Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: nlMXEMfjSJMwyLf4PXtcR5k4JeKv13cAxJWptfIWcdE=
Subject key identifier: C9:1C:1A:29:6B:52:72:A3:C2:5B:AC:F0:B9:BE:E3:8E:9C:64:11:D0
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 019CB1DAFAA6315737B98B3D8C4C3CF9C33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 14BE
Signing time: Tue 03 Mar 2026 04:00:43 +0000
Manifest this update: Tue 03 Mar 2026 04:00:43 +0000
Manifest next update: Wed 04 Mar 2026 04:00:43 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: 6VrIMkjRly65kNhGgTpANkd2Qf8S4iI09lbUYtm2+s8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:da:fa:a6:31:57:37:b9:8b:3d:8c:4c:3c:f9:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Mar 3 04:00:43 2026 GMT
Not After : Mar 4 04:00:43 2026 GMT
Subject: CN=c91c1a296b5272a3c25bacf0b9bee38e9c6411d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:0e:f1:95:d5:9b:65:1f:5b:e0:8a:89:fa:
e8:53:b6:0c:e4:a2:68:07:f6:1b:37:62:f5:e6:f4:
2d:c2:14:5a:0b:83:e8:39:82:8e:19:b8:3e:1c:a0:
de:2b:20:94:4b:4e:97:95:66:dc:27:f3:7c:0b:0c:
57:93:cf:34:f4:f7:09:df:0a:e9:78:d4:79:81:91:
b3:3c:59:7d:6a:b2:f5:e6:5c:80:e3:b4:3d:fd:4f:
2c:2a:24:46:4e:f7:33:60:63:d5:d8:9d:fd:83:10:
06:99:1f:90:79:78:71:36:a6:35:9b:c4:49:e0:5f:
27:10:a7:75:3a:9a:bc:43:ef:bb:5e:35:e6:e4:30:
1f:6f:00:96:27:d0:ed:ea:c2:d6:41:ca:1b:7b:f1:
ad:7e:48:0c:81:5a:6b:1d:ee:bb:51:99:e1:1f:51:
dd:0e:38:9b:30:62:3e:23:16:02:c4:69:62:1b:06:
24:8c:c0:27:4e:86:53:c5:73:56:ab:ef:5b:29:c7:
4a:ea:a3:0e:c5:95:64:22:bb:85:99:e6:42:6f:71:
7c:75:84:00:81:93:ed:ae:d1:84:89:e8:fa:f4:5b:
d2:7b:c7:6c:9b:fc:d2:8e:83:5d:99:d9:c3:52:88:
29:4d:07:f7:8c:60:5a:49:46:a8:ac:04:6b:f7:96:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1C:1A:29:6B:52:72:A3:C2:5B:AC:F0:B9:BE:E3:8E:9C:64:11:D0
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2e:80:93:53:7c:70:e8:7a:9e:c2:25:1c:27:72:30:9d:30:
06:59:72:3e:cd:46:44:f5:71:4e:91:9a:60:50:23:ec:49:90:
bc:d2:74:da:07:a6:1f:76:9d:99:eb:2b:3c:36:6d:41:ca:af:
69:eb:7f:f2:d5:48:31:a2:e2:e3:c8:cb:d3:f6:55:11:a7:93:
b9:c6:a3:ee:c5:f1:e9:9d:30:e9:f4:bc:e8:2b:0c:1e:e1:ff:
87:92:9b:5c:ca:7f:a7:6b:ec:82:54:18:76:81:80:9a:12:c1:
5b:eb:13:ef:42:91:74:cc:8d:04:89:a2:ba:47:03:f4:20:c4:
4b:2a:2e:e5:19:c4:08:11:a9:2d:18:24:65:9a:e4:4e:32:50:
b4:dc:94:3a:ae:fe:5a:67:67:9f:1e:1b:0e:c1:74:c6:27:d9:
b9:5a:a5:af:03:1e:73:85:53:34:39:67:6c:97:57:3d:fa:34:
7e:38:ed:38:0e:09:a3:3e:eb:f2:b7:96:f7:af:f2:d6:81:75:
56:80:8f:3a:53:22:19:f4:f2:55:47:5f:57:73:5f:74:56:b4:
7d:ca:d4:f3:09:f2:52:57:86:20:ba:ae:20:b1:c6:44:21:4f:
5b:b8:b9:e5:66:92:fe:f9:5a:87:e5:85:98:89:12:df:8f:4a:
74:5a:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:03 2026 by rpki-client