Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: W9dK120pH8s31Ai+I7TMP6p07JiF9vI/+k7o8KDHtlo=
Subject key identifier: 65:5B:B8:A9:F9:77:04:70:6A:B2:31:E2:D0:1E:F0:EE:C7:39:2B:86
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 019E61CD1A88ADD2493D36F95BC8FEB1A635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 1250
Signing time: Tue 26 May 2026 01:01:31 +0000
Manifest this update: Tue 26 May 2026 01:01:31 +0000
Manifest next update: Wed 27 May 2026 01:01:31 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: mVpX31IJpB2tUe8YDJw9S23Rh1+TXDO5ZuoHU1d1A3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:61:cd:1a:88:ad:d2:49:3d:36:f9:5b:c8:fe:b1:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: May 26 01:01:31 2026 GMT
Not After : May 27 01:01:31 2026 GMT
Subject: CN=655bb8a9f97704706ab231e2d01ef0eec7392b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:4c:c7:a5:f3:34:1a:a4:28:7d:41:61:d9:
9a:26:31:c2:01:70:de:c6:ec:cb:ea:00:f2:a6:f6:
1c:26:03:ce:67:e6:70:06:44:cb:bb:c3:5f:19:27:
e3:c8:7c:db:a6:a0:e6:19:75:7b:91:c6:d1:96:86:
34:22:6b:b1:6d:37:eb:aa:f3:a0:83:57:31:21:a4:
c3:c5:74:b4:cb:c4:aa:af:0e:d7:b3:65:f4:d0:85:
77:b8:07:a0:68:51:bf:07:76:1a:fe:db:e2:ef:ec:
fe:f8:e5:6a:64:92:e9:b9:d4:0e:27:82:78:0c:d7:
b4:b7:e0:4a:4a:d1:9f:75:c2:e4:8f:cd:bf:9b:c7:
73:08:6d:d2:b3:4f:6d:a5:72:ca:4b:49:d4:4f:ca:
34:a0:a7:c5:5e:d8:e0:14:b1:d5:ed:c1:bb:65:f3:
21:4e:ec:05:00:ff:8c:73:c2:7d:be:57:62:91:65:
60:4f:ff:9f:eb:58:05:6b:f6:e6:c2:fd:06:34:5d:
0c:56:94:5a:d5:7c:79:fc:95:95:38:69:a2:bb:0e:
d5:f7:14:b5:d6:c4:1e:62:24:db:65:1a:ae:f6:5a:
97:b6:86:68:43:88:ae:aa:37:35:0f:87:05:96:f7:
e4:e7:52:15:71:af:75:fc:ba:3d:5a:84:7b:8b:31:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5B:B8:A9:F9:77:04:70:6A:B2:31:E2:D0:1E:F0:EE:C7:39:2B:86
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f7:3c:a8:ad:8d:ed:30:43:71:f5:f6:86:ad:14:0f:9f:05:
56:bb:42:31:fb:8b:83:ea:53:c2:91:f9:28:9c:81:b4:11:1c:
07:bd:3e:a5:21:87:36:77:7b:1a:98:9d:d6:31:6b:b0:37:c7:
14:80:61:0a:b7:5f:ac:25:61:6f:cf:86:2f:32:2d:38:b1:4f:
25:69:e4:8d:d6:48:89:b4:e6:87:87:5a:e1:3a:02:c9:ab:76:
fe:86:49:b0:6b:d4:05:f4:d7:6a:af:bb:1a:0d:d5:ad:ff:6c:
1e:85:10:3c:f9:92:36:f5:f8:34:20:8e:a6:d3:93:ad:51:92:
43:eb:32:04:aa:ad:f6:2b:57:7c:67:51:41:6e:97:1b:b6:cd:
18:95:dc:6a:6a:e0:7a:86:e1:9a:c2:50:d7:c8:ae:ba:b7:26:
97:05:80:ff:95:ff:18:c1:7e:83:a9:71:07:78:cb:cb:82:ae:
2b:28:f1:4d:4f:d0:b3:b8:3f:66:91:26:c9:48:09:5d:d7:83:
95:d7:8e:cc:a0:e8:a3:96:0f:9f:a0:8e:8b:9d:26:a1:9e:29:
2c:59:dc:0f:b6:6c:8c:39:53:86:01:ed:55:6b:7f:8d:2a:0a:
43:06:87:7a:6c:6a:c5:61:2a:94:91:b3:41:21:9b:02:18:ab:
78:ee:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:38 2026 by rpki-client