Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File: 0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier: T6oVsCgK0iyq3AC6NI0KdgO2xe5iBnJSrOVSWBXuwdA=
Subject key identifier: FA:C3:10:6E:DA:1B:31:22:46:9C:CD:F4:33:E6:D9:AB:49:E4:9A:B0
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer: /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial: 019F220F9CEF32832AA7C689302E76BA6EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number: 09B9
Signing time: Thu 02 Jul 2026 09:01:16 +0000
Manifest this update: Thu 02 Jul 2026 09:01:16 +0000
Manifest next update: Fri 03 Jul 2026 09:01:16 +0000
Files and hashes: 1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: FN5s8n7QXQlrLKyeb4GxuglCP80zti87A6xEWP2+Z8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:0f:9c:ef:32:83:2a:a7:c6:89:30:2e:76:ba:6e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Validity
Not Before: Jul 2 09:01:16 2026 GMT
Not After : Jul 3 09:01:16 2026 GMT
Subject: CN=fac3106eda1b3122469ccdf433e6d9ab49e49ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:f3:2f:4b:5c:3a:85:8a:85:a5:2a:e9:ee:
4f:21:33:50:20:98:5e:76:85:b8:05:4c:9c:ab:47:
d0:85:76:58:93:da:62:16:7d:00:7c:7f:62:28:79:
37:e9:ef:27:7a:4a:39:89:46:a0:fc:50:99:73:82:
e9:7b:86:0c:fa:c8:4b:4c:34:29:c2:97:ff:d0:f2:
90:ce:cf:39:b2:72:b9:0f:ea:51:02:ba:51:9e:c2:
3f:b6:9b:d8:64:37:47:ef:fa:ae:c4:7a:f2:c5:42:
d7:ca:a9:33:9d:73:7f:85:b0:62:7c:83:f4:74:e7:
84:93:c4:a8:e7:e3:6f:df:15:fc:35:ba:91:50:9c:
f4:73:ee:8f:b4:66:79:08:87:39:0f:b5:6c:d1:3c:
d4:33:8f:f6:d9:1b:e0:5c:1f:fb:90:06:0e:de:91:
84:2a:0e:dc:6c:30:c3:3c:09:7b:0f:d1:24:b3:bc:
aa:fd:be:e2:2e:e2:ca:42:44:ca:ba:6b:38:a4:de:
70:b9:f1:78:39:a3:69:af:da:9d:05:a3:52:3c:f3:
c1:80:bc:af:e8:6c:ac:05:31:b0:e4:9d:9b:77:af:
a0:24:05:9a:a2:99:bd:59:20:0d:eb:b3:ff:28:38:
cd:9f:64:5a:33:b6:2d:97:a5:f1:73:78:87:00:c8:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:10:6E:DA:1B:31:22:46:9C:CD:F4:33:E6:D9:AB:49:E4:9A:B0
X509v3 Authority Key Identifier:
keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:ab:b2:73:c4:4f:02:e4:0e:02:b3:81:64:08:98:7a:21:
43:e2:6d:7d:34:c8:80:e7:7c:71:a1:c3:c2:28:c8:ec:45:8c:
60:b6:c8:d7:6b:4e:fd:7a:eb:13:1f:e7:f5:d9:a9:0d:c0:ea:
fc:f3:3e:f0:78:9f:e5:c1:4a:7d:74:be:bd:eb:11:c5:e9:35:
d5:8a:cc:81:22:60:61:13:eb:50:9e:44:3b:28:79:a4:2c:b3:
97:9d:e9:be:c4:2a:69:dc:5e:34:b6:9e:68:e7:39:3d:b7:31:
b4:bb:49:64:04:e2:41:ff:86:54:64:af:cd:ba:53:6e:cf:61:
12:43:21:a1:95:26:79:7a:72:22:77:bb:f5:0a:76:fc:e1:34:
d5:8c:e8:6f:57:90:6e:eb:e5:4e:ca:6e:dc:c8:a2:fb:3a:46:
aa:1b:e2:e6:9c:58:eb:1d:73:73:87:3a:9a:01:41:b7:5f:84:
ce:93:70:13:2d:d0:26:fa:b4:74:07:27:6d:76:27:cf:9e:de:
f3:99:ab:b3:b6:d4:f9:a5:4c:40:03:4a:3d:f9:61:e5:d0:49:
94:24:2c:a3:21:fe:41:d9:67:48:6d:97:f2:56:ca:65:cb:51:
e9:7b:76:d1:d6:6f:0c:78:55:e9:f4:b3:92:2f:2d:ce:ae:40:
b9:d7:74:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iD5zvMoMqp8aJMC52um7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzAxZjMyM2QxZDI1ODlmOWE5YjQ2MmZlNzBmMzZiMDlm
YWM2MzIwHhcNMjYwNzAyMDkwMTE2WhcNMjYwNzAzMDkwMTE2WjAzMTEwLwYDVQQD
EyhmYWMzMTA2ZWRhMWIzMTIyNDY5Y2NkZjQzM2U2ZDlhYjQ5ZTQ5YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ujzL0tcOoWKhaUq6e5PITNQIJhe
doW4BUycq0fQhXZYk9piFn0AfH9iKHk36e8neko5iUag/FCZc4Lpe4YM+shLTDQp
wpf/0PKQzs85snK5D+pRArpRnsI/tpvYZDdH7/quxHryxULXyqkznXN/hbBifIP0
dOeEk8So5+Nv3xX8NbqRUJz0c+6PtGZ5CIc5D7Vs0TzUM4/22RvgXB/7kAYO3pGE
Kg7cbDDDPAl7D9Eks7yq/b7iLuLKQkTKums4pN5wufF4OaNpr9qdBaNSPPPBgLyv
6GysBTGw5J2bd6+gJAWaopm9WSAN67P/KDjNn2RaM7Ytl6Xxc3iHAMgrzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrDEG7aGzEiRpzN9DPm2atJ5JqwMB8GA1UdIwQY
MBaAFNLAHzI9HSWJ+am0Yv5w82sJ+sYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNBZk1qMGRKWW41cWJSaV9uRHphd242eGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80Yzg0Y2QtMGJmMS00M2EzLWI0NDIt
NjViZDQyMjRjZGI5LzEvMHNBZk1qMGRKWW41cWJSaV9uRHphd242eGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80Yzg0Y2QtMGJmMS00M2EzLWI0NDItNjViZDQyMjRjZGI5
LzEvMHNBZk1qMGRKWW41cWJSaV9uRHphd242eGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk+rsnPE
TwLkDgKzgWQImHohQ+JtfTTIgOd8caHDwijI7EWMYLbI12tO/XrrEx/n9dmpDcDq
/PM+8Hif5cFKfXS+vesRxek11YrMgSJgYRPrUJ5EOyh5pCyzl53pvsQqadxeNLae
aOc5PbcxtLtJZATiQf+GVGSvzbpTbs9hEkMhoZUmeXpyIne79Qp2/OE01Yzob1eQ
buvlTspu3Mii+zpGqhvi5pxY6x1zc4c6mgFBt1+EzpNwEy3QJvq0dAcnbXYnz57e
85mrs7bU+aVMQANKPflh5dBJlCQsoyH+QdlnSG2X8lbKZctR6Xt20dZvDHhV6fSz
ki8tzq5Audd0mw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:14 2026 by rpki-client