Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
File: nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft (raw, json)
Hash identifier: r0bTHL6+XNGcTSrilwXYdz72sgS0deozPH5o01/lfYM=
Subject key identifier: 4C:6C:D4:6E:4E:C5:F2:0E:C0:6E:05:F6:DF:7F:DD:CB:0B:3E:FE:96
Authority key identifier: 9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
Certificate issuer: /CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Certificate serial: 019F2247460C8F9AC1FF611B586AFFEB4096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
Manifest number: 15AF
Signing time: Thu 02 Jul 2026 10:02:03 +0000
Manifest this update: Thu 02 Jul 2026 10:02:03 +0000
Manifest next update: Fri 03 Jul 2026 10:02:03 +0000
Files and hashes: 1: _3hDeG2_gP2OF_kOwQ_-RVY6AGk.roa (hash: MhtbxEEzpA8s8MGWNiwEnIVTeslC4E8X2PXN0HorBxY=)
2: nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl (hash: 37kE2ZS/8O3vjBtLrNiR6JET/E7oOuKoixr3uk8GjEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:46:0c:8f:9a:c1:ff:61:1b:58:6a:ff:eb:40:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d75cf6c6019f059e465e4deb204cd242bd4b465
Validity
Not Before: Jul 2 10:02:03 2026 GMT
Not After : Jul 3 10:02:03 2026 GMT
Subject: CN=4c6cd46e4ec5f20ec06e05f6df7fddcb0b3efe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:4a:94:19:7b:ee:d7:cb:07:26:67:c7:b8:
3d:31:c1:a8:15:5b:3b:74:bd:3f:58:c5:4c:51:1a:
5f:e7:ae:ec:b3:56:9f:31:80:19:64:22:f6:d4:a9:
15:ec:88:23:8a:45:69:bf:f4:8f:01:b9:2c:0c:90:
07:38:ed:0c:57:cb:fd:cf:9e:54:b6:94:33:3c:7e:
8e:d5:76:a5:cf:07:8a:a3:5c:e1:c4:09:c0:96:77:
9c:80:98:3c:0f:0d:0b:8a:94:c0:de:bd:b3:e6:32:
9b:31:6d:a7:76:0e:27:56:55:58:a0:28:60:88:22:
bb:3e:01:58:a9:92:f9:cb:dd:3f:50:3f:e0:d6:b1:
b0:e5:92:11:f5:95:4d:59:4f:ae:95:5a:31:21:19:
80:c1:3a:1c:4a:9b:27:96:8a:86:6b:36:29:cd:37:
f8:cb:84:cf:5a:16:96:09:94:51:5e:ec:53:23:1e:
5c:49:18:65:65:bf:f1:37:37:20:5b:07:92:d3:0e:
69:c6:ae:f0:bd:87:12:7f:57:66:46:21:28:39:78:
48:8a:a1:f9:8d:da:8e:95:59:b2:2a:1b:4f:f1:29:
89:ba:f7:78:6a:a7:10:64:f4:37:99:05:5a:be:e4:
73:57:d1:a7:ac:f7:db:e7:25:46:a1:e2:20:ad:e5:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:D4:6E:4E:C5:F2:0E:C0:6E:05:F6:DF:7F:DD:CB:0B:3E:FE:96
X509v3 Authority Key Identifier:
keyid:9D:75:CF:6C:60:19:F0:59:E4:65:E4:DE:B2:04:CD:24:2B:D4:B4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXXPbGAZ8FnkZeTesgTNJCvUtGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d04f1b-074c-495e-a431-76b1ae62f072/1/nXXPbGAZ8FnkZeTesgTNJCvUtGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:2c:ef:c5:f9:5d:53:5d:f5:5c:1b:31:f1:a4:39:83:d4:
4d:57:5d:1b:e0:37:31:5e:26:33:4d:4f:b9:a6:d3:cd:09:ab:
59:ae:71:a2:43:42:35:5d:d1:09:9a:74:dc:2d:fc:57:39:ca:
2f:91:6e:5b:c9:0d:37:40:80:94:cc:0b:48:7f:4f:1d:2c:e6:
60:11:35:db:ce:68:ba:70:de:6d:97:87:d4:1c:33:04:b8:29:
76:08:c1:ba:a1:bd:1a:9f:2a:ba:34:37:3b:c1:91:1b:6a:0c:
77:df:2e:6c:c0:bf:26:09:98:84:89:e2:db:43:74:0c:b7:71:
b6:61:94:4a:24:ab:5b:b6:c5:aa:92:62:21:ab:9b:63:a5:9a:
b0:8d:56:84:53:44:14:05:a2:e4:7b:3e:63:d7:2d:14:41:24:
02:4e:61:c9:d9:1d:93:1f:ee:44:c7:3d:1a:45:f9:b7:ae:e6:
9b:76:d8:1d:9f:97:8d:6a:90:73:a7:73:d4:9e:77:59:44:94:
a5:91:88:1a:c9:10:b5:e5:de:07:26:83:37:3f:7e:03:8b:e8:
58:29:d2:9d:e3:09:69:a8:fb:6c:6b:0a:c4:3b:e5:3d:c2:97:
1f:80:72:5e:fa:fa:70:89:59:69:3f:8b:08:5c:f9:a7:56:a6:
2d:b9:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:13:53 2026 by rpki-client