Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: rXhKIBcgF/XXwu/O0oPrZIDJBi2qhYVOd8HGxOA+YFI=
Subject key identifier: 53:54:52:95:5E:4F:2D:16:9E:64:11:99:6E:D3:EE:90:C7:9C:AF:F8
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 019F21A251982D9832604C8E0D28E862DFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 0991
Signing time: Thu 02 Jul 2026 07:01:53 +0000
Manifest this update: Thu 02 Jul 2026 07:01:53 +0000
Manifest next update: Fri 03 Jul 2026 07:01:53 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: ZQaQDqcnajoJ5zwu2r2IJwXGEbPqi3YzmTJ/UWgpX6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:a2:51:98:2d:98:32:60:4c:8e:0d:28:e8:62:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Jul 2 07:01:53 2026 GMT
Not After : Jul 3 07:01:53 2026 GMT
Subject: CN=535452955e4f2d169e6411996ed3ee90c79caff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:64:13:6e:5c:4b:13:a0:c0:5e:57:f1:72:
f3:bd:ae:d7:34:40:96:1d:a5:b4:6b:07:f0:db:ca:
30:c9:f5:11:89:60:b4:c7:dd:51:ce:e4:50:15:1d:
ff:98:a5:5c:a4:51:37:7c:1a:65:41:bb:3b:6c:17:
f5:d5:e1:20:d7:b8:16:be:3d:2d:99:b4:05:b4:2d:
56:29:86:95:90:e9:aa:63:9e:9f:29:70:05:08:3e:
f8:b7:5d:5c:88:9a:30:32:e3:fa:6f:95:1a:13:70:
36:a7:5f:4b:0a:3b:12:d9:4e:fe:7f:8d:84:b9:c0:
45:cd:ac:8f:f7:77:0e:40:3f:72:50:6d:52:73:2f:
16:52:bb:33:93:e0:0a:a3:e8:98:a9:46:b7:8e:33:
c6:58:36:96:3d:bf:6c:fa:c4:7f:74:b3:05:35:e6:
2e:e1:c6:06:9e:7a:82:4a:4a:89:68:ec:4c:bd:ba:
aa:5d:0e:9f:2b:2d:d4:8d:59:fd:bc:19:7a:50:71:
8e:b0:ca:d2:99:05:2a:22:fe:4e:0e:b6:96:44:2d:
10:41:a2:c5:cf:83:2d:63:66:88:df:39:bd:85:3d:
55:74:fd:98:e4:13:74:c6:97:b1:91:df:d7:af:e0:
1b:d1:9d:83:79:84:fb:9c:6f:c1:87:06:97:83:7c:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:52:95:5E:4F:2D:16:9E:64:11:99:6E:D3:EE:90:C7:9C:AF:F8
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:4a:b2:f0:11:6a:29:52:e9:2a:51:4e:2b:f9:53:46:88:
1d:d3:44:37:a0:d6:d5:8e:ad:14:38:21:ac:a9:39:62:da:cc:
da:0e:1f:ec:41:6d:c7:8a:c9:c4:4c:bd:af:00:67:19:26:8b:
d0:85:95:82:c9:18:4c:58:98:f9:08:3f:f9:3b:16:34:89:02:
d0:c3:b7:2c:96:f3:14:f6:9f:63:fe:b4:1e:11:5f:bd:e6:ea:
b8:99:3b:3f:15:9e:f5:91:61:99:c2:03:e0:26:c5:78:24:38:
ea:8b:51:fd:38:88:a3:c6:82:98:3a:8a:8a:df:15:ea:ea:eb:
09:b2:41:bd:67:9f:d2:b5:59:75:0d:22:01:7e:87:e8:8f:58:
16:18:a0:fb:41:38:4b:1c:32:a5:8b:fb:69:03:24:20:ba:a7:
3e:ba:0a:32:f0:67:7e:d2:a6:c1:ef:f1:07:dc:3d:f1:0c:73:
2e:23:bb:ff:03:5e:77:0a:37:9a:43:cf:14:bd:bb:7e:df:b2:
17:d2:5c:9e:c4:31:9f:1d:cd:07:0e:93:92:c7:55:8e:fc:88:
69:8d:bc:fe:96:dc:dc:71:a5:19:14:20:31:40:eb:36:a6:3b:
94:7d:86:f2:5d:b9:52:cf:34:3b:56:8f:af:98:0c:c4:e8:83:
a6:27:14:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8holGYLZgyYEyODSjoYt/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZWQ4MzE5ZGVkMTVkNWYwYjZhYjQ0MTAwOWRlMTliMTlk
MTUyOWIwHhcNMjYwNzAyMDcwMTUzWhcNMjYwNzAzMDcwMTUzWjAzMTEwLwYDVQQD
Eyg1MzU0NTI5NTVlNGYyZDE2OWU2NDExOTk2ZWQzZWU5MGM3OWNhZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GRkE25cSxOgwF5X8XLzva7XNECW
HaW0awfw28owyfURiWC0x91RzuRQFR3/mKVcpFE3fBplQbs7bBf11eEg17gWvj0t
mbQFtC1WKYaVkOmqY56fKXAFCD74t11ciJowMuP6b5UaE3A2p19LCjsS2U7+f42E
ucBFzayP93cOQD9yUG1Scy8WUrszk+AKo+iYqUa3jjPGWDaWPb9s+sR/dLMFNeYu
4cYGnnqCSkqJaOxMvbqqXQ6fKy3UjVn9vBl6UHGOsMrSmQUqIv5ODraWRC0QQaLF
z4MtY2aI3zm9hT1VdP2Y5BN0xpexkd/Xr+Ab0Z2DeYT7nG/BhwaXg3ysQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNUUpVeTy0WnmQRmW7T7pDHnK/4MB8GA1UdIwQY
MBaAFOztgxne0V1fC2q0QQCd4ZsZ0VKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTct
NzA2OWY0MzgyY2FiLzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xZjZlZDItNTBjYS00ZDNjLWJiNTctNzA2OWY0MzgyY2Fi
LzEvN08yREdkN1JYVjhMYXJSQkFKM2hteG5SVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLlKsvAR
ailS6SpRTiv5U0aIHdNEN6DW1Y6tFDghrKk5YtrM2g4f7EFtx4rJxEy9rwBnGSaL
0IWVgskYTFiY+Qg/+TsWNIkC0MO3LJbzFPafY/60HhFfvebquJk7PxWe9ZFhmcID
4CbFeCQ46otR/TiIo8aCmDqKit8V6urrCbJBvWef0rVZdQ0iAX6H6I9YFhig+0E4
SxwypYv7aQMkILqnProKMvBnftKmwe/xB9w98QxzLiO7/wNedwo3mkPPFL27ft+y
F9JcnsQxnx3NBw6TksdVjvyIaY28/pbc3HGlGRQgMUDrNqY7lH2G8l25Us80O1aP
r5gMxOiDpicU4w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:09:37 2026 by rpki-client