Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
File: 2h2OAPPwRejexhV_FCYkG18SbQ0.mft (raw, json)
Hash identifier: o4FEr5o9kKDB6VLk2CH2vlZaVO6yjdwLhbG5VCdWVZc=
Subject key identifier: 95:96:C8:19:08:A0:97:0B:11:21:78:AA:87:5A:D8:BD:CC:5E:6F:DD
Authority key identifier: DA:1D:8E:00:F3:F0:45:E8:DE:C6:15:7F:14:26:24:1B:5F:12:6D:0D
Certificate issuer: /CN=da1d8e00f3f045e8dec6157f1426241b5f126d0d
Certificate serial: 019F21D9A6B8CCBB475879EDE5090A01FE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2h2OAPPwRejexhV_FCYkG18SbQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
Manifest number: 0D99
Signing time: Thu 02 Jul 2026 08:02:19 +0000
Manifest this update: Thu 02 Jul 2026 08:02:19 +0000
Manifest next update: Fri 03 Jul 2026 08:02:19 +0000
Files and hashes: 1: 2h2OAPPwRejexhV_FCYkG18SbQ0.crl (hash: kksWuyT2bI4R4gDDHiEm/vK/ssFbKMqtvrBHnAGmoUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:a6:b8:cc:bb:47:58:79:ed:e5:09:0a:01:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d8e00f3f045e8dec6157f1426241b5f126d0d
Validity
Not Before: Jul 2 08:02:19 2026 GMT
Not After : Jul 3 08:02:19 2026 GMT
Subject: CN=9596c81908a0970b112178aa875ad8bdcc5e6fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:69:e2:1d:41:39:98:f0:17:35:b1:31:d9:68:
d6:da:9c:1e:87:f0:86:eb:a6:89:ae:23:c1:18:19:
89:98:84:2f:ef:fd:ef:83:25:45:69:f2:96:22:92:
8f:4d:ed:db:6a:05:8e:2e:8e:63:13:65:6a:43:99:
a7:4f:83:40:c1:1f:3c:7c:d8:1d:89:4a:ea:35:43:
75:84:0f:7a:af:17:c9:8a:1a:f9:db:85:52:b7:17:
0f:ca:b4:62:e8:58:79:b3:7d:1b:7c:07:62:f7:d8:
2b:34:ae:8f:ca:1b:3a:51:ba:ef:d2:a4:66:f0:a7:
8a:bd:22:f6:9e:55:5f:fe:37:ae:c5:c3:33:c2:a4:
4e:e8:0c:a2:88:2e:cb:e8:8f:b4:0b:4a:3b:7a:8e:
6d:1d:d6:82:f1:e8:a6:82:a9:2e:1c:ef:ae:ae:a1:
96:70:15:c7:7c:48:91:3b:17:fa:cd:c8:0f:50:c8:
86:2c:3e:a6:75:54:83:5a:51:68:31:55:b2:d3:7d:
80:e8:43:d9:bc:5f:98:37:f4:de:a5:c1:0d:82:2f:
c1:73:b5:18:85:f3:d3:b4:da:7a:f1:ef:ed:88:43:
a9:ec:8c:c6:3d:ae:69:6a:ef:75:b2:3f:66:92:7f:
6c:ad:cd:8a:ac:95:2b:c2:ed:81:dc:32:1a:6a:a1:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:C8:19:08:A0:97:0B:11:21:78:AA:87:5A:D8:BD:CC:5E:6F:DD
X509v3 Authority Key Identifier:
keyid:DA:1D:8E:00:F3:F0:45:E8:DE:C6:15:7F:14:26:24:1B:5F:12:6D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h2OAPPwRejexhV_FCYkG18SbQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5b9709-1108-4d5f-8608-09d560c0043b/1/2h2OAPPwRejexhV_FCYkG18SbQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:68:e5:b7:92:10:1c:c4:80:16:19:b0:1f:5b:7a:9f:10:00:
5a:5e:3a:99:93:0b:50:27:4e:7b:b3:0d:b3:fd:fe:0d:c5:15:
2f:0e:2c:aa:4d:0f:f1:dd:3d:03:44:32:d4:20:ef:f4:0d:69:
45:9a:ed:f1:dc:95:93:76:e4:3f:93:54:1f:25:6b:58:ad:35:
a5:df:6a:13:0f:1d:08:63:27:3d:24:e4:fa:ab:27:b7:18:48:
64:7b:3d:f6:e8:2c:a1:f3:c3:25:52:03:7b:3a:c8:fe:47:9c:
1c:a6:59:19:d5:7d:b8:8c:a5:57:d6:82:e1:17:fc:54:3e:d7:
65:84:84:e0:bb:3d:2b:98:fd:82:28:0d:52:b0:0f:0b:97:3f:
68:bd:f5:a2:de:69:72:2e:17:d2:80:36:34:7a:67:2e:fd:cf:
ab:3f:e5:f6:f4:13:68:94:ae:13:7d:05:5d:35:11:b1:14:e4:
78:71:17:84:93:5f:c8:45:f6:7d:bc:45:a1:c3:e0:fd:e2:15:
3a:48:74:41:98:42:17:ed:29:84:e2:0a:9a:ee:89:2c:35:5e:
3d:1c:4b:f9:ca:61:f8:58:06:f0:70:f6:5c:90:ef:4d:2e:ad:
65:4a:cf:a6:af:d7:de:5b:1f:da:07:a2:d0:54:be:8f:37:a2:
57:1a:d9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:39 2026 by rpki-client