Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: gadLyC12ASr5yZmiqtNeYl9w9c4GmsnRJeHzbshWQ2Y=
Subject key identifier: B8:ED:31:3D:FC:57:59:5F:7B:4B:C8:03:9A:F4:50:01:CC:D3:4E:9E
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019F2247052FA6A1A6B0962B87BF2D51E19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 05A2
Signing time: Thu 02 Jul 2026 10:01:47 +0000
Manifest this update: Thu 02 Jul 2026 10:01:47 +0000
Manifest next update: Fri 03 Jul 2026 10:01:47 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: GqvVRrTIcw/8xL+WrZNamSRrMVs6DitTkm2tKxlpsJc=)
2: PchT168ujFib-nY79tBpP-zJgdY.roa (hash: X54RZoJH7rp6pAWMbh3u6FOekQubaYZ6ugL/JB3twaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:05:2f:a6:a1:a6:b0:96:2b:87:bf:2d:51:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Jul 2 10:01:47 2026 GMT
Not After : Jul 3 10:01:47 2026 GMT
Subject: CN=b8ed313dfc57595f7b4bc8039af45001ccd34e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:29:47:b3:d6:c8:29:e9:72:6f:e7:bc:76:
8f:d8:57:b0:00:a4:5f:76:77:a2:b0:a4:e9:b0:e5:
9f:47:4d:1a:f4:11:33:91:2e:de:3f:a6:9e:af:3c:
c8:3c:61:98:ec:31:d4:e7:69:34:08:f6:09:4a:d1:
09:a8:bb:4c:14:0b:58:72:af:69:80:22:e2:52:1d:
61:1c:77:6c:53:ad:c2:fd:fb:e8:06:2c:b4:d8:fa:
4e:32:04:90:45:7e:13:d7:d0:3f:be:d3:24:ae:9c:
55:62:8e:f4:41:6d:28:36:6b:14:1b:99:f4:1e:c6:
59:53:b2:02:19:99:b8:76:69:1f:a3:b7:2a:ac:b7:
4b:ca:f5:10:c2:7b:2e:48:c1:2a:cd:08:b0:48:cc:
59:5e:eb:96:9b:a4:17:e8:f6:02:16:45:84:29:d8:
cc:0e:ce:0b:52:40:00:d2:c0:2f:4e:9c:64:84:38:
52:d7:b3:6b:5b:2b:ba:0a:05:e0:85:9f:a2:6b:75:
07:89:ea:08:81:e9:53:71:8e:f9:8a:75:69:f2:51:
83:1d:4b:45:71:74:bb:74:bf:bc:c7:cd:93:20:3c:
99:35:8b:0e:d5:02:f5:b7:a3:52:e9:58:ee:88:ad:
c9:06:f3:fc:6f:b6:59:25:57:0b:07:9e:a2:b6:d9:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:ED:31:3D:FC:57:59:5F:7B:4B:C8:03:9A:F4:50:01:CC:D3:4E:9E
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:be:12:b7:46:51:99:21:ff:4c:3d:74:a7:c1:b0:31:33:
dc:8d:27:de:4d:d6:97:6e:9a:e0:fa:ab:61:9a:5c:d7:a5:68:
2e:7e:ef:26:6e:cd:9c:25:09:d2:ab:83:12:15:c0:76:dd:65:
57:73:ef:8f:91:c0:6a:fc:2d:a2:ba:ca:af:ab:d0:2e:26:ea:
05:d5:9c:a5:0e:18:8c:c6:d8:fc:df:1e:e0:6a:34:6c:85:a2:
1a:37:ce:7f:03:b1:a6:5f:42:7f:5a:bb:44:96:71:09:b3:da:
94:a3:13:66:37:ad:e3:d7:5b:d2:d8:a7:22:00:f0:c1:a5:19:
b9:9e:60:32:cd:a1:c1:c7:47:d5:95:53:2d:ea:57:f2:cc:be:
34:a9:d4:8e:c9:0b:01:3c:4f:4b:05:91:e7:cc:10:c6:d2:6a:
eb:17:0f:7e:36:38:e7:52:58:a0:6e:90:c0:c2:d2:e2:70:d9:
75:59:7c:5b:65:50:69:93:1e:62:2b:2a:f2:3f:cd:75:b0:de:
cc:00:67:0a:d4:50:3e:96:87:55:fe:31:3e:a0:a6:55:e8:ee:
b7:4c:4f:ca:6a:54:81:60:56:98:ee:a1:ef:3a:fc:e0:90:27:
bc:e6:76:a2:ee:16:5d:9c:f1:79:6a:b1:ca:0e:b0:ed:dd:1d:
1b:b0:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:06 2026 by rpki-client