Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: BIHFz0I9zvBTNJjTASTSl/t/7vC8jct0hXwjvJTJfbQ=
Subject key identifier: 0C:F9:93:EE:77:B3:05:9C:C9:34:E2:C2:15:9B:8B:52:23:F1:FB:A7
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 019F236A2B9AC843F87C923A05A2C11FE0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 1993
Signing time: Thu 02 Jul 2026 15:19:48 +0000
Manifest this update: Thu 02 Jul 2026 15:19:48 +0000
Manifest next update: Fri 03 Jul 2026 15:19:48 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: MxgulPUByDsgK8dKu+/mPRiu2dhHcZh7QLGv3BaioyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:2b:9a:c8:43:f8:7c:92:3a:05:a2:c1:1f:e0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Jul 2 15:19:48 2026 GMT
Not After : Jul 3 15:19:48 2026 GMT
Subject: CN=0cf993ee77b3059cc934e2c2159b8b5223f1fba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:af:ae:1a:6c:6f:7a:21:e6:e8:f8:4f:65:
4a:13:2a:89:0b:a1:32:5f:07:4d:b5:7f:0e:b6:49:
b3:e8:3f:95:fa:c6:8d:48:c9:c8:c9:04:b9:4b:dc:
6f:69:a3:ab:e1:8b:62:b2:c9:35:52:a3:2c:24:f1:
75:37:65:0c:76:a1:ad:fc:79:17:1b:d1:87:a6:f1:
26:ec:39:6e:75:6f:40:99:fc:be:bd:f4:51:b0:db:
71:1a:7f:8c:79:7a:36:17:c8:95:ad:38:e9:38:d0:
d5:f3:48:43:7d:6c:7b:d5:b9:82:90:26:71:f4:b1:
90:06:c1:ef:2f:3a:9e:87:1e:14:0f:1f:de:2b:71:
7f:de:1f:79:f1:e0:36:c5:94:e6:01:7c:27:7d:8f:
d8:f3:a3:f6:65:b7:bb:e4:87:4e:92:fd:26:0c:e3:
20:a7:b7:60:85:5d:8f:e6:02:55:1e:47:e8:7d:0d:
06:91:66:aa:ba:33:48:7a:4b:6b:34:c1:c1:f8:43:
ce:68:6d:e2:45:1d:a8:8f:ac:1d:e3:2f:ab:2c:bc:
03:85:ce:17:15:2d:eb:ed:89:84:c9:95:d9:71:c9:
4c:ff:c6:f6:43:f4:bc:22:26:dd:49:2c:5f:61:43:
d2:ba:79:fa:d7:ef:fd:32:f9:e3:f0:e5:ab:c8:94:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:93:EE:77:B3:05:9C:C9:34:E2:C2:15:9B:8B:52:23:F1:FB:A7
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:17:89:bc:17:4f:7e:12:04:41:cf:2c:3b:51:91:c0:ed:2a:
a4:41:6a:17:c2:1f:58:fe:57:09:38:14:e6:23:8c:32:f6:aa:
f4:68:72:ce:31:86:00:70:f7:20:9e:ac:52:87:88:01:d1:46:
26:81:3c:b4:f5:ea:cf:67:39:02:a4:5d:de:36:a0:69:33:9f:
01:40:7c:fd:76:d9:d1:15:eb:91:45:ef:af:50:8a:4b:b0:c5:
48:5b:3b:61:d1:c3:fb:c2:13:38:af:57:8b:be:5a:c8:c1:70:
51:34:8c:f0:d8:69:fb:a6:c3:ee:06:39:6f:10:de:d4:cd:ca:
33:81:f6:b3:22:8e:5a:c4:a8:26:3a:fd:a8:fb:9a:61:e9:a9:
91:d8:f5:b4:23:a5:98:64:0a:91:d9:5b:c4:7b:54:ba:59:d0:
0b:12:ff:37:7a:b0:83:cb:56:35:fe:fc:5c:af:e4:b2:84:31:
3c:82:d2:6b:ad:2d:0c:67:40:34:99:e0:49:99:f2:66:7d:63:
b6:f6:50:99:6c:c4:28:a0:2d:6b:7e:e3:69:71:d0:46:1c:5f:
a3:53:80:d4:af:b0:69:9e:7b:4c:0c:91:2f:03:9f:9b:03:dc:
bc:e4:ca:0a:46:24:b3:4d:f9:4d:ea:ed:24:a4:ce:ce:53:05:
4e:04:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:54 2026 by rpki-client