Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File: CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier: uEdg4XFCLZjHlv8/bRi97V8CJ5CAoQnY1Hxnc9U05TM=
Subject key identifier: 22:AD:D2:B9:60:5B:AF:9E:9B:82:66:69:11:CE:3E:65:D6:1F:9D:0E
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer: /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial: 019F236A57C6685F23ACA15C2B3F1BD6FE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number: 14AE
Signing time: Thu 02 Jul 2026 15:19:59 +0000
Manifest this update: Thu 02 Jul 2026 15:19:59 +0000
Manifest next update: Fri 03 Jul 2026 15:19:59 +0000
Files and hashes: 1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: Ak6rbIbYchan77Py/xdaewEHY+0J3LkOt2+JurD2Hn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:57:c6:68:5f:23:ac:a1:5c:2b:3f:1b:d6:fe:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Validity
Not Before: Jul 2 15:19:59 2026 GMT
Not After : Jul 3 15:19:59 2026 GMT
Subject: CN=22add2b9605baf9e9b82666911ce3e65d61f9d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:e3:12:e9:1f:0e:3b:24:e1:a9:5c:e3:84:
d1:aa:04:ff:b4:6e:7c:19:11:ff:8a:40:fc:b2:fb:
bb:9d:02:f8:86:5d:15:bd:8a:7f:0d:60:e6:1f:73:
0b:fe:dc:fb:be:16:9d:d0:c4:05:c4:30:a8:0b:e0:
f0:75:62:cc:b5:55:0c:65:c9:19:63:0c:49:21:77:
b7:bc:9c:42:e6:b3:5c:ad:50:15:2b:b6:64:89:be:
67:4c:fa:2e:29:89:2c:01:49:55:1b:0f:34:fd:33:
cd:b2:15:74:2a:89:48:9e:ce:ba:53:c5:ec:ee:ca:
06:45:e2:14:b1:fb:41:40:a8:05:c1:15:97:59:e7:
d7:d1:47:04:ec:b6:04:f4:9d:52:8f:bf:10:b5:15:
95:ac:58:5a:ac:e9:4c:5e:1d:13:4a:c5:d0:55:25:
3a:bb:75:49:4a:4c:fd:06:40:e7:22:f9:45:14:1a:
7d:ea:79:94:20:a8:67:22:b5:1d:96:b5:41:ba:31:
22:c4:7e:40:60:9d:83:f4:5e:a8:31:c2:7e:1d:22:
cf:e0:fd:ff:fa:58:d3:ee:ea:3c:5c:c6:45:0d:cd:
bc:98:cc:0e:93:ac:b7:de:25:be:d5:35:bc:91:e3:
da:1d:3f:07:13:8f:65:3c:03:28:74:1c:8c:3b:12:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:D2:B9:60:5B:AF:9E:9B:82:66:69:11:CE:3E:65:D6:1F:9D:0E
X509v3 Authority Key Identifier:
keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7a:27:e7:46:fc:73:96:6e:35:8d:85:37:8f:b3:17:bc:e8:
6c:46:0a:97:44:92:80:17:e0:ed:28:cc:20:0d:a0:fc:08:a1:
88:bf:a1:80:6a:0b:3b:e6:a2:b8:90:f9:58:78:09:ab:7d:cd:
56:15:cd:d1:92:6d:c4:7d:2c:8d:fb:01:43:83:18:ac:df:2b:
48:2f:d5:5d:d8:7c:a9:e2:90:b9:01:e0:bd:68:12:97:94:08:
6a:ae:03:d1:18:e6:db:5c:4b:73:62:50:50:ce:b0:eb:25:da:
9a:f9:16:0d:06:6c:af:18:1e:85:03:f6:20:18:35:88:55:ba:
ae:06:f8:7c:3a:f5:c3:28:01:b9:1a:30:50:76:14:8d:d1:16:
5c:99:46:21:1a:0a:1c:77:94:35:5b:5c:a4:ac:69:0f:24:bb:
16:dd:80:0c:33:55:e7:72:10:63:1d:af:7b:ab:55:d2:0f:85:
ed:c6:a8:46:df:0b:08:cd:e8:c9:0a:97:97:f4:c0:fc:8a:aa:
96:86:83:97:b2:83:8f:0a:61:0f:ef:5c:aa:6d:44:c8:37:33:
33:cc:ec:ad:28:8d:fb:16:4a:ec:e6:9b:c8:62:a4:cf:a3:64:
ba:91:4f:88:1d:f0:1a:ee:b7:00:0b:fb:06:b1:52:a7:b6:b1:
0e:45:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:32 2026 by rpki-client