Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: LYi6EZiSnVyIC9WAwFg37kHmlSq1C55oTe14Ybc6T6w=
Subject key identifier: B8:0E:38:4B:DC:F6:EB:94:31:98:3A:97:BD:28:FE:46:61:9A:B7:C2
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 019B91E4DC56FA689610A215A42779566700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0E35
Signing time: Tue 06 Jan 2026 06:00:53 +0000
Manifest this update: Tue 06 Jan 2026 06:00:53 +0000
Manifest next update: Wed 07 Jan 2026 06:00:53 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: amYOfsG+i4hJ4naallQznaQFqpTK57ENtgkX6vVEHoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:91:e4:dc:56:fa:68:96:10:a2:15:a4:27:79:56:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: Jan 6 06:00:53 2026 GMT
Not After : Jan 7 06:00:53 2026 GMT
Subject: CN=b80e384bdcf6eb9431983a97bd28fe46619ab7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:9b:8a:b3:15:e1:9b:9d:53:4c:22:96:ab:
73:bb:1b:b9:fa:3b:ca:14:af:5b:d0:f1:87:ff:fb:
5f:17:19:2d:ba:0f:70:9b:37:ab:c1:e6:6a:fa:f0:
2a:a7:51:2f:f6:1c:69:a9:73:7f:0c:20:9b:fc:0c:
13:e5:08:cf:b5:47:c4:3d:81:11:fd:8e:49:64:d2:
37:42:df:b4:ab:2a:ac:f1:bc:1c:22:ee:54:6e:6b:
5b:29:4c:ae:47:6d:d1:86:ed:1a:54:d2:1a:fa:52:
e1:22:b0:21:78:15:ab:2b:65:ec:4b:47:66:f6:5a:
d3:71:f9:1b:99:4b:00:52:e1:7c:f7:3a:8f:ed:3d:
d7:41:5e:19:d6:de:99:8b:08:1d:7c:cd:d5:2c:63:
12:37:97:8b:32:4a:23:a9:32:3a:f0:fa:b2:f2:5d:
85:81:df:fb:29:cc:fd:1c:30:60:ec:5b:d9:7a:e6:
c4:3e:9a:ef:77:1c:0a:ff:9c:b2:05:1c:d7:b2:a0:
31:98:89:55:64:f8:fc:48:88:90:3a:3d:c5:82:e8:
51:e7:db:f1:20:b2:47:7c:23:dc:e5:40:d4:d1:38:
ba:64:8a:50:50:fe:a8:dc:03:1f:c3:c6:4b:46:48:
2c:ee:1c:b1:29:e3:55:43:39:d9:5d:10:69:6f:2c:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:38:4B:DC:F6:EB:94:31:98:3A:97:BD:28:FE:46:61:9A:B7:C2
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6e:33:f7:24:a7:5e:15:6b:5b:bc:0d:87:27:f7:7a:25:7a:
89:7a:80:c2:af:3e:95:9f:19:54:b3:45:e3:24:b4:4e:f8:fb:
0b:4f:99:29:3a:d1:c2:e4:e7:53:d5:a9:ae:04:35:33:08:2a:
51:4b:75:5c:44:cd:d1:4e:e2:f6:4a:64:8c:87:99:e6:4c:77:
84:9b:5f:55:be:1f:5b:6e:61:32:92:e8:a6:24:c8:d1:e3:8f:
a4:e3:36:34:df:3a:6b:77:5c:fb:66:39:77:60:85:d4:c9:04:
73:5d:ca:d6:54:50:39:ce:c4:34:14:1d:36:c7:fd:7d:f9:76:
d2:51:68:e3:41:1f:d3:99:c6:8a:cd:b9:02:c1:38:fb:bd:3f:
3c:d3:c5:6a:a0:50:9f:dc:60:4a:18:78:d7:aa:d0:8d:bf:d3:
8e:d2:1d:bc:1b:86:24:37:0d:00:52:42:f7:ec:4d:fa:71:b9:
c1:df:ac:92:4b:98:2b:2a:b0:a1:5e:35:73:6f:2a:da:ed:ec:
6c:69:70:33:9b:74:38:0f:49:f6:8b:12:e2:a2:05:84:b9:82:
5e:02:84:0e:ad:a8:d4:11:a4:02:b0:b2:39:6c:be:0d:57:3c:
75:2d:11:53:9b:95:3b:30:49:92:58:fa:71:94:e8:85:5a:c0:
66:22:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:21 2026 by rpki-client