Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: avfhJohjp/v4WUljkcn3WciSQ/d+OtUUKtmKHd3EmSo=
Subject key identifier: 42:46:60:88:94:81:7F:E8:2E:50:29:0C:A6:CD:63:91:39:60:9F:59
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019F2210364D5CA3E766B5F382A4402497B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 12B6
Signing time: Thu 02 Jul 2026 09:01:55 +0000
Manifest this update: Thu 02 Jul 2026 09:01:55 +0000
Manifest next update: Fri 03 Jul 2026 09:01:55 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: 5Zqg3srgxgLWW92OFn8mpGmQ6W0d151cez7SCDbQhG0=)
2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:36:4d:5c:a3:e7:66:b5:f3:82:a4:40:24:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Jul 2 09:01:55 2026 GMT
Not After : Jul 3 09:01:55 2026 GMT
Subject: CN=4246608894817fe82e50290ca6cd639139609f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:32:f1:1d:91:15:0e:ae:ac:fd:3f:49:9a:
ec:b9:7d:47:76:ea:b8:0f:3e:b5:0e:67:a6:ed:5e:
2e:52:90:cd:df:5f:8a:e0:68:73:f4:9c:6c:8f:c1:
0d:45:3b:b7:4b:42:a5:5a:44:8d:ce:14:19:c7:08:
fa:35:dc:b2:12:36:c6:6d:1a:c7:c7:b0:8d:4d:ca:
63:50:12:30:39:48:81:06:bb:69:df:f8:56:2a:9d:
1a:e6:c1:3d:2d:23:0c:f1:35:4a:1f:a8:f9:20:3c:
5f:e1:da:b7:e6:03:a7:36:4a:6b:11:b4:a0:ad:34:
a2:ac:2f:b2:b7:b7:85:ab:4f:ef:05:40:16:bd:42:
48:6d:f7:b7:fd:c1:70:38:c9:2f:07:79:71:c3:4d:
e8:8e:9d:04:1d:54:40:f4:3c:05:53:7b:a4:05:f5:
9c:e9:55:0f:93:30:49:07:45:ea:bf:66:72:c3:92:
a2:f8:e5:d0:f6:36:6e:83:c0:eb:09:55:11:b9:f6:
08:6f:84:8a:bb:82:87:86:16:6f:f3:05:82:55:60:
71:0f:9c:91:e1:f2:78:23:14:5b:5e:0d:16:bb:19:
22:c7:2a:b3:0f:dd:b3:cc:17:d0:97:92:ee:0c:af:
dd:c5:3f:c7:20:b8:ed:ec:41:36:62:70:06:f6:21:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:60:88:94:81:7F:E8:2E:50:29:0C:A6:CD:63:91:39:60:9F:59
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7d:1f:5b:36:5c:83:61:88:dc:b6:22:af:69:7c:0f:e3:10:
ed:42:e7:d0:a0:aa:08:2b:2b:74:c6:56:79:ed:d2:0b:cb:88:
e8:d0:a4:e1:bc:4c:1d:0c:3d:6a:4c:0a:59:9a:bc:e5:39:fe:
28:35:d4:79:38:c1:4c:70:a3:85:ec:58:74:86:cf:4d:7c:ee:
18:76:aa:f6:e5:3a:0b:d3:1c:43:39:0c:c5:31:8f:bf:2b:f1:
b3:c5:84:40:e2:64:e2:94:65:42:3e:04:75:c9:99:54:a3:c8:
99:e2:42:5a:ed:90:34:76:07:d5:7c:c7:87:a0:6d:a5:2c:cf:
4b:9d:7d:aa:a2:ba:c7:6b:57:f5:01:ac:52:b3:08:ac:d5:e0:
36:98:c5:3d:77:f6:66:95:9a:e9:12:7a:57:f6:75:95:42:91:
a4:69:1c:2f:25:81:f0:91:43:ca:d4:1e:7e:a5:14:b2:bb:0a:
e7:14:48:f5:16:5d:cf:11:81:fb:66:cd:4c:a9:13:cd:c8:5c:
5a:6d:d0:b5:ff:45:7c:3a:e9:6b:0c:95:bc:bf:4f:6e:3b:05:
2b:8b:56:db:34:a1:6a:69:05:2b:7d:1c:77:e1:eb:35:60:12:
9d:3d:46:5c:c1:64:94:d9:85:81:48:2a:de:06:90:b0:a4:ef:
ee:fe:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:06 2026 by rpki-client