Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File: D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier: 8p+6Gt4f2CAE/RQU9Tk+Xn+nYoZUk6DgTt/HEjApQ/I=
Subject key identifier: BD:02:CB:56:7D:A6:22:B5:E2:82:D6:F1:22:CA:3B:6D:E9:5A:9B:05
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer: /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial: 019F21D9A8436F077B90C3DA85BFD9F090EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number: 0AE7
Signing time: Thu 02 Jul 2026 08:02:20 +0000
Manifest this update: Thu 02 Jul 2026 08:02:20 +0000
Manifest next update: Fri 03 Jul 2026 08:02:20 +0000
Files and hashes: 1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: hpTv+EX01c949P80HNG970J8BxeY1ZixyJrsCxNiUWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:a8:43:6f:07:7b:90:c3:da:85:bf:d9:f0:90:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Validity
Not Before: Jul 2 08:02:20 2026 GMT
Not After : Jul 3 08:02:20 2026 GMT
Subject: CN=bd02cb567da622b5e282d6f122ca3b6de95a9b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:4c:77:d2:54:3a:94:d2:52:c3:43:01:57:
18:91:1b:22:7f:d2:ae:0e:4c:eb:88:79:55:c7:a3:
a3:62:f3:c5:94:7e:dc:06:de:06:a9:3a:2a:92:37:
5f:fa:2a:2b:9a:6b:d6:6e:cc:13:e1:40:ec:6c:7b:
6d:d3:17:10:3b:67:c4:29:af:1a:62:3c:25:f1:eb:
58:65:df:e9:73:da:b4:f1:80:dc:e2:7b:5d:ba:e7:
9d:7a:81:cc:66:37:6c:dd:a0:25:e1:4d:dd:f2:e3:
35:c2:48:9a:a7:3d:c0:80:c0:8c:fa:59:3e:97:e2:
68:1e:66:c7:f4:f7:ed:fa:08:1f:58:2b:bc:19:3c:
1c:05:13:7b:9e:31:dc:f2:3a:e4:ee:92:2d:c4:a3:
25:16:88:56:22:39:71:45:6b:1b:6c:6f:c2:0e:9c:
f6:31:88:f2:a1:dd:29:a1:cb:85:03:1e:d9:52:25:
39:fa:d1:72:cf:4f:ef:a6:71:91:28:3d:ab:b3:5e:
a6:8b:c9:a2:ea:0d:31:21:e5:54:7b:bd:c5:59:a2:
3b:d9:25:79:77:b1:25:bd:52:73:7f:3d:50:e2:99:
63:44:73:94:52:47:7f:0c:c2:3a:ea:b1:1c:d5:b7:
93:bb:27:37:c7:04:d7:d8:66:63:da:b4:64:79:00:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:02:CB:56:7D:A6:22:B5:E2:82:D6:F1:22:CA:3B:6D:E9:5A:9B:05
X509v3 Authority Key Identifier:
keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:ee:6e:df:e7:e2:f4:c5:7e:5e:fc:79:38:d1:1f:88:65:
7b:8d:04:03:51:b6:98:f8:fa:98:33:5e:fc:f0:53:38:07:70:
41:d7:a9:50:d6:6f:24:0c:24:ba:94:61:a0:2e:56:88:7c:3b:
05:f6:4c:ce:51:e0:2e:59:e9:13:01:e6:4d:13:36:41:26:d4:
a1:e1:97:3a:fc:42:dc:d9:a0:b5:12:fe:17:96:d0:12:a2:eb:
76:52:ba:c3:db:6d:66:32:95:a3:b1:b6:ac:8c:65:83:b7:bc:
b0:f2:67:85:91:80:d5:f1:5c:c6:0e:11:3b:84:a8:56:a6:9b:
29:6c:c0:8e:84:0d:19:29:ce:22:93:8b:5d:16:ca:95:49:1d:
76:71:93:b6:9c:7a:40:a2:c6:1f:89:78:8c:65:92:11:e9:a2:
d1:84:99:bb:da:3d:13:ac:20:41:5d:a4:92:2a:f1:14:ce:aa:
8a:d6:37:f2:32:bb:d1:6a:19:42:10:6e:66:4c:26:62:c2:b7:
29:0f:27:8e:9f:89:e2:e9:3e:c7:3e:1e:30:e4:38:94:3c:c5:
8f:0a:d4:24:2d:ed:ee:fa:47:68:e5:82:08:37:b8:37:2e:34:
47:ec:76:43:ba:29:74:4e:7b:fa:ff:49:3b:61:9e:3a:53:67:
05:10:a0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:36 2026 by rpki-client