
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: YKD7Y2KnkXOhdDqA9aDHrPHZkoM8+Kv4wHAvIQAEI+Y=
Subject key identifier: 8B:26:89:A1:FC:FE:F1:F4:A9:E9:24:A5:8B:1F:9C:C4:D6:2B:CA:60
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 019ECDF2359CA87BA1C5DA5D9C64D8428E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 1960
Signing time: Tue 16 Jun 2026 01:01:03 +0000
Manifest this update: Tue 16 Jun 2026 01:01:03 +0000
Manifest next update: Wed 17 Jun 2026 01:01:03 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: 5fETn9a3+6NcWyMe1E1ybzLKEKYoDTU1Oxs89S+QIlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cd:f2:35:9c:a8:7b:a1:c5:da:5d:9c:64:d8:42:8e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Jun 16 01:01:03 2026 GMT
Not After : Jun 17 01:01:03 2026 GMT
Subject: CN=8b2689a1fcfef1f4a9e924a58b1f9cc4d62bca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fa:ee:ed:8d:bb:ae:fc:21:9b:45:f9:3b:c8:
27:31:ce:48:b3:98:ba:79:05:6e:ed:5e:08:5e:34:
f6:6c:c2:1b:0a:d2:a3:3c:bd:d2:31:52:35:ba:60:
54:ea:77:fc:01:84:c3:2a:54:4a:81:c1:6f:4b:a5:
be:de:5f:f2:7a:bc:3f:6f:c4:4c:43:e1:d3:91:75:
b3:1b:b9:30:67:2e:33:be:0a:35:48:bc:09:12:87:
37:49:14:36:3c:fb:5e:ed:99:6a:f4:e9:1e:74:4f:
f8:76:60:6a:c8:90:f7:82:ad:44:80:cb:5f:51:20:
cc:8a:c1:5a:37:94:c9:14:82:fc:af:57:f5:d2:90:
3d:de:76:21:ba:00:c8:05:36:c8:52:36:ed:c1:17:
9c:29:f6:81:21:e8:ee:d0:75:b6:c1:c4:e3:48:cc:
63:c6:d5:56:06:a5:45:4c:9d:5b:16:76:9c:c2:dc:
24:75:df:97:c5:6e:d4:d2:2d:f9:fc:04:f0:4e:79:
46:63:07:7e:97:62:97:fb:0b:a9:e9:52:9e:41:8a:
4e:59:12:82:0c:73:59:9a:d6:42:b9:a3:99:7e:d4:
ae:e3:41:97:cd:05:b5:cf:83:38:b0:a2:a3:20:af:
38:7a:67:fe:30:e6:60:82:8a:22:76:4f:92:6c:ef:
0a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:89:A1:FC:FE:F1:F4:A9:E9:24:A5:8B:1F:9C:C4:D6:2B:CA:60
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:8c:a2:55:8d:f4:11:9b:8a:8b:a9:ed:16:e6:dc:34:57:
f3:48:af:2c:85:58:ca:a5:e1:3c:1b:70:ac:da:ea:8c:a5:5b:
32:33:4d:33:25:96:69:6f:88:48:06:db:7c:2d:ae:09:eb:84:
b9:34:99:88:ac:c3:ab:a3:c3:8b:e0:0b:34:8f:3f:6a:aa:9b:
9c:31:98:8e:a7:62:15:34:1a:87:b6:16:a5:21:aa:42:15:b4:
06:df:dc:3f:11:cc:d1:05:a1:12:d3:87:34:99:a3:57:55:88:
7e:17:d0:d4:6e:fc:e7:83:6a:30:fd:a5:41:b3:3b:f8:f8:30:
74:e3:ed:20:eb:b7:82:e6:73:b5:ad:1c:65:84:15:5a:69:39:
8a:b6:d6:91:ee:82:92:6a:9b:34:eb:a7:7b:6a:6d:23:59:08:
27:57:31:31:f4:3b:13:2b:20:98:88:79:c5:65:59:fb:25:18:
36:ac:9a:45:7e:97:9c:27:2e:74:04:3d:82:8d:f3:5e:aa:61:
03:aa:fd:38:0c:94:79:71:c4:e1:c4:c8:fd:fa:f0:45:ea:b9:
05:4e:d1:ae:0e:a9:95:03:e3:4e:38:46:16:05:b2:52:10:4e:
21:7b:32:3e:0a:fa:87:fa:3d:b7:1c:9b:6f:a8:8d:01:8d:24:
10:43:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:48 2026 by rpki-client