Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: 53L8Z4U0Hc0SJ/xYcn3WhgAzXJXBLqqDCiWhQBGeSvM=
Subject key identifier: F1:3E:6D:38:5E:4B:96:65:C1:A9:90:0A:89:54:E2:BC:34:C7:C8:24
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 019F227D4688904FE3F87298AE45274A7F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 1865
Signing time: Thu 02 Jul 2026 11:01:03 +0000
Manifest this update: Thu 02 Jul 2026 11:01:03 +0000
Manifest next update: Fri 03 Jul 2026 11:01:03 +0000
Files and hashes: 1: 177yt0zK6JzmvvIHI-e1Wf5DIA4.roa (hash: HO5W4ujo8pIHLkEdVtcK0IvV5MW361b1xltzeVOXvoA=)
2: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: 9XrZM4s2os82HV+jG95ug72+52vhh2flxWLcmJbteUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:46:88:90:4f:e3:f8:72:98:ae:45:27:4a:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jul 2 11:01:03 2026 GMT
Not After : Jul 3 11:01:03 2026 GMT
Subject: CN=f13e6d385e4b9665c1a9900a8954e2bc34c7c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:51:91:49:38:af:05:36:0a:3d:3c:30:1d:
15:84:4b:bd:f7:3e:7b:2b:41:ed:20:2b:ce:69:80:
d9:e4:41:28:c0:d8:5c:26:cf:12:3b:e7:84:23:fa:
4c:7f:3e:6e:95:d2:59:af:2e:d6:30:52:6a:79:b7:
c3:63:18:26:42:d6:4c:c2:96:5f:6f:2d:9f:e8:72:
5f:98:b0:1e:b6:9e:e2:6f:a4:29:53:a5:33:5b:de:
8d:30:cf:b9:f0:d3:8e:96:42:a2:68:18:28:27:58:
54:62:37:91:c2:7b:3c:9b:99:30:4c:f0:cf:d7:13:
5c:d7:d2:1e:fc:70:86:7d:03:42:df:bb:f2:38:37:
8e:2c:c0:d0:e4:5d:fd:0d:1b:a7:f7:a2:7c:d0:3a:
df:77:77:14:bf:91:82:b2:99:40:89:44:39:0d:ee:
07:70:4e:92:cd:7e:84:cd:02:6e:22:d3:cd:58:c4:
fb:34:86:8e:2e:ea:97:10:b3:f9:c7:52:73:6f:08:
45:d3:09:81:4d:c6:07:e8:e0:ee:60:6b:ed:10:22:
2b:24:d4:fa:57:4a:15:21:a7:a9:3e:a5:06:35:91:
3c:12:95:a9:a9:2b:e0:8f:c2:bb:2c:e1:61:15:70:
ad:a6:1b:cc:1c:d2:a1:0f:d1:6c:5f:f7:4f:e6:a2:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3E:6D:38:5E:4B:96:65:C1:A9:90:0A:89:54:E2:BC:34:C7:C8:24
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:2c:87:ff:25:26:63:20:fb:fc:b8:3a:f8:de:a1:f5:5d:
c6:43:47:a7:18:c9:fc:d4:dc:f4:0b:bf:00:d1:ee:3c:30:d9:
af:91:c8:3c:e6:44:e0:3e:95:f4:6a:87:a0:87:86:38:49:16:
83:15:40:c8:c5:f7:5c:14:33:66:48:71:5b:d4:3a:35:9a:24:
bf:46:95:98:1c:57:d0:05:a1:94:4e:84:cb:9a:0e:33:9f:72:
da:93:3b:f6:e8:d0:24:48:12:ff:7b:d6:f4:ac:8c:90:a7:04:
41:4e:c5:01:bb:7c:ab:04:d8:41:79:06:f7:a8:39:fb:73:63:
96:d7:53:31:db:6c:8d:c6:d5:7c:0d:9b:67:9d:fb:61:4c:91:
6a:ef:f5:ca:1d:f5:40:bc:74:47:56:4b:ca:23:dd:cf:00:9c:
71:6b:fd:a2:fe:30:d7:ec:a9:99:c0:db:0a:82:44:ca:88:a6:
be:49:8c:04:b3:9b:65:56:85:a1:b4:42:5d:30:54:71:ba:54:
87:34:71:cc:eb:d7:d2:c4:29:93:97:4e:d4:76:33:5a:59:2e:
b8:02:ed:31:46:e6:e5:d0:38:ae:55:37:c4:a1:10:14:85:8d:
93:64:04:93:66:ac:27:21:d1:c6:de:12:2d:41:77:fc:81:83:
a8:9d:13:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ifUaIkE/j+HKYrkUnSn9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Q1ZGI5MDBlMDgxYjIxM2VhMWYwNzFlYzVjMDAzNDdh
NmZkOTUwHhcNMjYwNzAyMTEwMTAzWhcNMjYwNzAzMTEwMTAzWjAzMTEwLwYDVQQD
EyhmMTNlNmQzODVlNGI5NjY1YzFhOTkwMGE4OTU0ZTJiYzM0YzdjODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zVRkUk4rwU2Cj08MB0VhEu99z57
K0HtICvOaYDZ5EEowNhcJs8SO+eEI/pMfz5uldJZry7WMFJqebfDYxgmQtZMwpZf
by2f6HJfmLAetp7ib6QpU6UzW96NMM+58NOOlkKiaBgoJ1hUYjeRwns8m5kwTPDP
1xNc19Ie/HCGfQNC37vyODeOLMDQ5F39DRun96J80Drfd3cUv5GCsplAiUQ5De4H
cE6SzX6EzQJuItPNWMT7NIaOLuqXELP5x1JzbwhF0wmBTcYH6ODuYGvtECIrJNT6
V0oVIaepPqUGNZE8EpWpqSvgj8K7LOFhFXCtphvMHNKhD9FsX/dP5qL3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE+bTheS5ZlwamQColU4rw0x8gkMB8GA1UdIwQY
MBaAFCs9XbkA4IGyE+ofBx7FwANHpv2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEt
NDdkZDBjMDRiNTUwLzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWY4ZTItZjRlZC00MjRkLTliOTEtNDdkZDBjMDRiNTUw
LzEvS3oxZHVRRGdnYklUNmg4SEhzWEFBMGVtX1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmUsh/8l
JmMg+/y4OvjeofVdxkNHpxjJ/NTc9Au/ANHuPDDZr5HIPOZE4D6V9GqHoIeGOEkW
gxVAyMX3XBQzZkhxW9Q6NZokv0aVmBxX0AWhlE6Ey5oOM59y2pM79ujQJEgS/3vW
9KyMkKcEQU7FAbt8qwTYQXkG96g5+3NjltdTMdtsjcbVfA2bZ537YUyRau/1yh31
QLx0R1ZLyiPdzwCccWv9ov4w1+ypmcDbCoJEyoimvkmMBLObZVaFobRCXTBUcbpU
hzRxzOvX0sQpk5dO1HYzWlkuuALtMUbm5dA4rlU3xKEQFIWNk2QEk2asJyHRxt4S
LUF3/IGDqJ0ThQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:44 2026 by rpki-client