Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: j2Cv28tS9+PXnzF/q4yz58k75Tky9EZJgQV/ib8EjLY=
Subject key identifier: 89:91:01:D2:DA:CD:1F:6F:03:E0:B9:89:EB:67:51:19:71:F5:B4:94
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019F2322A74597702244A7CE223EBA303402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1998
Signing time: Thu 02 Jul 2026 14:01:41 +0000
Manifest this update: Thu 02 Jul 2026 14:01:41 +0000
Manifest next update: Fri 03 Jul 2026 14:01:41 +0000
Files and hashes: 1: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: +ZzM1hBPgGm77TeKJUzgjU51pjHXDByfp4PEZhY7ZG8=)
2: QHHv-lGS27dlf_Kcr4moiCURb3g.roa (hash: Lcy2JaAZZjozQ94TOOqc21SM3JNpF1vrI2NkHkiFmLY=)
3: gKrLEMKKBPn76EAbd2e67fa8nlA.roa (hash: 2MR02OlNV98WA7eo7V/sklDPjIr74dUCdC13yh8HK9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:22:a7:45:97:70:22:44:a7:ce:22:3e:ba:30:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Jul 2 14:01:41 2026 GMT
Not After : Jul 3 14:01:41 2026 GMT
Subject: CN=899101d2dacd1f6f03e0b989eb67511971f5b494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:d8:bf:c5:48:f5:57:a6:59:86:cf:b1:78:
f6:90:0c:dc:a2:e4:30:72:ab:27:2d:d0:d8:0b:f8:
9d:9f:40:37:2c:35:47:b9:02:5e:8f:05:c7:15:45:
ea:c8:58:15:65:d6:c7:8c:ac:36:75:30:6b:fe:65:
27:22:06:03:fe:35:a9:a0:33:23:b2:cb:ed:d1:e6:
06:de:6f:35:c1:89:5d:0f:99:d2:c5:2b:43:3d:f3:
7d:57:7c:f7:49:b0:3f:8b:d5:d1:ad:1d:98:0b:d2:
4f:0f:34:56:3d:51:6c:75:3e:4e:b8:26:f0:6c:ea:
3d:e2:14:60:73:f2:a9:a0:14:ff:ec:3a:4b:05:a8:
ec:79:72:2d:a2:94:65:f5:3f:87:7f:10:f1:4d:60:
9d:4c:97:72:b6:ae:fd:99:d9:4b:c7:d3:47:2b:ab:
59:1f:d7:e0:a4:c8:d6:03:05:47:4a:c1:dc:09:93:
85:96:c3:7d:c3:19:62:09:68:80:48:a5:38:b2:e4:
5a:55:0c:f2:bd:61:26:13:63:8b:73:07:7d:73:3e:
58:23:c9:dc:27:5b:a4:50:97:fd:e2:e8:2f:43:f7:
9e:91:54:fe:42:09:d1:56:a5:01:b7:2a:be:d0:38:
df:a4:5a:0b:3e:0f:ba:cd:cc:51:c0:9b:62:ce:8b:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:01:D2:DA:CD:1F:6F:03:E0:B9:89:EB:67:51:19:71:F5:B4:94
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5b:aa:9b:53:1f:39:9c:ac:96:cc:bb:7a:73:c1:7f:0f:09:
bd:83:4b:9c:87:d4:e4:82:f0:f5:28:24:0b:86:41:a7:67:04:
54:a6:d2:0b:b5:60:a4:d4:6e:1c:6c:59:e2:96:bf:ec:23:fb:
7b:8a:cf:fe:11:cb:2d:dc:06:ea:7d:90:1e:e0:7c:d9:a8:6b:
1e:4e:6e:4f:36:09:44:4a:3a:73:fb:19:83:09:0f:dd:5f:75:
59:a1:68:fb:4f:50:7a:ed:45:b3:3b:a4:ce:72:9f:f7:a7:e7:
96:6a:67:42:18:3d:18:5e:1f:a9:2b:71:55:16:4d:c8:17:36:
d5:fc:dd:ee:51:6f:24:ba:a6:ea:85:74:bb:ae:03:f5:de:8a:
77:68:39:61:58:22:8f:6a:a0:e9:c1:8d:7f:53:a5:17:cd:38:
dd:41:52:2c:55:bc:95:c9:48:fe:ed:60:11:66:2b:49:a8:da:
d4:a0:f7:bd:0b:22:ee:5b:44:3b:39:9f:93:4b:25:31:60:bd:
55:02:60:ab:03:ac:0f:a7:98:b3:11:a9:f5:69:19:4f:77:cf:
ac:da:a5:04:87:52:20:ed:9a:80:4f:e2:b7:4f:a7:dd:84:a7:
75:9f:f1:c5:f0:7a:b0:e9:80:5d:fa:79:f0:a6:cf:04:c6:40:
5e:43:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 23:32:52 2026 by rpki-client