Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier: 4fBV/qFUL4qgK9zB3INhZ5T81T5acqA7eL0CH7eoG4g=
Subject key identifier: 1A:8C:D3:F2:60:68:A7:0D:66:CC:88:BC:17:AD:3C:8B:CC:1E:ED:DF
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer: /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial: 019F2369B759ED9CF96E49FF5F9DEECD5B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number: 188E
Signing time: Thu 02 Jul 2026 15:19:18 +0000
Manifest this update: Thu 02 Jul 2026 15:19:18 +0000
Manifest next update: Fri 03 Jul 2026 15:19:18 +0000
Files and hashes: 1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: KZtzWK9iVSOG9jAE/5QjRduosk36qf91j6huCuKTtCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:b7:59:ed:9c:f9:6e:49:ff:5f:9d:ee:cd:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Validity
Not Before: Jul 2 15:19:18 2026 GMT
Not After : Jul 3 15:19:18 2026 GMT
Subject: CN=1a8cd3f26068a70d66cc88bc17ad3c8bcc1eeddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:fd:70:f0:9f:e2:c0:2a:40:20:33:ae:43:
4c:fb:cd:97:c3:10:7d:33:78:ab:3e:0d:1c:66:0b:
5a:b2:16:de:ab:aa:bd:e3:8d:26:ec:23:84:1f:26:
32:d1:48:6d:52:9d:0a:1f:80:5e:32:94:37:3d:a6:
d0:dc:e7:a8:33:32:e1:ec:e6:87:e5:de:17:80:c9:
67:88:4b:a1:2a:43:b4:a0:62:c2:c7:52:72:6a:95:
6b:62:3b:7e:97:49:a6:ff:a9:e0:07:9b:f1:b1:af:
3e:33:4d:98:27:be:0e:8f:4b:47:e3:3f:7e:18:79:
b8:dc:3f:d0:3f:37:d3:8f:9f:2a:92:a9:47:6d:68:
ec:67:d9:35:4d:94:61:d4:f3:b6:2c:a9:e5:66:06:
0e:bf:a6:8c:a4:41:c3:65:b2:91:e7:9e:b5:10:fa:
5c:a4:07:61:92:ed:79:34:81:34:1e:79:92:72:f8:
36:12:53:55:54:11:da:ca:6a:6d:f9:4d:06:02:12:
11:b7:ae:f3:85:d9:c1:50:af:1c:e1:60:7f:57:5b:
08:ee:93:46:dc:9f:1c:ed:21:38:d2:10:00:c5:73:
c9:10:bb:fe:c2:24:b4:19:34:ab:53:99:c7:43:46:
de:eb:45:41:9f:a8:9d:eb:b5:48:57:cb:0a:43:76:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:D3:F2:60:68:A7:0D:66:CC:88:BC:17:AD:3C:8B:CC:1E:ED:DF
X509v3 Authority Key Identifier:
keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:57:8d:9a:9f:4c:38:98:58:cd:33:15:85:60:11:da:d1:18:
22:1f:2b:ed:23:cd:9e:b0:a3:8e:b0:a9:59:d7:d3:17:d2:cc:
1b:41:9f:79:c5:4d:a7:86:a8:0e:6f:81:79:f1:e8:4c:36:31:
89:f9:06:60:18:49:5b:13:e4:f6:3c:4c:62:58:a2:ef:76:7c:
4a:ea:b5:80:fa:2a:22:3c:55:68:fd:ea:38:62:0c:dc:b3:8c:
aa:76:34:25:a9:c0:ff:c3:ba:44:f2:57:53:88:57:d8:de:46:
90:9e:7f:f5:be:35:0e:b0:c4:09:ce:8e:5f:eb:68:42:27:16:
94:0d:8e:ff:c2:65:ab:10:12:fa:12:ea:f1:d6:40:a5:fb:fa:
a3:ce:09:48:5c:44:07:27:a3:7a:f6:c9:02:a3:32:c3:12:f6:
79:e5:29:f9:77:fe:a6:e8:88:66:f2:49:b3:cc:2b:a7:0e:93:
79:01:cd:f8:f8:1c:ed:68:39:f0:a7:af:74:84:c1:0a:35:01:
46:ec:cd:54:b0:1a:be:20:62:60:21:a4:a1:9a:bb:4d:fe:55:
73:54:b3:36:9d:1a:47:dd:d5:b4:73:54:2b:13:da:8f:c6:8f:
2c:0e:63:7a:59:c6:50:c2:32:9a:76:07:af:09:e7:ce:1b:33:
b9:88:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:34 2026 by rpki-client