Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: Cfrzed9QIAMPc16uZ11emZyPj7LrG+gJu9ksqx3UysI=
Subject key identifier: 80:68:40:7E:DA:80:7A:DF:02:C6:4F:6F:76:A2:51:FD:16:5F:19:30
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 019F216B6837E6CED66A73F9A4A5FAAF2BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 113A
Signing time: Thu 02 Jul 2026 06:01:54 +0000
Manifest this update: Thu 02 Jul 2026 06:01:54 +0000
Manifest next update: Fri 03 Jul 2026 06:01:54 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: O+3/B4/cQrbVFWX8PlbEW2N6DJjFLxXZ0GCvVdCinSU=)
2: yOU3uduoN5dP8e-jmAjD8aQwrlU.roa (hash: O6bQWgeJySRYDkrf9DCbKR1ZNlkw4pe8n+wuoJJY0+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:68:37:e6:ce:d6:6a:73:f9:a4:a5:fa:af:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Jul 2 06:01:54 2026 GMT
Not After : Jul 3 06:01:54 2026 GMT
Subject: CN=8068407eda807adf02c64f6f76a251fd165f1930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:78:16:30:b9:5b:18:ca:04:02:4e:f9:51:
1e:03:72:0f:51:2d:34:e9:03:1d:dd:2e:06:03:25:
48:94:03:95:b8:f1:1e:93:2b:8d:4d:b8:54:53:d2:
39:ea:b1:5f:1c:b5:46:20:87:7c:32:07:9c:42:1b:
e7:a8:d1:ec:a0:b1:f1:66:34:f7:ff:01:04:53:a5:
d9:e0:ce:81:b1:fc:16:43:3f:1a:17:9c:e8:a2:78:
82:35:ef:fa:c1:0a:d7:e5:d2:9f:75:f6:0d:cf:0c:
38:66:87:0f:60:f8:2c:bf:ef:46:99:72:08:fd:63:
e8:f2:e2:dc:d6:59:5f:b3:2d:43:eb:7f:6c:5b:a5:
bc:c3:c5:98:8d:2a:95:6c:94:25:f4:df:0d:9a:ea:
e2:68:eb:0e:6b:4c:92:24:dd:74:81:9a:ae:38:8c:
f7:98:b4:f4:44:c8:37:bd:ea:82:5e:a6:db:2e:58:
72:11:5b:4e:a8:78:30:20:91:48:ca:d7:84:74:61:
85:6f:10:cc:ac:9a:4b:16:00:db:30:f1:9a:61:82:
88:8f:0b:b6:59:57:34:3a:d4:58:fe:55:3f:41:1b:
4e:a2:92:bf:c1:d7:d4:0d:53:dc:dd:0f:c5:89:90:
09:97:46:fc:63:ce:64:1e:88:33:c5:9f:c2:2a:bd:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:40:7E:DA:80:7A:DF:02:C6:4F:6F:76:A2:51:FD:16:5F:19:30
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3f:1e:78:71:eb:0f:00:fe:9e:bd:c7:67:65:19:ad:76:8e:
be:14:68:08:41:4b:8a:98:ba:a4:41:b5:5d:3a:d4:49:ac:34:
60:94:c4:1e:b3:b8:44:3f:3b:a9:b1:d2:69:33:b4:26:5d:1a:
19:f3:22:9c:a2:1c:d1:ee:cd:a7:48:07:d3:55:a1:0a:fc:59:
78:38:30:09:1f:31:09:09:7e:2d:9d:16:6f:be:9c:18:ea:67:
ee:10:77:88:2a:f5:b3:92:0d:6b:5f:dc:fe:82:14:d1:58:a4:
a2:44:d5:cf:02:86:3a:f4:a0:40:e3:dd:f7:86:60:d4:b7:ac:
bc:3d:70:4e:1a:a3:22:61:ff:ed:86:c9:13:f4:7b:11:2d:04:
9a:46:03:81:e1:9a:ec:09:4d:fb:69:46:74:60:03:bf:82:11:
65:df:f9:85:5b:ac:c1:2e:6a:1d:37:ce:1f:d0:23:a3:39:76:
58:cd:93:9d:c2:ff:99:25:4f:78:04:c1:a7:bf:df:e4:ef:1a:
d3:56:0a:f3:1e:7b:0b:f1:d1:90:4a:1c:1e:10:4e:f6:35:a2:
b7:27:9f:11:bf:98:c9:01:24:85:19:b7:fb:cd:0d:5f:7b:af:
ec:e5:aa:d2:ac:28:64:74:9c:55:f2:78:74:39:68:bc:c3:d7:
15:a2:e2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ha2g35s7WanP5pKX6ryuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjlhZDAxNDA3MmRlNjYxNzQzOGZiMWFmYmU0MWEyZGJk
YzgxMWMwHhcNMjYwNzAyMDYwMTU0WhcNMjYwNzAzMDYwMTU0WjAzMTEwLwYDVQQD
Eyg4MDY4NDA3ZWRhODA3YWRmMDJjNjRmNmY3NmEyNTFmZDE2NWYxOTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgR4FjC5WxjKBAJO+VEeA3IPUS00
6QMd3S4GAyVIlAOVuPEekyuNTbhUU9I56rFfHLVGIId8MgecQhvnqNHsoLHxZjT3
/wEEU6XZ4M6BsfwWQz8aF5zooniCNe/6wQrX5dKfdfYNzww4ZocPYPgsv+9GmXII
/WPo8uLc1llfsy1D639sW6W8w8WYjSqVbJQl9N8NmuriaOsOa0ySJN10gZquOIz3
mLT0RMg3veqCXqbbLlhyEVtOqHgwIJFIyteEdGGFbxDMrJpLFgDbMPGaYYKIjwu2
WVc0OtRY/lU/QRtOopK/wdfUDVPc3Q/FiZAJl0b8Y85kHogzxZ/CKr2hOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBoQH7agHrfAsZPb3aiUf0WXxkwMB8GA1UdIwQY
MBaAFBEprQFAct5mF0OPsa++QaLb3IEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzIt
YWM4ODE0OTdlMGEyLzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzItYWM4ODE0OTdlMGEy
LzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcD8eeHHr
DwD+nr3HZ2UZrXaOvhRoCEFLipi6pEG1XTrUSaw0YJTEHrO4RD87qbHSaTO0Jl0a
GfMinKIc0e7Np0gH01WhCvxZeDgwCR8xCQl+LZ0Wb76cGOpn7hB3iCr1s5INa1/c
/oIU0VikokTVzwKGOvSgQOPd94Zg1LesvD1wThqjImH/7YbJE/R7ES0EmkYDgeGa
7AlN+2lGdGADv4IRZd/5hVuswS5qHTfOH9Ajozl2WM2TncL/mSVPeATBp7/f5O8a
01YK8x57C/HRkEocHhBO9jWityefEb+YyQEkhRm3+80NX3uv7OWq0qwoZHScVfJ4
dDlovMPXFaLiDg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:32 2026 by rpki-client