Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: 7hVMXWsmprXgOAkpRqyhojjSCBczE1dwQXTq+6ChCTA=
Subject key identifier: F6:15:92:F8:86:0D:2D:37:69:BF:C9:65:AC:A7:0D:4F:4F:F0:7F:BF
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019F23698BF36DB7DCE4B5B1D1FE0A74A92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0D9D
Signing time: Thu 02 Jul 2026 15:19:07 +0000
Manifest this update: Thu 02 Jul 2026 15:19:07 +0000
Manifest next update: Fri 03 Jul 2026 15:19:07 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: H7zcHFdlKVbDTySmklWHnFoaAdVl1BylANyu3LHNt+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:8b:f3:6d:b7:dc:e4:b5:b1:d1:fe:0a:74:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Jul 2 15:19:07 2026 GMT
Not After : Jul 3 15:19:07 2026 GMT
Subject: CN=f61592f8860d2d3769bfc965aca70d4f4ff07fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:90:6e:28:fc:9e:49:97:ad:43:4c:28:78:
91:a5:81:6b:ea:fb:91:e5:3c:c7:8f:73:05:cf:17:
72:20:fb:1c:41:3a:a4:e0:38:5e:44:3b:69:2e:fb:
a0:b8:06:be:e3:7b:ae:6c:d7:1e:7b:0c:a3:44:c3:
cd:4f:19:31:dc:47:29:7f:77:9e:ce:ba:8c:19:ab:
aa:58:ec:3b:c2:2f:a1:37:c4:4c:c4:e9:c5:ac:06:
2e:a5:b4:38:5b:40:dd:f3:78:eb:ce:78:6a:72:f4:
ed:0a:31:05:89:36:ec:cf:37:4a:19:85:63:6b:8b:
86:90:fb:3a:e3:de:38:87:80:47:2d:13:52:01:55:
5c:2f:ef:e9:0d:37:6b:f1:33:ae:f2:60:7f:24:e4:
c2:c8:58:7e:bb:9f:aa:d8:dd:51:58:7c:1c:d3:00:
67:6e:67:f7:2c:0e:53:0d:8e:62:9b:d5:a5:b9:82:
09:99:cc:99:5e:84:06:83:75:c7:80:bd:8f:51:41:
bd:64:f7:00:ea:3a:a1:36:4a:b1:2f:cc:b8:d1:21:
54:af:55:99:e1:ea:e4:61:38:d3:2f:e7:3b:9b:3d:
be:cc:c0:a9:68:10:58:0d:b8:f9:b0:6a:7b:b9:7c:
6f:21:90:11:cb:d6:02:34:80:d0:88:f9:ec:f4:36:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:92:F8:86:0D:2D:37:69:BF:C9:65:AC:A7:0D:4F:4F:F0:7F:BF
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9b:a7:88:ce:46:1c:db:83:ab:00:48:a1:c1:4a:fc:32:99:
01:f7:8a:40:53:9e:fe:9e:9f:53:1e:27:aa:7e:3e:60:0f:39:
04:21:71:3c:4d:0e:e2:96:80:6d:0f:01:14:cf:38:60:e3:18:
8b:35:e4:8e:c9:ce:8f:40:26:ec:2f:d3:4d:04:c2:a9:ed:ae:
33:8b:1c:1d:4a:fb:f6:71:bf:ab:cd:45:f3:ef:30:b7:16:26:
b1:98:85:66:75:a0:32:82:46:f9:23:21:9e:37:8f:ba:35:52:
ff:70:0a:5a:78:b3:38:6a:59:f1:a8:b7:92:d6:56:c8:50:69:
ff:a6:e6:3d:5d:f7:33:cd:a3:1d:79:38:d8:bf:df:82:92:a9:
bb:d8:bd:3e:41:51:2d:e3:39:56:5f:1f:22:9d:92:3d:0c:95:
95:cb:da:4e:37:57:28:0a:89:2f:b2:6e:0d:54:28:e7:a5:b6:
40:8a:ad:fb:75:cc:7b:9c:a5:1c:09:3d:f3:d6:a1:fe:e8:ea:
62:bd:18:dd:d7:92:37:6b:0d:76:45:57:68:48:af:3a:c6:a0:
03:44:c0:56:5d:c0:ed:7a:df:b7:4a:4a:f8:4c:4c:7e:65:6b:
90:ec:8f:63:ae:8e:73:c0:a2:e9:34:35:06:d6:80:79:40:2a:
b5:a5:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:12 2026 by rpki-client