Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: uQ0Npl4rKhjSeXxhuHpbADrzLXFP2WcFadt/66o2nIM=
Subject key identifier: 22:73:F8:8D:6D:78:4B:FF:E5:FA:C6:D5:A3:DC:5D:DF:63:60:4A:AA
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019F2247EDDDA355FB85DD7D6E52ACD64F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 0D75
Signing time: Thu 02 Jul 2026 10:02:46 +0000
Manifest this update: Thu 02 Jul 2026 10:02:46 +0000
Manifest next update: Fri 03 Jul 2026 10:02:46 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: Y6Wvu+TCoQhqlBwabInQl+BAYRwJLKnMTnRY4e/CyAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:ed:dd:a3:55:fb:85:dd:7d:6e:52:ac:d6:4f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Jul 2 10:02:46 2026 GMT
Not After : Jul 3 10:02:46 2026 GMT
Subject: CN=2273f88d6d784bffe5fac6d5a3dc5ddf63604aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:e2:2f:8d:bf:a7:66:81:3f:8d:8d:ac:af:
79:68:35:ae:2c:00:a1:cd:ab:4c:9d:95:2d:18:e1:
a7:90:30:2f:ee:2c:f1:bf:1c:0d:ab:d7:0a:e9:51:
8c:a4:01:27:42:21:59:48:90:9c:2c:61:d6:e5:8c:
63:ac:9c:30:70:16:3a:17:1a:2b:38:6a:9d:ec:89:
a9:56:0d:48:bb:e0:91:27:9b:5c:ea:26:7e:77:31:
3d:7d:40:a3:45:4b:5c:3e:04:e1:55:62:0d:6a:db:
9d:b7:16:c8:bb:e4:7b:ca:b0:26:3b:49:01:05:42:
25:15:17:d7:c4:bf:0f:21:73:10:0b:38:3a:3f:19:
c8:17:ec:eb:99:fa:0d:61:2c:de:6d:89:f1:82:5a:
0c:bc:82:98:b9:56:91:d4:ef:3a:75:67:5d:27:d5:
01:aa:b2:3a:92:46:74:9f:21:6d:3e:a7:27:60:93:
20:e3:b9:ba:c5:62:c2:19:dc:08:1c:a0:3a:85:a3:
07:3e:ae:ad:85:9e:7d:45:c8:04:78:1f:89:0a:90:
6b:52:37:27:22:b6:62:42:a8:6b:14:ca:2e:15:af:
7a:8e:aa:a2:72:17:89:63:bd:d5:27:84:23:f3:e6:
17:e5:24:1b:6d:47:46:13:fb:c8:a9:3e:e1:b4:99:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:F8:8D:6D:78:4B:FF:E5:FA:C6:D5:A3:DC:5D:DF:63:60:4A:AA
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:66:1e:f4:da:cb:9f:b5:f5:8c:92:e9:87:f2:3b:9d:35:15:
d9:29:76:5a:fb:f0:eb:06:20:24:9c:3d:a5:f3:e2:23:37:3c:
77:49:97:06:24:16:a1:a1:5b:eb:67:44:a1:7f:ad:a7:ff:31:
10:1f:92:6e:0b:69:d1:2b:b7:25:55:b7:34:60:e4:23:f7:14:
ef:f5:ee:75:a5:1a:2f:a9:34:52:46:cb:c7:63:c4:03:38:80:
b3:07:1c:f8:7d:6e:81:80:7a:c3:cb:dd:31:d0:7b:54:e3:99:
21:d2:bc:d6:9c:97:87:bd:2c:02:ed:eb:77:20:1c:b0:f6:0b:
b2:41:db:3a:9f:21:ed:ba:b7:b8:58:91:00:cc:e5:38:6c:39:
9a:b9:de:1a:74:d8:4e:23:8f:8d:fa:ad:13:6b:e7:9f:47:c6:
64:10:98:75:16:bd:25:08:fc:19:e7:0b:76:93:37:6c:69:eb:
1d:29:66:40:44:e8:27:9c:e7:a7:a4:a6:b2:d0:f6:84:97:45:
fe:68:31:fa:df:2f:19:bf:af:f7:e2:86:4b:fe:f7:15:2c:f8:
9e:84:14:42:96:92:a7:c7:52:06:c9:29:69:f5:57:b1:7b:4d:
8a:7e:6b:ec:57:da:27:7f:2e:10:b9:92:bf:c4:60:3e:fc:3a:
2f:0b:dc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:35:22 2026 by rpki-client