Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: PEO3YKY15MrHnI4lxmAkZLzPE6YinuhDxjO3MzE8AJA=
Subject key identifier: 18:C6:E3:A2:2B:8F:72:EC:1C:CB:BE:45:27:1B:6E:A5:C6:6D:26:00
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019F227D1742EEA4AFA39F0630170AFA9272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 1080
Signing time: Thu 02 Jul 2026 11:00:50 +0000
Manifest this update: Thu 02 Jul 2026 11:00:50 +0000
Manifest next update: Fri 03 Jul 2026 11:00:50 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: mXbPzzhlF4JMgCd+9cxSDl8kq6CbFDP9GSY/DL/bXLw=)
2: E53XM9bwcUdhNes8XtMe3ZWybN8.roa (hash: MGupxfszh7a8rx7tMG0y7Bj5FjeIlETaabShTOh0AgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:17:42:ee:a4:af:a3:9f:06:30:17:0a:fa:92:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Jul 2 11:00:50 2026 GMT
Not After : Jul 3 11:00:50 2026 GMT
Subject: CN=18c6e3a22b8f72ec1ccbbe45271b6ea5c66d2600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:ad:3f:aa:8d:c6:db:ff:24:ce:9a:06:45:
05:f7:5a:b8:83:19:5d:ca:bd:65:f7:08:fc:de:62:
06:a5:4f:14:ae:92:55:fd:d4:80:d7:43:d5:75:75:
66:e3:03:15:91:e1:28:91:9d:f2:f1:a5:88:c0:2c:
e6:30:4f:9c:df:1b:50:71:8f:48:5e:08:29:5d:70:
a9:d5:64:a2:0e:88:74:36:f2:02:53:1f:c5:3a:e3:
d3:62:01:c1:c1:a7:69:45:87:9f:10:ae:12:73:40:
f4:db:7b:63:0e:8b:08:46:20:65:cb:9b:ae:af:da:
fe:91:d5:2b:28:43:a9:e9:a0:ed:ea:8e:35:4f:9b:
28:79:83:ba:52:4e:f8:5d:5b:af:9a:8a:3f:24:0c:
25:fe:dd:9e:3a:6c:9c:bb:2c:5e:05:cf:7e:ca:da:
95:bf:56:82:62:48:c0:09:3a:48:88:7f:49:96:48:
84:4d:57:fc:25:d3:41:d9:97:2f:56:3f:30:c0:2e:
19:9e:44:12:55:88:00:52:4b:02:6d:e9:7b:b9:ed:
40:ea:08:ac:65:83:44:70:fa:80:0d:fe:fc:6b:6b:
19:1e:b9:39:ea:0a:5a:31:14:3b:ae:4c:79:ff:6c:
f8:ab:ad:16:67:66:45:ce:da:30:68:5e:cc:22:0f:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C6:E3:A2:2B:8F:72:EC:1C:CB:BE:45:27:1B:6E:A5:C6:6D:26:00
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fb:70:73:96:05:25:2e:db:9f:25:94:a0:f8:68:12:b2:ee:
20:0e:28:bc:48:2c:31:4b:10:cb:34:3e:6f:13:2c:01:7e:5f:
37:84:29:69:10:e4:c3:db:85:a8:94:b0:a2:e8:cf:6b:2b:6e:
df:09:bc:54:8f:05:39:4e:18:33:d3:7e:b5:32:6d:20:76:05:
70:0c:e9:f0:65:f1:99:db:3d:62:59:cc:8c:77:70:7d:85:22:
15:8e:10:a5:19:d7:6b:44:46:78:d2:b2:5c:3d:e2:87:26:f6:
b8:01:da:e9:f5:f7:1b:a7:e5:49:be:5c:71:ff:0c:75:f2:cd:
c8:4c:63:ab:6e:87:3f:62:36:29:86:f2:08:cd:a2:cd:ee:1c:
4b:b7:a5:5b:66:35:ed:ee:a1:d1:f3:28:f5:ba:ad:06:d6:ef:
cf:cf:16:09:58:cb:5a:3a:18:2a:aa:7b:96:93:ba:0d:b5:2a:
e0:34:35:9f:e0:b0:ae:26:c2:d8:d2:f1:47:bf:44:0d:05:a2:
a6:27:ab:80:3f:72:79:f4:55:2d:e1:3f:c0:5d:56:3f:c4:5e:
85:21:08:50:2c:6a:97:b8:21:bc:16:ab:0f:4f:75:64:b7:b4:
b7:47:68:29:35:d9:00:f9:b6:ba:cf:40:ce:50:16:ff:c8:98:
81:70:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:22 2026 by rpki-client