
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
File: r1UJ13Yi0who8jYTxagW5ySEAWU.mft (raw, json)
Hash identifier: 9MwzKj1vWbPzthlfanB0NkY+dcfnOcylZ5BWnJOYSdQ=
Subject key identifier: 0B:0D:DA:AD:25:1A:66:C1:1D:87:03:B8:F7:C3:BE:63:AB:16:91:90
Authority key identifier: AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
Certificate issuer: /CN=af5509d77622d30868f23613c5a816e724840165
Certificate serial: 019CFA99A8B9F1CAB5F23D88EE711D480B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
Manifest number: 0923
Signing time: Tue 17 Mar 2026 07:01:39 +0000
Manifest this update: Tue 17 Mar 2026 07:01:39 +0000
Manifest next update: Wed 18 Mar 2026 07:01:39 +0000
Files and hashes: 1: r1UJ13Yi0who8jYTxagW5ySEAWU.crl (hash: N4hgkdeC6+U2wdj7QqL7+J+c1ug0INDcE3QqcUM2Yas=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:99:a8:b9:f1:ca:b5:f2:3d:88:ee:71:1d:48:0b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5509d77622d30868f23613c5a816e724840165
Validity
Not Before: Mar 17 07:01:39 2026 GMT
Not After : Mar 18 07:01:39 2026 GMT
Subject: CN=0b0ddaad251a66c11d8703b8f7c3be63ab169190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:b4:8c:e1:d2:95:05:1d:8f:38:09:19:e4:
11:58:53:35:7e:eb:63:cb:87:94:2e:98:ef:d9:c2:
56:71:36:b8:ae:88:71:c9:dd:09:c1:d8:5d:11:48:
a5:51:2e:c9:f9:04:3d:4a:71:e0:c0:5d:18:a2:ba:
2c:24:22:01:b6:ee:14:55:07:f6:ca:5d:9c:75:dd:
01:25:0a:84:2f:00:e0:13:d7:1f:8b:f6:46:73:28:
1a:2d:8c:80:b3:61:30:d0:e2:bd:ce:8a:16:d3:21:
71:7d:86:3d:25:18:e3:8d:27:f7:be:e3:bb:58:96:
85:46:b9:17:08:0a:5c:60:d5:a4:00:bc:29:75:57:
06:13:c6:f7:90:a6:60:be:7d:d2:c1:13:f8:cb:40:
a8:df:76:fe:f3:08:36:3a:36:87:0e:df:80:a2:23:
a5:72:11:ab:a4:22:b2:24:3b:64:78:9f:a4:5f:75:
1b:16:70:53:24:71:2e:6e:22:f6:5c:ae:be:a1:f5:
19:cf:f9:99:6f:b6:15:88:b7:1e:d9:14:b4:4e:ab:
18:f3:7f:bb:e6:b2:59:b3:d3:92:94:52:dc:38:13:
9a:8a:39:24:e6:b7:fb:8c:bd:37:61:9a:b5:c0:23:
b3:62:d4:59:59:03:23:8e:23:84:4d:ec:13:8e:a3:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:DA:AD:25:1A:66:C1:1D:87:03:B8:F7:C3:BE:63:AB:16:91:90
X509v3 Authority Key Identifier:
keyid:AF:55:09:D7:76:22:D3:08:68:F2:36:13:C5:A8:16:E7:24:84:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1UJ13Yi0who8jYTxagW5ySEAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9971e1-57fc-4f8c-9f03-0aee6e237243/1/r1UJ13Yi0who8jYTxagW5ySEAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d0:03:2a:c0:9a:fe:f1:66:1c:77:3d:55:08:53:e5:4e:bd:
58:8b:a5:c2:ba:25:a1:a6:d7:11:10:bf:e2:8c:6c:ad:87:f9:
b2:28:d9:50:f6:cf:c9:4e:47:a3:50:10:2e:b6:63:03:e8:17:
f4:56:b1:eb:ae:66:ae:5d:11:bc:31:c0:ea:51:7c:d9:20:59:
f6:d3:9a:81:37:0c:2d:72:9f:a6:6f:72:03:02:dc:0c:b5:8e:
71:d5:14:5c:80:64:2b:59:f0:c5:be:2a:d0:ef:83:5c:af:5f:
32:1b:48:e4:6f:3e:76:8b:29:45:c6:c9:49:49:fc:67:dc:49:
6a:33:1e:79:7a:2b:ba:5f:6c:e1:a1:bf:de:3c:c6:44:2f:00:
24:24:b8:29:88:01:4a:36:c7:4d:7f:57:56:b3:09:76:6a:07:
00:99:a1:73:e4:33:c6:a3:0f:83:f2:88:c2:49:af:d6:0b:4c:
da:75:a1:b1:6b:a4:c6:dd:cc:84:32:bc:44:cf:ab:18:d8:0d:
cc:64:c4:26:22:3d:c6:45:60:e4:2e:2f:dc:c5:af:1b:98:f8:
84:30:58:b2:06:bf:90:8f:a5:11:cc:6a:6b:49:4f:f1:a2:bc:
5b:38:7b:d2:bb:8b:14:a7:a9:25:48:ec:fb:96:30:89:a9:73:
38:3e:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:31 2026 by rpki-client