Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: 1iHFkkL5FZxotPrEuLYii42p+9EgFO6B8/rEmIdSyGk=
Subject key identifier: DE:13:CD:9B:81:DE:84:13:2F:E7:8E:05:C2:E7:D6:22:1B:3B:31:A1
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019F236A0BD0859FD051C195BAECCBAE565D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 12DE
Signing time: Thu 02 Jul 2026 15:19:39 +0000
Manifest this update: Thu 02 Jul 2026 15:19:39 +0000
Manifest next update: Fri 03 Jul 2026 15:19:39 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: x5it7LGi/WmvcDYxgJldhe0UqvYwGIUVRYrIr58t0RQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:0b:d0:85:9f:d0:51:c1:95:ba:ec:cb:ae:56:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Jul 2 15:19:39 2026 GMT
Not After : Jul 3 15:19:39 2026 GMT
Subject: CN=de13cd9b81de84132fe78e05c2e7d6221b3b31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:59:98:a6:c4:6a:d5:04:48:19:bd:da:c0:
a0:bf:66:82:47:c2:2f:23:28:75:ca:5c:c8:a1:55:
41:60:87:c7:e5:ac:5b:43:3e:f4:01:41:2f:fe:8f:
8c:d0:2e:d0:fc:15:41:11:e6:49:48:da:01:9b:cf:
b5:72:bc:ca:3a:4f:47:7a:41:0b:11:9f:5b:b2:63:
1e:8d:04:f3:b1:ee:62:ba:ee:fa:01:f4:fc:28:40:
3e:97:53:b7:64:7a:23:cc:90:cd:9e:56:06:a7:0d:
6f:77:79:7f:45:c2:fc:56:53:b8:91:c2:f5:7e:73:
8e:a6:08:af:87:f3:bc:06:d6:d9:72:3f:e2:5b:c0:
23:ac:59:6a:cc:8e:c0:a2:33:35:80:e6:a1:e6:2f:
b1:bd:02:d5:e3:93:64:79:1b:9a:d9:51:35:22:63:
24:ff:a8:c8:38:43:be:3a:7c:8f:0d:e9:57:29:8b:
f0:6c:eb:74:e3:47:c0:c2:f2:6a:5f:ec:a3:91:c6:
fb:ea:9d:0b:04:a0:9e:0f:d1:d9:de:7a:3a:14:d2:
a7:b0:e5:f9:ae:bb:5b:ed:62:93:ec:0f:12:7b:28:
52:64:68:22:85:b0:1c:9d:a6:6d:c1:70:13:63:c3:
72:97:0b:f4:7f:20:7f:0b:9a:19:a6:2b:80:fd:bb:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:13:CD:9B:81:DE:84:13:2F:E7:8E:05:C2:E7:D6:22:1B:3B:31:A1
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:3d:3e:79:41:89:d1:f4:41:42:05:d5:f4:70:20:75:ac:
57:c2:8a:bf:76:ad:b6:73:a4:e0:db:a9:bd:6e:43:16:47:33:
c2:19:49:b3:56:71:77:70:46:45:86:f7:04:5e:3c:7d:33:5b:
a4:5f:1a:6c:98:c7:f7:ae:85:09:20:12:f9:da:d5:f4:ee:dc:
26:12:ba:d7:eb:73:98:10:b1:6c:c0:65:f3:59:da:88:ea:ff:
9c:18:5f:0b:c8:b2:0a:74:d2:62:07:ca:95:cf:82:4a:6a:f9:
40:3e:a2:3a:07:9c:67:3e:2f:c6:e7:67:85:bd:b9:88:78:b0:
9d:5a:75:24:ef:d5:27:be:22:9b:a5:1d:a9:03:e7:0b:ae:58:
ec:58:a5:1b:43:6c:90:fc:66:43:3e:3c:8f:03:11:12:fa:bf:
55:43:79:19:43:dc:a6:f7:f6:f3:5a:c6:91:24:48:32:7e:ba:
75:a2:90:82:13:4c:f1:7b:86:68:bd:b9:b7:95:3a:c5:f1:8f:
24:36:4c:bc:59:5b:fc:ed:52:49:bc:cb:0e:72:45:6f:f9:09:
42:3a:3d:33:da:0c:c5:5c:f3:dc:46:26:e9:cc:3e:d3:ac:01:
12:1a:47:a5:a2:60:23:dc:72:5a:4d:01:f6:7d:30:37:d2:0c:
2f:b3:c6:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8jagvQhZ/QUcGVuuzLrlZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjYwNzAyMTUxOTM5WhcNMjYwNzAzMTUxOTM5WjAzMTEwLwYDVQQD
EyhkZTEzY2Q5YjgxZGU4NDEzMmZlNzhlMDVjMmU3ZDYyMjFiM2IzMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXZZmKbEatUESBm92sCgv2aCR8Iv
Iyh1ylzIoVVBYIfH5axbQz70AUEv/o+M0C7Q/BVBEeZJSNoBm8+1crzKOk9HekEL
EZ9bsmMejQTzse5iuu76AfT8KEA+l1O3ZHojzJDNnlYGpw1vd3l/RcL8VlO4kcL1
fnOOpgivh/O8BtbZcj/iW8AjrFlqzI7AojM1gOah5i+xvQLV45NkeRua2VE1ImMk
/6jIOEO+OnyPDelXKYvwbOt040fAwvJqX+yjkcb76p0LBKCeD9HZ3no6FNKnsOX5
rrtb7WKT7A8SeyhSZGgihbAcnaZtwXATY8Nylwv0fyB/C5oZpiuA/bsnpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN4TzZuB3oQTL+eOBcLn1iIbOzGhMB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0L2Q5MDJjYS1jZGYzLTRmMjktYjIzMi03MjQyNmQ5MjYw
MWIvMS8xLTU0NUM5eTlsYS1yU2xfNHhPMmVfRU5vZTlFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUB89
PnlBidH0QUIF1fRwIHWsV8KKv3attnOk4NupvW5DFkczwhlJs1Zxd3BGRYb3BF48
fTNbpF8abJjH966FCSAS+drV9O7cJhK61+tzmBCxbMBl81naiOr/nBhfC8iyCnTS
YgfKlc+CSmr5QD6iOgecZz4vxudnhb25iHiwnVp1JO/VJ74im6UdqQPnC65Y7Fil
G0NskPxmQz48jwMREvq/VUN5GUPcpvf281rGkSRIMn66daKQghNM8XuGaL25t5U6
xfGPJDZMvFlb/O1SSbzLDnJFb/kJQjo9M9oMxVzz3EYm6cw+06wBEhpHpaJgI9xy
Wk0B9n0wN9IML7PGlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:06 2026 by rpki-client