Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: tfpC9sdy36z1NmEFfmKnFKdvCEMTCbi0J+Pqi5Cl3cA=
Subject key identifier: 83:53:13:22:2B:7E:7E:E1:A1:77:39:40:3A:EF:16:6A:2A:E2:16:D1
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 019F22100681385B423C11F1EF4358735D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 198F
Signing time: Thu 02 Jul 2026 09:01:43 +0000
Manifest this update: Thu 02 Jul 2026 09:01:43 +0000
Manifest next update: Fri 03 Jul 2026 09:01:43 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: 762qn+yZTBJ73zAjmMIqUExehl0GMK3A16hlYHgoiBg=)
2: Zs-v1rw9g1MYTe4z_xC60lFfzak.roa (hash: gDQsejW5I6NwbA9XiA+PvZS2jChO/DirRuBkqy+plZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:06:81:38:5b:42:3c:11:f1:ef:43:58:73:5d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Jul 2 09:01:43 2026 GMT
Not After : Jul 3 09:01:43 2026 GMT
Subject: CN=835313222b7e7ee1a17739403aef166a2ae216d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:46:d4:60:06:b0:75:04:18:02:ba:bc:ec:
22:1a:29:38:e0:fd:56:c9:5d:4d:27:ae:07:e2:bd:
57:3f:37:8f:1d:9f:2f:dd:d4:19:21:85:14:fb:ac:
9f:1a:ad:fb:b4:ea:42:6f:ae:fb:3a:85:6e:8e:97:
e4:a5:66:12:36:21:74:c7:35:e9:1a:08:be:d1:95:
b6:3a:87:74:34:dd:f1:a9:ba:63:da:4e:e0:02:27:
96:ef:44:54:5b:bb:8a:80:03:21:5c:55:d4:a9:94:
7e:43:68:d6:67:46:f5:fc:69:4a:42:fb:e7:80:23:
19:a6:ab:b0:9e:0a:a5:0e:c0:52:72:c8:d1:f7:fe:
b1:7b:83:de:9c:4b:43:e5:cc:9c:1d:09:f9:1b:a9:
1e:3e:32:2b:9e:51:51:17:9f:8e:8f:e0:3b:1e:9e:
f5:2d:d6:7d:48:28:c6:2c:4d:7c:7f:dd:81:1b:41:
42:05:e3:1e:fb:01:e5:1c:c8:22:40:d6:cb:0c:0f:
4b:fd:86:94:9c:3b:a6:20:f3:a9:5e:c4:f3:ba:a4:
7a:5d:04:75:d0:ab:f0:4a:83:bb:e1:6f:69:1c:23:
96:ff:68:a8:d8:56:46:6f:8b:01:bf:e3:b4:2b:97:
8c:61:d2:f8:b9:55:86:6b:73:fa:96:84:e6:87:cd:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:13:22:2B:7E:7E:E1:A1:77:39:40:3A:EF:16:6A:2A:E2:16:D1
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1e:d8:a8:bd:69:15:1a:9a:db:c4:cf:ba:b8:55:d9:55:af:
4d:4b:64:b9:52:1c:e5:c6:e0:0c:c9:4d:48:5b:a6:f5:8d:c7:
4e:d7:24:a4:ec:fb:05:3a:aa:c4:b6:2b:43:96:25:5e:7d:a6:
ee:d1:3b:07:db:1e:6a:cd:4a:47:be:13:59:0c:52:fb:fc:a7:
e8:69:e2:5e:b2:14:26:b5:42:1a:bc:71:aa:9b:54:c5:4d:d9:
33:7e:2d:38:e2:e7:ce:e6:49:b8:fc:3c:c2:9f:6f:7a:a8:94:
b0:41:9a:48:f2:36:f8:da:1c:3a:2c:02:96:61:43:b8:2f:06:
16:2f:2c:68:cb:95:ca:76:d5:da:32:af:9a:fd:98:a1:43:2f:
d3:be:7d:1e:9a:02:bb:08:8e:94:55:30:0b:13:46:b4:4f:0d:
20:6c:12:23:3b:d8:87:2b:40:38:e2:a6:f6:42:d3:3b:9e:f0:
c2:b1:7f:72:a5:8e:93:10:cf:66:0c:22:e8:09:b8:c3:74:e5:
bc:e7:49:e5:a2:e7:a4:66:2e:8e:f1:e2:01:b0:0f:40:52:df:
a7:02:03:cb:83:9d:9d:9b:17:30:70:cd:7d:db:b7:7c:7c:d6:
6e:4a:89:e5:2b:6d:3c:c8:88:e1:83:0b:b2:c0:1b:f1:2b:99:
b6:56:fa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:20:22 2026 by rpki-client