Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json)
Hash identifier: 0FuQY9eKwnzkabRT0+hHL9waayKGeprxYLwpd7KYoSc=
Subject key identifier: 23:F2:F2:E8:55:AE:BA:08:B6:EE:CB:68:89:0A:5B:1F:4C:D5:D8:FF
Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a
Certificate serial: 019E14C4570EF46E7146AE5823A7A8C10F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
Manifest number: 1689
Signing time: Mon 11 May 2026 02:01:12 +0000
Manifest this update: Mon 11 May 2026 02:01:12 +0000
Manifest next update: Tue 12 May 2026 02:01:12 +0000
Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: FEhKZfRmy85NceLp1q2DFXsDQrJbNCQWv5Z89V4ODHw=)
2: ipd84dEDEe7cj4KStBVIlQrMGyg.roa (hash: Sbm22JKwRV49kiJvKoySC0PxR1MmmHGGM53bqn3Gb1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:14:c4:57:0e:f4:6e:71:46:ae:58:23:a7:a8:c1:0f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a
Validity
Not Before: May 11 02:01:12 2026 GMT
Not After : May 12 02:01:12 2026 GMT
Subject: CN=23f2f2e855aeba08b6eecb68890a5b1f4cd5d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:3f:db:2f:7c:b7:c2:36:91:57:b7:76:92:
7d:bc:45:cc:63:72:54:e3:f1:de:1e:c5:b9:ea:ea:
3c:c4:ff:f5:59:a3:44:6f:9f:63:25:24:03:08:e3:
20:c9:9f:a7:eb:8b:ca:f4:16:f5:b2:93:68:82:5c:
7d:52:55:44:35:23:a6:a2:70:85:e6:38:61:8a:85:
3a:48:a8:d6:64:78:5c:01:fe:7a:f2:7f:18:7a:81:
7f:61:53:b7:3f:db:bd:82:5e:57:64:8e:12:80:9a:
93:4d:96:63:02:f3:0e:39:32:4b:f3:38:4c:7d:81:
40:0e:ce:70:68:4a:5e:d7:8f:1d:d2:5e:42:22:55:
a5:12:91:ba:2e:2c:f9:e2:e6:0b:3a:6b:65:43:11:
72:f0:6d:7e:e2:d5:7a:5c:e4:97:31:92:16:22:80:
43:e8:96:ff:43:df:7d:59:0d:af:3d:34:0e:f9:d1:
9d:07:c0:47:5f:85:59:8a:1e:b4:2d:39:9c:48:fc:
1e:8b:c0:9d:bc:de:b3:9d:7e:7e:3a:2c:d4:b7:cf:
67:04:02:33:88:b4:6b:e5:04:86:2a:04:8b:98:5e:
93:48:3b:cc:2f:11:d9:0b:23:20:0e:4a:f3:6a:3f:
c9:6a:b6:ba:61:a4:2a:ca:13:b6:a7:94:0a:bf:04:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:F2:E8:55:AE:BA:08:B6:EE:CB:68:89:0A:5B:1F:4C:D5:D8:FF
X509v3 Authority Key Identifier:
keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:d4:b8:cd:c3:c9:76:37:aa:ad:ce:a1:e6:00:4a:de:8e:
a8:65:e5:a2:b3:13:97:52:f6:96:43:06:7a:b5:ab:d0:49:4a:
dd:9c:91:c6:94:33:b0:8c:40:d0:e8:ce:88:b1:0b:81:13:6b:
8c:f3:63:aa:b7:a1:54:80:de:26:13:d4:65:86:4d:16:c0:16:
b2:81:5c:c4:0b:e1:a3:d0:de:64:07:33:b4:89:86:5f:5c:9f:
6c:b1:7a:ef:a3:fd:50:05:96:82:40:0b:d7:fc:08:cd:00:49:
e6:0b:e9:11:ae:3d:ea:ee:ea:32:d3:b9:69:b5:34:6e:4b:29:
bc:37:72:38:54:2d:38:81:44:5b:26:9b:10:79:b8:34:c5:ed:
8b:3b:42:51:6b:f3:7f:e1:1b:41:6f:20:33:d4:c1:1a:47:ee:
3e:37:d3:29:89:19:3e:f4:84:f7:33:95:47:8f:04:68:51:31:
e4:95:d6:65:1d:ec:50:f1:ec:d0:b0:83:c7:5c:26:32:5b:38:
a2:1d:09:f2:76:01:1f:b3:58:c4:f7:ad:ea:09:79:44:68:45:
89:c8:0c:d7:ba:ae:79:82:d0:f4:d6:f1:ba:ad:26:2c:df:5b:
23:57:d1:28:4b:85:c0:81:75:6d:de:f2:44:53:b1:57:56:90:
11:83:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:03 2026 by rpki-client