Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: eCWtkyt0NrXBh1p9i+inMd0dyMtxSVhCjSqxFiHKkuI=
Subject key identifier: D4:19:4E:D9:DA:39:E1:8F:9B:9F:08:B9:91:06:23:F0:82:EB:D9:1C
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019FF9110BE549F55FEFFBBBFC9C9D4C6D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0715
Signing time: Thu 13 Aug 2026 03:01:11 +0000
Manifest this update: Thu 13 Aug 2026 03:01:11 +0000
Manifest next update: Fri 14 Aug 2026 03:01:11 +0000
Files and hashes: 1: 1--MCc3gpVBQtwbB9avYkUxDFIvM.roa (hash: wb75GUC4q+RfY4Cw2WuF/jF6L+kLxsSKpYw9015kCjQ=)
2: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: vRXZOK86z1ADTo89m4SHWjCZGedKero1ICtmpTur/MM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:0b:e5:49:f5:5f:ef:fb:bb:fc:9c:9d:4c:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Aug 13 03:01:11 2026 GMT
Not After : Aug 14 03:01:11 2026 GMT
Subject: CN=d4194ed9da39e18f9b9f08b9910623f082ebd91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4b:55:c2:13:ea:14:e8:0c:6b:d3:ed:ac:57:
6e:03:c5:a3:c2:77:02:5b:0a:8e:1f:12:2f:ac:7d:
c8:e6:86:e2:12:3a:be:af:8d:b0:20:1c:48:ef:b9:
cd:f0:99:9b:c1:33:eb:4c:5e:86:8b:a8:25:fb:69:
8f:a2:cb:62:11:bb:f2:e3:35:a2:2f:19:37:4a:62:
61:bf:70:ea:3b:40:b8:30:18:f8:f5:58:18:14:b2:
28:40:72:54:3f:a0:42:c3:88:37:d7:8b:4d:15:05:
be:a7:13:44:dc:aa:79:7e:7a:6d:78:24:27:8d:11:
c7:2f:31:dc:91:91:66:45:3c:bb:4f:8e:fb:bd:54:
58:25:37:90:33:8f:e3:d0:38:69:38:d3:31:aa:00:
ea:03:18:f4:22:07:2d:7a:b8:f7:46:b8:72:80:b0:
2a:63:11:30:7c:fe:bd:cb:a4:bd:4a:e2:2e:61:63:
c1:35:44:d9:38:2f:45:00:f4:44:1c:b6:60:7a:33:
59:a4:50:9a:64:30:b7:42:83:14:9a:19:75:2f:0c:
97:04:98:b7:93:aa:a5:c6:07:c3:1b:bf:6f:3e:80:
10:17:95:23:b6:72:44:48:b3:92:9d:ef:c1:89:d4:
7e:e2:07:16:69:2f:73:7c:4f:67:c9:f4:5c:1c:18:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:4E:D9:DA:39:E1:8F:9B:9F:08:B9:91:06:23:F0:82:EB:D9:1C
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e4:4d:d4:7e:d5:6e:7c:86:ac:8e:e8:6d:28:3f:97:3a:e2:
ff:32:8c:ac:6a:69:c4:39:01:42:6a:dc:48:fd:c5:6e:0c:d1:
35:5b:1f:a8:8f:5a:fd:10:c7:f5:a7:95:5d:10:43:5b:15:3d:
7b:15:53:d5:12:c7:df:cb:98:ed:74:6f:64:9e:6d:5f:51:12:
1d:75:bc:3e:9f:81:26:6e:1d:5e:10:93:6a:67:8c:42:ec:ea:
3b:37:f5:e7:85:72:e4:0b:28:5c:fa:3a:24:d0:e1:f2:a8:f6:
3c:3a:9b:92:a5:c2:62:d2:e3:c3:1b:22:60:0c:31:f7:b8:33:
d4:de:a9:82:1e:54:bb:47:db:44:38:81:30:d1:e6:92:56:f6:
6f:52:78:28:23:ac:85:50:dd:53:91:60:9b:1e:d1:0c:d7:0e:
17:54:4f:c7:6a:5d:b7:b7:54:08:eb:d2:e1:d1:cb:d5:27:b0:
25:5e:16:a6:5e:04:47:85:6d:f3:ee:c8:da:77:67:83:e7:79:
f6:af:ac:a4:02:7c:f7:f8:92:d2:b9:c5:cd:af:66:d1:fc:2d:
34:f2:8c:64:0c:ab:7b:a8:0c:1b:cb:a5:3f:33:05:4a:5b:7e:
ba:b2:a7:a7:11:1e:a6:23:86:bc:f9:54:f5:d0:1b:2e:19:fc:
27:2b:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:39 2026 by rpki-client