c:a5:de:8a:57:
5d:86:d1:ae:1b:a7:af:d7:6f:5d:0f:4f:b5:b8:4b:
91:0f:4e:1e:1f:88:4f:fa:2d:66:19:f6:88:ca:f9:
99:70:c7:f6:c9:8e:da:6a:57:df:ce:2e:3d:88:53:
f9:8e:a0:25:1f:7d:66:0b:0b:23:2b:5d:cd:5b:48:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:86:D7:DE:D5:9B:F1:F4:8C:E8:0F:BB:FE:D8:F7:76:F1:DD:9B
X509v3 Authority Key Identifier:
keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7c:48:e5:24:ef:f3:3e:f3:03:94:f1:f5:af:36:59:cd:99:
27:ff:fe:42:66:6b:4b:f8:a5:7d:59:95:1e:ab:4c:14:f5:ed:
70:c2:12:a4:78:15:10:1d:32:77:1b:90:cd:d5:4d:5b:7c:bc:
6a:2e:87:12:e7:92:97:c5:7c:bc:14:7b:aa:b1:a4:40:26:9e:
77:93:b2:35:53:aa:d2:28:54:c2:62:f3:d7:ff:f3:75:9d:8d:
bb:f0:30:9b:cd:d3:51:1c:96:6e:6b:19:93:e7:c8:57:f3:61:
d5:47:bc:07:31:56:18:66:01:08:2c:2c:f3:4a:52:dc:30:72:
9e:78:8e:e9:55:a6:64:d4:76:18:1b:75:98:6d:b2:4d:fe:d1:
ca:de:97:66:3a:1a:5b:b9:2d:c0:dd:c9:a6:20:90:40:cf:d4:
fe:93:88:78:b6:77:0f:52:18:34:b3:5f:4f:b8:12:fd:f9:c1:
56:64:8b:28:ee:7a:8f:85:63:d0:96:22:16:68:31:44:9a:d6:
c6:56:1d:44:4e:f5:0d:07:f7:84:70:6c:7d:e6:b6:23:75:d6:
bc:6e:ff:c9:56:98:8a:d4:df:bd:bc:3b:b7:0b:8f:ff:81:65:
c9:ee:3b:18:bc:e0:cc:b3:1d:35:83:d4:a9:dc:65:17:dd:39:
60:c8:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:33 2026 by rpki-client