Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
File: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft (raw, json)
Hash identifier: y2+/TpAyDjZvhanuHWm48J5Q/f1nsv0VHUh0+dn8MG8=
Subject key identifier: 13:D9:97:E9:16:F0:DB:D2:09:9D:EB:61:42:B3:7D:32:86:DB:BB:52
Authority key identifier: D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
Certificate issuer: /CN=d291741252bb9c4cda80047dfb01ce98c219d180
Certificate serial: 019F2247843E0C64CA6A473679B9F548EBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
Manifest number: 1841
Signing time: Thu 02 Jul 2026 10:02:20 +0000
Manifest this update: Thu 02 Jul 2026 10:02:20 +0000
Manifest next update: Fri 03 Jul 2026 10:02:20 +0000
Files and hashes: 1: 0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl (hash: +JZg7J8Ir7kN83JgGnZV1UrGVW5THaE5mbTh06RBloM=)
2: DmoDqDPowCrVpCCkIKS4Nf6g_kI.roa (hash: 7od5f7R8DSJPoJQHbrlbRFv+w64a+rw+WvHvRvhjbSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:84:3e:0c:64:ca:6a:47:36:79:b9:f5:48:eb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d291741252bb9c4cda80047dfb01ce98c219d180
Validity
Not Before: Jul 2 10:02:20 2026 GMT
Not After : Jul 3 10:02:20 2026 GMT
Subject: CN=13d997e916f0dbd2099deb6142b37d3286dbbb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:42:9e:6c:c4:87:6a:2f:dc:17:44:6d:35:
a0:7f:67:11:5e:ca:22:a8:32:92:3b:74:8a:84:dd:
78:27:e7:e9:72:cc:25:8b:81:72:43:ad:8d:fe:08:
9d:30:d0:f9:a4:8b:8e:d7:6e:0a:dc:6a:da:72:58:
4d:51:1f:ac:72:f9:64:f8:d3:0a:5c:74:4a:73:e0:
87:aa:2b:f9:7b:fa:cb:b9:1d:8b:cb:45:c1:2b:f0:
59:85:8c:8a:2f:ce:80:8d:9c:60:d5:92:f9:a7:ca:
73:bf:f9:34:a7:fd:ad:c1:9b:10:fe:ae:72:6d:ef:
65:69:40:06:7d:af:08:fd:e8:ac:f6:66:66:a9:05:
97:6f:6c:b5:f7:88:48:06:b6:8b:4d:2f:39:ff:a1:
fe:4b:fc:31:62:6b:fd:50:f4:b3:ef:3a:a9:d7:5e:
b7:5c:63:e6:c2:e0:80:04:76:2d:a3:26:9d:51:96:
83:5e:26:19:eb:b8:29:de:1f:73:e0:59:1d:57:65:
06:82:17:63:a7:14:0f:00:5a:82:b7:ba:c2:fd:86:
c7:37:94:89:09:6c:fc:48:bf:31:6b:02:17:a0:1c:
a9:d6:e3:02:4e:04:1d:1c:d9:50:21:40:c6:e7:dd:
3a:24:8e:dd:38:e2:18:d9:fd:93:49:85:74:dd:86:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:97:E9:16:F0:DB:D2:09:9D:EB:61:42:B3:7D:32:86:DB:BB:52
X509v3 Authority Key Identifier:
keyid:D2:91:74:12:52:BB:9C:4C:DA:80:04:7D:FB:01:CE:98:C2:19:D1:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pF0ElK7nEzagAR9-wHOmMIZ0YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/0pF0ElK7nEzagAR9-wHOmMIZ0YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:3b:31:4f:74:be:77:13:88:21:ea:99:30:95:a7:02:57:
9d:5f:b8:21:80:6e:eb:91:18:1a:0b:3b:cc:c1:61:c6:bd:4f:
76:fb:5d:0b:c6:38:e2:0f:93:cb:a0:83:90:67:12:4b:8d:f6:
9d:b6:c8:ef:54:7d:af:70:ac:be:5a:9b:a2:c8:32:8b:88:67:
3c:94:d2:ac:82:15:4d:c3:2e:bf:a3:ff:51:35:9a:0b:29:93:
ac:ef:c6:98:39:d7:f0:8a:e2:c0:98:6d:20:41:80:56:e7:8a:
bd:ac:40:24:01:83:f6:09:8d:0a:87:ad:89:b1:2a:2f:7f:71:
60:85:f4:a8:40:a6:84:7b:26:7b:0f:39:5f:a1:39:7f:1e:ba:
0f:1b:40:47:18:4a:de:ca:c1:83:7c:90:d6:67:94:fa:f7:18:
73:4d:86:72:fc:6c:20:f2:fa:ba:0d:ed:b0:a5:ae:03:d7:0b:
55:54:73:68:29:ae:90:31:ee:af:35:4b:36:20:11:a8:31:2f:
5f:ff:69:b5:e0:76:c0:9a:ac:dd:2d:cc:22:16:e3:64:5c:66:
3b:ce:75:8d:25:cf:00:7c:27:cc:16:05:af:a8:56:34:6a:b8:
f9:8b:b5:9c:89:49:09:61:d1:87:f7:07:37:77:86:9a:eb:df:
90:c9:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:53 2026 by rpki-client