Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: gx1oLf6hA3arrCa7FqA5TUVh0qzXxJ4tie6KAJYCBBo=
Subject key identifier: F9:95:2F:C2:B6:08:0B:24:CC:88:FC:3D:67:CA:55:31:16:7D:DD:CD
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 019EF86EEC3903CB7006CE5F7E1D86563D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 197B
Signing time: Wed 24 Jun 2026 07:01:19 +0000
Manifest this update: Wed 24 Jun 2026 07:01:19 +0000
Manifest next update: Thu 25 Jun 2026 07:01:19 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: 4MyUcZqlee5ZKKhXInZW69de7RDB2ppzIQzWCrAmXIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:6e:ec:39:03:cb:70:06:ce:5f:7e:1d:86:56:3d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jun 24 07:01:19 2026 GMT
Not After : Jun 25 07:01:19 2026 GMT
Subject: CN=f9952fc2b6080b24cc88fc3d67ca5531167dddcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6a:22:3a:e0:4e:b4:dd:48:35:6a:ed:9c:4c:
e9:83:56:5f:9d:04:39:3b:8c:b5:06:ed:ec:2c:0d:
71:48:36:e3:ad:b4:97:78:3a:65:76:fb:6f:e5:dd:
e6:e4:cb:25:de:08:c2:a9:21:ce:1b:6b:d6:c2:0d:
04:88:44:27:d3:8c:15:62:34:19:fc:58:ef:eb:b9:
2e:06:ac:b1:df:52:98:54:22:ed:95:25:62:4a:d0:
72:ce:81:4f:25:a0:c4:6f:a5:43:11:7c:91:f5:09:
8f:c8:c4:e9:59:b1:d2:65:9e:45:44:4f:72:aa:e3:
48:4d:3f:88:e1:de:c6:5d:cc:bc:b1:21:e5:a7:15:
d5:96:d6:57:a8:f0:b9:46:df:c3:cf:7c:cc:ac:f5:
1d:61:8c:66:b6:f1:7e:ea:c3:5c:ae:97:3d:62:41:
c6:80:a1:83:f1:fa:a0:53:c1:14:f2:71:10:83:4c:
7b:b4:d2:1e:de:10:7d:50:3b:ce:8f:60:7a:86:9b:
e4:40:36:12:09:97:14:5b:85:73:f1:d6:22:d1:de:
81:d3:70:d0:5d:51:79:66:a5:ae:b1:8b:7a:05:78:
16:bc:ef:7a:fb:0e:50:0a:be:a1:10:25:0b:66:2e:
88:ae:8a:5e:63:09:22:77:d1:77:14:ba:f4:2f:91:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:95:2F:C2:B6:08:0B:24:CC:88:FC:3D:67:CA:55:31:16:7D:DD:CD
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ea:06:c2:9c:35:22:7a:4b:f4:29:6f:49:18:77:ae:e4:a9:
a5:6f:d7:90:c5:47:3e:c9:44:0d:17:93:e1:57:0a:41:d7:ec:
37:e4:02:40:d5:15:b8:39:04:47:28:78:81:40:e5:74:ce:77:
48:03:e2:87:45:99:33:68:6e:65:04:54:9a:0a:02:64:7f:d4:
91:86:47:bf:c3:66:54:ef:cb:a3:62:3c:18:b1:85:34:8d:29:
58:55:0b:29:28:a6:36:a6:a6:cd:0e:be:4e:6d:4f:c6:ef:d9:
9b:08:03:f5:06:6c:fa:10:49:82:72:28:06:4c:f8:d7:6f:5e:
b1:15:78:62:f3:ab:2d:bc:28:02:90:01:95:81:4e:bb:18:f3:
9e:2d:3c:93:7d:2d:c2:5d:a4:74:22:fb:88:45:a1:f2:fc:76:
59:cc:2f:28:0b:72:42:41:8b:af:be:3a:ae:23:83:30:f4:37:
88:56:4b:9f:c1:65:6a:41:33:9b:f4:2a:32:c3:c1:34:7d:3f:
18:a6:34:5b:f9:c2:95:eb:b7:55:b4:80:dc:6e:0d:ac:15:90:
a4:7b:de:77:ea:e7:02:d0:2c:28:b6:b4:b1:46:8e:72:91:d3:
0c:c2:a0:79:0f:95:cc:f3:b3:0c:28:90:7a:ed:d2:c1:eb:4f:
46:cb:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:27 2026 by rpki-client