Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: 1zo/NWO9kq9YKQj8lkXsqi7l4Ib8uLjVyIogmvdUIR4=
Subject key identifier: 67:AB:70:20:BC:4C:DD:75:EE:2B:EE:4C:30:96:B1:01:92:6A:68:96
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 019F21D9E5B481C5BD6F1F799B7AD432F5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 129C
Signing time: Thu 02 Jul 2026 08:02:35 +0000
Manifest this update: Thu 02 Jul 2026 08:02:35 +0000
Manifest next update: Fri 03 Jul 2026 08:02:35 +0000
Files and hashes: 1: mI6oY4Lnet6WkWSB7D2a3UmqXGA.roa (hash: 0KqnfYhvhDCdOS8nOcazqklOk+TkEMwWsm8QT9vs9ws=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: JbaRLZU1jpxONF9OgxmIdjTYcSrJytb4AEO4qTNGM7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:e5:b4:81:c5:bd:6f:1f:79:9b:7a:d4:32:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Jul 2 08:02:35 2026 GMT
Not After : Jul 3 08:02:35 2026 GMT
Subject: CN=67ab7020bc4cdd75ee2bee4c3096b101926a6896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:f8:76:8d:aa:89:31:73:d7:0e:7d:79:59:
0b:75:5c:36:f8:96:39:7e:b3:41:74:47:9d:f3:85:
86:48:40:fd:2e:8f:46:4c:c7:eb:33:18:90:0e:6c:
1f:7e:92:0f:0d:ef:75:3d:34:b7:56:25:97:7b:9d:
90:99:64:d4:03:e1:4c:bb:7c:fd:1b:e1:af:9a:36:
a9:32:aa:54:87:88:84:79:ce:40:f3:4b:62:9e:1b:
cd:8a:b6:9f:8c:91:c5:ed:f2:77:e7:ea:c2:7a:09:
5c:5b:64:ac:82:3b:af:72:b0:88:c0:38:d0:a7:80:
a2:c0:c4:be:7a:84:56:0a:d9:02:5e:bf:e1:cf:91:
29:ff:55:07:6e:85:7d:d8:6b:d4:e9:e8:b7:fe:96:
af:0a:19:cc:fc:a2:e8:ec:b6:e9:d1:c0:c8:ab:bc:
02:3b:d3:12:c8:50:5a:37:7e:e9:ae:5e:d3:31:f3:
57:32:62:e0:72:5a:f5:bd:04:2b:15:1e:9e:c5:6b:
97:d2:e9:98:97:dd:21:e7:b3:73:e8:54:eb:8b:f5:
eb:65:5a:c2:6f:7d:89:f7:96:0d:b3:00:bf:a3:64:
51:18:a1:9a:2e:d7:10:0c:a8:01:df:be:c7:43:83:
94:d4:24:8e:7b:fe:0b:1f:26:97:98:a4:75:a3:ca:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:70:20:BC:4C:DD:75:EE:2B:EE:4C:30:96:B1:01:92:6A:68:96
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:d2:38:cf:3b:f2:fc:3a:d8:0c:cf:c9:9a:04:79:90:ce:
f7:b7:aa:46:14:70:fa:d5:af:1a:d1:be:92:31:2d:06:5b:22:
04:7c:29:39:6b:7f:dd:75:1d:b8:c9:79:c3:16:b1:f1:db:4a:
f6:ee:5c:20:bf:c7:0c:8f:0f:48:98:fa:b6:77:61:80:1e:8f:
03:b2:b8:05:4f:62:5f:01:e4:ba:20:da:6d:6d:6b:ee:1c:ce:
34:b0:11:80:63:63:b0:8c:4b:90:73:cf:00:24:cc:43:3d:52:
e1:db:c8:6a:09:81:c7:c5:d8:3b:ae:d7:10:40:18:57:c0:71:
14:d1:b4:ac:ac:39:6a:9f:cd:de:0d:b2:9c:44:fe:48:2a:de:
57:52:52:4d:d0:3d:f9:6f:60:71:c6:0f:2b:b6:b0:69:05:bf:
b8:a9:c0:27:b8:28:06:50:50:a7:0c:99:04:98:77:96:92:be:
af:0d:e4:5b:b0:05:14:88:18:7a:7a:e3:9e:a2:d4:d2:66:8a:
bf:6b:d3:08:4c:b0:a7:fd:ce:4a:30:2f:0b:74:fb:ec:cf:2a:
4d:ec:5f:ed:58:03:2a:99:ba:e0:bc:c0:f8:eb:56:23:53:74:
6e:ce:9a:56:30:19:aa:84:66:62:a4:29:54:ab:27:01:83:2a:
c7:2f:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:36 2026 by rpki-client