Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: gT+f/DOrPxmX3RQvJXN/2xvy63fiPmfI0L1gaKDFOK8=
Subject key identifier: 66:3F:D3:AC:3A:7C:96:86:FC:36:3A:01:9B:71:3A:B4:37:7E:CC:0B
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019F2369B7677C78930077A9DC65126BE66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1493
Signing time: Thu 02 Jul 2026 15:19:18 +0000
Manifest this update: Thu 02 Jul 2026 15:19:18 +0000
Manifest next update: Fri 03 Jul 2026 15:19:18 +0000
Files and hashes: 1: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: 3Mgc9+qekwrKQe/CNxapevP+sbsjdn2IrFCvIX5AjN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:b7:67:7c:78:93:00:77:a9:dc:65:12:6b:e6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jul 2 15:19:18 2026 GMT
Not After : Jul 3 15:19:18 2026 GMT
Subject: CN=663fd3ac3a7c9686fc363a019b713ab4377ecc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:b6:93:60:5d:1f:3a:59:fc:b1:b5:05:e5:
d5:41:a7:6b:ef:99:83:16:fc:2b:d1:e7:58:5e:d3:
1f:54:5d:5d:2b:e4:53:26:b6:22:78:0d:6b:35:ca:
88:cb:42:a4:2f:25:00:3c:3d:2e:c3:34:fb:35:1e:
fd:3a:f7:6f:1e:95:fb:92:89:bf:b3:a8:9f:9b:75:
6f:71:fd:8a:68:b3:d0:10:cd:ad:ea:a4:c7:8a:f1:
72:54:85:bc:ec:9d:28:a5:a9:7d:97:0c:4b:33:82:
06:64:5f:30:55:05:dc:9f:c3:42:d8:84:cb:6c:84:
29:29:f8:d9:71:e2:05:02:96:48:12:3a:11:39:a6:
a4:1b:cc:0c:48:fa:49:14:df:ce:c0:e7:84:8c:51:
e0:3d:9e:cd:eb:a4:a8:45:8c:c1:bd:a7:e5:d3:b3:
d9:55:2c:da:c9:49:45:6c:f7:a9:f5:ae:1e:10:55:
3b:37:88:bb:27:c4:f6:52:85:54:72:d5:0b:a2:68:
a6:ad:65:3c:e9:d4:8f:f9:57:5e:ca:cf:53:c1:2c:
0a:17:86:9f:12:6e:d9:36:8e:38:ab:80:7f:b3:d6:
52:f3:a8:a6:98:ea:c7:42:f6:74:ec:99:2a:e8:9a:
38:12:b5:1b:dd:81:a9:25:5b:b2:df:f0:fe:33:4f:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3F:D3:AC:3A:7C:96:86:FC:36:3A:01:9B:71:3A:B4:37:7E:CC:0B
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:40:85:d1:0e:42:70:48:a6:fd:dd:a8:dc:d6:be:6f:6a:
8b:cb:7c:76:4b:e8:83:0b:27:28:77:ae:dd:f1:8a:1c:21:9b:
df:6b:05:8b:f3:c7:ff:b2:58:a9:9d:fc:da:b7:40:6b:bf:64:
10:58:99:b5:da:f3:85:2a:88:cd:1c:a9:15:6f:ab:dd:e4:a6:
2b:9d:fe:eb:89:82:88:03:c1:ab:e4:53:ec:f2:64:61:b9:81:
7e:6f:d4:9b:13:a0:b6:b3:53:33:8c:ce:d6:cc:5d:38:37:26:
42:c4:ab:59:93:de:2f:a3:66:a3:45:ae:cb:36:98:35:c8:51:
39:ea:58:ea:5d:a6:00:e6:55:c5:89:6f:29:92:61:28:1a:7e:
40:f6:9b:45:76:f2:c2:04:ba:87:19:39:1e:03:5c:0f:6c:2f:
a6:9c:d6:31:6e:96:fe:cd:44:47:e2:e8:1d:2c:aa:58:5d:ab:
1c:d7:0a:f2:cd:60:5d:e8:70:11:8f:fb:10:46:89:63:42:75:
dd:9e:8a:96:e8:00:88:87:2e:de:3c:17:a9:01:e5:fc:60:d9:
21:46:18:e5:3b:58:14:d4:e2:b4:de:ba:76:1d:b8:8b:92:9b:
3b:73:1e:35:4b:3c:19:82:a2:cd:e9:0a:3e:a5:f8:ea:10:84:
0b:d1:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:11 2026 by rpki-client