Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: pIBFYVvwLD42jwH0N79FH+IwPs9bu0XqFWQhPWGGhCQ=
Subject key identifier: 6A:48:07:B8:63:75:8D:23:92:1E:F3:66:A9:87:7B:B7:3C:67:DC:88
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019F2369CEA3D23C31F6EF719054EA6EADE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 1875
Signing time: Thu 02 Jul 2026 15:19:24 +0000
Manifest this update: Thu 02 Jul 2026 15:19:24 +0000
Manifest next update: Fri 03 Jul 2026 15:19:24 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: 6UD38yT5InVH08F9JiNO1/svNbsBoQrXJ3K50hkAUu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:ce:a3:d2:3c:31:f6:ef:71:90:54:ea:6e:ad:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Jul 2 15:19:24 2026 GMT
Not After : Jul 3 15:19:24 2026 GMT
Subject: CN=6a4807b863758d23921ef366a9877bb73c67dc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:a5:fd:57:26:24:a2:8a:9d:a9:2a:c8:e1:
7c:89:fd:a3:c0:5f:a6:89:cb:a4:7e:1e:bd:dc:74:
c8:7f:f1:b7:cc:ec:cc:91:7c:5b:79:43:0d:f2:af:
6a:ed:6d:88:4a:fa:3f:fe:2a:81:2a:fa:90:ae:a5:
f3:fb:4f:19:02:17:37:ce:27:8b:6b:53:41:19:c5:
60:e9:48:91:ba:db:f8:b1:d7:99:aa:31:c8:6f:09:
49:76:02:51:52:b5:5a:42:ba:9e:c1:cb:70:47:a6:
7f:bd:c2:d8:ba:80:ab:28:1a:4d:a1:2d:9d:9b:d2:
0c:be:06:73:7a:3a:17:ca:19:03:1e:0f:cd:61:b3:
22:6d:e2:04:b9:4e:f6:c4:14:a4:0a:ad:24:de:88:
b3:57:85:f1:a7:7c:48:fd:47:e9:1e:96:c8:c9:13:
2c:bb:35:3e:4c:d5:9b:c3:6a:0c:f7:a3:4d:68:75:
8f:73:b4:e8:5b:73:32:4f:40:83:79:d4:3b:a0:49:
ac:5f:43:e6:38:bf:f9:96:e0:8c:a3:7b:ab:8c:db:
01:02:eb:f9:d3:6a:92:9b:48:43:a2:b0:c3:22:bd:
47:c4:0d:83:69:3f:6b:70:c1:9b:60:f9:35:1c:db:
ab:d5:8f:ec:ee:20:6e:66:6f:14:68:4c:a2:83:f5:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:07:B8:63:75:8D:23:92:1E:F3:66:A9:87:7B:B7:3C:67:DC:88
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:2d:b5:5c:06:da:5d:ba:9c:23:94:1c:ae:f8:0e:d8:c1:
0a:65:ec:e8:16:7e:57:29:00:07:58:4b:18:e0:7e:0e:a8:e3:
aa:78:4c:6d:ca:5b:7d:88:7e:74:36:77:bd:66:c9:d1:1e:bc:
b8:29:43:62:81:cc:97:f7:23:51:dd:6c:79:46:82:97:8c:21:
b7:9b:56:34:0e:e8:41:35:82:74:b5:55:94:6c:da:3a:ae:b9:
40:df:49:48:a7:8b:25:60:b2:15:9a:c0:d1:92:de:35:ef:aa:
5d:aa:21:85:f5:c2:f0:12:e2:d0:fb:d4:88:97:9e:c2:45:f2:
8c:18:6e:1e:31:60:65:53:16:73:89:6a:26:e9:86:d3:c9:8e:
87:49:f9:f5:ce:a4:f9:f7:93:cd:70:ed:35:fe:13:d1:56:66:
3a:dc:8c:d3:fc:17:a6:72:cb:6c:4a:21:c6:9b:eb:23:78:3a:
5f:a2:ca:83:31:a9:07:3f:90:83:3c:1f:cb:2a:c5:be:2b:ce:
39:64:7a:67:0e:d7:12:80:74:11:77:ca:6a:64:65:f1:0f:02:
f9:4b:55:79:53:4c:bf:d1:7b:e7:ff:46:55:98:8c:ca:e5:b3:
ca:20:d7:a7:1d:d2:93:14:07:c9:24:e6:c1:35:30:b7:7a:9f:
cf:5a:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:23 2026 by rpki-client