Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: fmNbNAQMBVP9yC0mS8yRwIPpFt6B66eUlEHvG+XezDc=
Subject key identifier: 7C:16:CB:11:E0:A2:3B:88:6D:9B:48:8A:6F:A9:A4:E7:21:8F:87:23
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019F2246CC136A40CA5BF4E6E6B42AEB7974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 140E
Signing time: Thu 02 Jul 2026 10:01:32 +0000
Manifest this update: Thu 02 Jul 2026 10:01:32 +0000
Manifest next update: Fri 03 Jul 2026 10:01:32 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: Ole7KQqCg5K6g5zemwccd3IrJc/t94lh39bZ0oLDQlc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:46:cc:13:6a:40:ca:5b:f4:e6:e6:b4:2a:eb:79:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jul 2 10:01:32 2026 GMT
Not After : Jul 3 10:01:32 2026 GMT
Subject: CN=7c16cb11e0a23b886d9b488a6fa9a4e7218f8723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:af:06:57:b4:d3:10:66:33:af:5c:12:84:
8e:28:2c:d4:10:77:24:2a:a2:d9:63:fd:08:ec:78:
b4:48:33:4c:b6:a0:33:ea:f4:e4:5c:90:f0:0b:a5:
38:40:b7:35:e8:fd:df:1f:69:08:74:84:c2:ad:e2:
2f:91:ad:55:ac:57:47:4a:e8:65:d6:95:ae:3d:19:
75:43:06:e2:c5:1e:3f:84:7b:b2:90:6a:27:f7:6c:
34:c7:7b:c8:a0:15:8c:f7:a1:48:85:90:48:ba:ca:
fe:db:a2:13:5b:a2:fe:ec:10:3e:fd:1b:46:cf:38:
68:b0:4e:b8:67:38:2a:c3:d1:85:0e:96:ac:bf:b0:
38:cf:c8:b9:16:ac:af:9c:da:4d:c1:9e:ff:96:fc:
54:57:aa:53:47:24:64:9d:2d:83:b7:a2:67:b8:9b:
4e:b5:68:0f:5d:29:2f:53:5b:97:cc:ff:48:ef:f1:
6d:aa:ae:0f:ec:49:c9:17:e1:ca:50:0d:c7:ac:53:
59:8b:86:c0:17:a1:7d:9e:1a:1c:96:ec:01:6a:c6:
26:18:65:cf:a8:14:40:ec:ee:40:c8:83:f8:91:e4:
78:23:1c:8f:13:47:51:4d:c1:10:f0:e0:0d:54:6e:
58:20:c6:f4:d9:76:eb:a0:b8:32:04:68:8c:6c:a4:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:16:CB:11:E0:A2:3B:88:6D:9B:48:8A:6F:A9:A4:E7:21:8F:87:23
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f0:cd:52:6f:7e:04:94:54:02:0d:89:44:46:32:36:76:6b:
69:a7:16:96:b3:36:af:13:c7:76:cf:ad:22:1f:8a:be:04:91:
da:68:fa:5c:ce:dd:e0:9a:8d:4e:14:ed:9a:21:21:8c:ab:1b:
79:47:a5:98:da:a0:e4:3d:fc:2a:13:b9:56:e8:c7:00:8e:c3:
14:32:9e:72:96:6f:d4:54:5f:52:e3:5a:fe:13:39:d7:1d:ce:
3f:01:18:92:1b:22:20:2f:b6:02:64:8a:a3:1c:b9:a6:bc:76:
7d:3a:8a:9d:bc:f0:d8:db:af:07:b9:20:a2:96:ed:a0:59:81:
6e:47:90:1a:87:ac:9f:b8:98:5a:24:23:18:38:d6:c3:da:20:
71:64:aa:6b:ed:8f:7a:ee:cf:a0:e8:60:1e:05:a0:e9:df:e5:
89:9f:8b:38:9c:81:8c:55:a5:2c:5c:ba:1c:a6:b9:d5:6a:1c:
ab:f1:98:01:0e:50:b5:eb:eb:c9:4e:4a:73:7f:e3:7e:cb:eb:
7c:53:e1:3c:83:35:f0:4d:c3:40:78:ba:5a:f3:a3:73:d7:fb:
b4:b7:82:5a:83:ed:99:28:28:c5:62:60:ac:fc:a4:42:eb:1f:
d4:73:17:32:8e:f9:2d:61:6a:d9:ef:62:80:0f:f6:a2:d1:92:
c9:9e:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:49 2026 by rpki-client