Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json)
Hash identifier: LanANEQrd9kgkaCRE31vEi4TXQEgKqx+8XWgI9F0HM0=
Subject key identifier: 6D:57:8D:62:0B:0A:6B:82:C2:26:8F:CA:1A:B5:46:29:B9:5F:33:71
Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Certificate serial: 019F22470F68E6712D79821434C3EA5A9965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
Manifest number: 0CAF
Signing time: Thu 02 Jul 2026 10:01:49 +0000
Manifest this update: Thu 02 Jul 2026 10:01:49 +0000
Manifest next update: Fri 03 Jul 2026 10:01:49 +0000
Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: T3/3y2ioeRL1LAGNO10dmepjBJvJFu4uFxDENbQfOzE=)
2: bxRzuQ7bASGe-s-sdD1--Cz8P4M.roa (hash: +XM1cLvQITLL+hcYwm0/qg57RFddihfSN5qfe1ousHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:0f:68:e6:71:2d:79:82:14:34:c3:ea:5a:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc
Validity
Not Before: Jul 2 10:01:49 2026 GMT
Not After : Jul 3 10:01:49 2026 GMT
Subject: CN=6d578d620b0a6b82c2268fca1ab54629b95f3371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:75:e4:36:d8:04:be:bf:44:5a:a0:c4:e1:
3b:c3:01:f2:34:09:75:50:88:32:2c:5b:e7:44:07:
08:14:1d:c6:25:80:97:36:14:0a:9d:4a:ab:db:f8:
37:de:40:f5:8b:8b:c5:14:fe:94:15:5d:a8:86:3a:
00:b7:67:a0:5e:63:e4:aa:8f:10:20:63:6b:b7:94:
1d:68:ed:fd:af:5d:0b:3c:ea:70:7b:7a:cc:08:8e:
7b:e6:8c:e8:2a:61:de:dd:70:0c:56:f2:04:67:77:
9f:a7:6a:89:5e:89:a5:b7:18:6c:02:94:b2:5f:ea:
de:01:e0:79:31:b5:11:d5:f3:75:85:c5:ce:55:94:
78:93:0b:ec:1c:96:64:2f:e6:fa:d5:de:e2:03:eb:
3e:ce:21:2e:d3:c2:c5:1b:a6:e7:1a:7e:bd:d2:d9:
44:aa:77:a1:fd:e0:5e:f9:eb:a8:0c:a3:fa:ed:7a:
14:92:45:5a:e8:e0:33:96:fc:6c:dd:cb:62:11:b2:
fb:8a:b8:f9:6d:bf:77:d4:01:45:07:86:3b:e7:e2:
f6:c4:f5:bc:8c:7f:15:8f:f3:52:36:f9:04:85:46:
99:f9:d7:2f:12:fe:95:c1:ca:a7:38:dc:48:88:a0:
18:df:c2:42:ec:51:c6:60:29:ae:61:fa:bf:ec:25:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:8D:62:0B:0A:6B:82:C2:26:8F:CA:1A:B5:46:29:B9:5F:33:71
X509v3 Authority Key Identifier:
keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:18:da:96:4f:0c:2b:c7:9d:c5:53:af:36:56:ff:2f:66:cc:
43:23:74:46:6c:25:47:e2:c0:5b:ac:e9:fa:81:cc:ea:d6:d5:
1a:9d:7d:f4:02:1c:6a:e9:06:c1:21:da:e6:a5:37:5e:30:ec:
cb:88:78:1e:77:5c:76:36:3f:53:21:4f:79:a3:93:3e:23:f7:
bb:34:0b:55:6e:1d:f0:5c:3f:d7:2a:a1:55:22:e7:d1:25:bd:
1a:d3:a0:b1:31:c5:c1:78:5d:0b:7b:38:1c:65:1e:34:80:39:
b7:93:6d:8c:fe:6c:dd:54:8d:82:e3:56:a1:1a:59:4f:e6:f9:
34:a5:7a:79:10:51:f2:cc:aa:95:07:e1:24:83:b4:44:2a:09:
1f:52:2b:eb:c2:b1:e0:7a:51:f3:8b:c9:92:c4:30:08:76:6b:
b3:5d:16:3e:82:9a:a2:2d:38:05:b5:72:f4:66:3f:47:6e:10:
72:c7:25:24:e4:46:fb:5c:c3:dc:2e:62:d0:03:6e:6d:aa:8f:
72:71:7d:a5:72:c4:6e:60:59:ea:61:bd:78:3e:85:47:96:99:
b3:d8:ac:01:8c:57:cc:fb:ec:f9:76:55:02:20:06:75:09:7a:
3c:0d:b9:16:91:e7:a1:6e:0f:6b:50:1f:36:2c:20:d0:9d:8e:
8c:e1:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:38 2026 by rpki-client