
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
File: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft (raw, json)
Hash identifier: SCRm3tdJPX7qDn4w3Urkz2nhoFCvQPinmz3JpuAnMUo=
Subject key identifier: B5:45:A7:90:F3:5F:54:40:DF:82:63:54:EA:40:09:CF:43:AD:6C:F1
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Certificate issuer: /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial: 019F2369EA2C02CB0B9A42C39AE9081DD505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
Manifest number: 1994
Signing time: Thu 02 Jul 2026 15:19:31 +0000
Manifest this update: Thu 02 Jul 2026 15:19:31 +0000
Manifest next update: Fri 03 Jul 2026 15:19:31 +0000
Files and hashes: 1: 2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl (hash: 6SKZ7dHz/0oGdqzqU3n+tuT+GvR4M/aUEG1kzAI1TKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:ea:2c:02:cb:0b:9a:42:c3:9a:e9:08:1d:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Validity
Not Before: Jul 2 15:19:31 2026 GMT
Not After : Jul 3 15:19:31 2026 GMT
Subject: CN=b545a790f35f5440df826354ea4009cf43ad6cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:1b:13:1b:9b:af:77:25:f0:b5:67:59:a7:
db:41:c0:a2:42:de:6d:24:38:da:b0:d0:45:4e:a9:
26:bd:58:f2:1c:61:c5:42:c9:57:63:80:e3:b8:3b:
85:be:8f:a5:1f:75:a3:b7:c7:76:57:17:5a:64:24:
83:07:21:48:54:a7:a8:e1:28:72:b7:97:80:86:81:
a7:11:3a:80:c2:9f:6e:c4:93:26:9e:71:51:5f:d7:
6a:40:31:4c:37:8a:f8:c7:18:66:77:55:07:0e:69:
3f:42:25:a8:82:a7:9b:46:a8:93:c0:b5:a2:cc:9f:
c4:94:c4:a8:3e:9a:f0:9a:7e:16:51:80:b1:1b:de:
d2:4c:bc:a7:64:58:0f:58:c2:f1:ef:f1:de:97:d4:
07:b6:f1:7f:5e:6a:68:f8:7b:3b:f5:81:66:d6:f3:
44:f1:80:af:43:ef:df:a4:a2:c9:1e:d7:da:a5:b7:
bb:a1:f2:b6:7e:d6:4c:ee:88:b1:fd:38:8b:66:10:
f7:b8:1d:fa:81:c0:66:c9:c3:c9:89:7b:71:e9:13:
13:73:d5:bb:11:9c:e3:ee:21:d3:90:af:ed:5e:ba:
c7:f1:49:56:9b:93:10:14:d4:12:6f:23:63:28:33:
64:dd:1d:77:70:d1:40:55:ba:be:fe:2d:b9:ed:17:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:45:A7:90:F3:5F:54:40:DF:82:63:54:EA:40:09:CF:43:AD:6C:F1
X509v3 Authority Key Identifier:
keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a0:d8:26:4f:0d:17:09:93:f9:64:bb:2d:c1:52:b4:e8:1e:
5d:50:91:84:43:2e:a6:e9:fa:0f:00:5a:9e:3b:d2:4e:33:40:
87:c6:78:8a:e5:a5:3c:9a:95:ff:7f:0f:5a:fc:b3:ee:db:de:
1f:59:99:9b:2f:0e:2d:be:76:c6:5a:c1:e1:74:9e:61:36:91:
25:47:ee:b2:d1:37:b4:f3:04:3c:e3:23:20:b3:bc:4c:fb:a8:
e8:db:7c:01:91:b4:01:d2:f5:90:67:4d:31:f1:67:35:cc:86:
18:af:f1:2e:8d:b2:0a:f7:5e:2b:f6:95:45:4a:05:b9:2e:df:
27:0a:02:ec:3a:18:5b:df:2d:a0:5c:15:e0:8f:f8:03:30:04:
82:a6:b0:d6:91:8a:8e:93:08:a7:f9:42:75:eb:b4:a0:0f:0c:
7f:21:76:b5:07:69:d1:bc:f3:aa:ed:14:1e:c1:63:88:6e:7f:
21:2c:3a:22:f3:54:23:14:c0:e6:fd:f4:9e:db:55:53:cc:2e:
a1:b9:6d:6c:57:f4:6a:e5:57:52:83:a3:5c:38:ea:1d:a7:f8:
06:9f:2c:cf:bf:f7:77:78:6e:a7:b6:42:87:55:5f:2a:73:64:
78:81:9c:5b:d9:36:3c:a3:3c:02:08:8d:ee:c0:20:94:78:f2:
01:56:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:28 2026 by rpki-client