Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier: hr71FrScug9yZqrWessU8LkZ+HyevFKRbwJxGcdolMY=
Subject key identifier: 78:1C:22:C8:FC:9B:58:A5:2C:FE:0F:EC:5E:E3:59:E9:DA:90:91:56
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial: 019F21D9BEBB5D6A49F85945CA5DBB7496E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number: 107F
Signing time: Thu 02 Jul 2026 08:02:26 +0000
Manifest this update: Thu 02 Jul 2026 08:02:26 +0000
Manifest next update: Fri 03 Jul 2026 08:02:26 +0000
Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: zCoIIxUbJUcyuaq/1YubIaJYJNC03yfT+b4sFQ2rUWQ=)
2: AvvuwRM1rXoB8yxstk4ZmsXgR1Q.roa (hash: G1ri1MeorzSK/rz57ShZ1na3AYjwABPoQHfjiBcWJn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:be:bb:5d:6a:49:f8:59:45:ca:5d:bb:74:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Validity
Not Before: Jul 2 08:02:26 2026 GMT
Not After : Jul 3 08:02:26 2026 GMT
Subject: CN=781c22c8fc9b58a52cfe0fec5ee359e9da909156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:2e:e7:e8:0d:8f:48:17:e5:e7:21:b1:5e:
b6:c6:f9:c5:f4:f5:59:35:15:78:5d:a2:df:0a:30:
1d:2c:9a:eb:d3:52:3a:51:d5:a3:8d:7d:29:66:37:
0f:81:9e:fb:3a:2e:76:54:3f:20:b3:96:d8:c0:8d:
fa:27:31:24:89:ea:be:c5:bb:68:36:76:f2:26:31:
44:17:b2:ed:cc:5a:04:60:26:73:c8:89:6a:b6:e7:
ea:bd:fb:6a:2f:d8:06:a8:32:e8:1b:1e:f4:f5:5f:
57:a6:2f:38:56:d7:04:92:4f:93:23:90:11:b2:29:
64:13:a0:36:07:0e:35:c0:19:13:4c:dc:51:4d:b9:
55:37:27:9d:ba:e6:0e:a8:16:1c:85:7d:b6:1e:67:
29:32:ce:ad:30:f6:7f:94:5e:70:47:fe:e9:7c:c8:
0e:2a:a3:55:52:f5:2d:a5:4d:28:48:17:ca:e0:2e:
4b:b5:08:11:11:32:80:45:22:5f:ab:d5:70:c9:f8:
16:8a:8e:cc:e3:67:42:fe:e9:83:e7:60:81:0f:51:
c6:80:d6:c3:42:a7:87:70:83:db:5b:52:00:51:24:
5f:d9:a5:a6:d3:f0:2d:de:62:a2:bb:30:46:6d:e3:
7a:ff:38:fa:91:d5:81:5e:84:61:d3:88:c7:a3:31:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1C:22:C8:FC:9B:58:A5:2C:FE:0F:EC:5E:E3:59:E9:DA:90:91:56
X509v3 Authority Key Identifier:
keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7a:f4:51:81:c5:d1:a5:7f:73:08:ec:db:03:e9:f7:d3:fb:
39:ae:53:91:8c:1d:b9:ef:2b:ec:84:1a:0d:f3:47:15:a4:32:
73:04:f4:a3:1e:d6:3a:8e:df:36:0e:be:00:db:68:bf:bc:d0:
fc:24:80:31:33:ca:1d:cb:4e:d1:3e:ed:d2:18:d8:d7:11:9b:
6b:82:86:36:6e:ae:74:c1:0e:a4:b1:02:be:76:88:b0:59:7b:
d2:9e:51:cb:3b:c1:fe:bd:f4:97:36:08:cb:b7:c9:1b:17:5e:
dc:1b:cd:fc:02:9b:37:8f:f1:a8:6a:88:ed:aa:a6:2a:8a:47:
a2:35:45:d8:d8:e2:fc:8e:33:98:d2:f3:47:74:35:7f:85:e6:
5f:cb:99:57:b8:e6:88:e9:50:0c:dd:d2:79:c2:81:57:ee:96:
0b:44:72:58:d2:16:ae:1f:af:e6:a2:1e:79:f0:b4:eb:54:2a:
81:47:b7:6a:89:fd:d7:87:ce:fc:1a:f8:5d:a7:9e:68:27:d4:
e0:2c:e1:9f:b7:a1:b8:7c:0d:6e:9b:ad:de:73:0a:a9:cb:f2:
bf:49:23:af:3b:2d:ae:e6:38:42:b9:34:5d:ff:7d:56:45:fe:
1b:97:8f:5d:0b:a9:24:04:cd:df:b4:93:e1:aa:af:66:8c:57:
fe:9c:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:01 2026 by rpki-client