Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: Oa6sPisaXkSZG5Fy6ZiMYslF0LkSqav7rV8V573dZac=
Subject key identifier: 4C:F6:24:5F:ED:B5:0D:66:8B:E1:1C:AD:84:36:67:14:94:B6:DD:FE
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 019F23697DE894F017172DA4BE418EEE05A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 069F
Signing time: Thu 02 Jul 2026 15:19:03 +0000
Manifest this update: Thu 02 Jul 2026 15:19:03 +0000
Manifest next update: Fri 03 Jul 2026 15:19:03 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: Qto2PQ2m5alYIuR/Kr4b4tHuK9o30MlH03Ks8T7HwwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:7d:e8:94:f0:17:17:2d:a4:be:41:8e:ee:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Jul 2 15:19:03 2026 GMT
Not After : Jul 3 15:19:03 2026 GMT
Subject: CN=4cf6245fedb50d668be11cad8436671494b6ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:a5:84:69:e0:85:9d:5d:68:da:1f:0a:a3:
42:d4:80:57:0d:43:bb:0c:69:57:21:f5:4e:f2:cc:
61:4b:09:05:b8:83:d4:87:22:15:7c:d6:4b:6e:d4:
67:bc:bc:67:72:0a:7d:97:4d:17:67:63:6c:63:04:
b3:9d:30:fb:47:d5:f7:fc:7f:28:cb:00:f2:c8:05:
c0:ab:7f:f5:9c:70:7c:e6:76:3b:73:9c:96:78:02:
4b:e0:ef:09:0c:e7:8d:52:9a:df:0f:4f:6d:0f:57:
6a:95:4a:10:c1:c2:f5:29:a0:71:8e:88:d9:ef:82:
53:87:61:1a:79:1a:6c:bd:5a:cc:3f:68:1b:8a:9d:
79:b0:0a:5c:77:ea:33:4a:17:63:a9:76:b8:f0:db:
a1:a2:03:77:b6:5d:5b:f1:a3:0b:67:5d:ac:81:dc:
63:77:f9:1d:41:46:1b:09:b6:b0:61:18:c8:22:81:
b4:b2:23:b1:68:77:7c:c0:1f:9c:c1:e2:d6:79:a1:
cb:ff:c5:39:76:cf:10:17:df:e9:ba:5e:01:b8:5b:
f0:a5:59:3d:28:5c:2a:eb:18:ec:fb:d6:66:a3:71:
27:50:7d:15:9b:38:da:91:c1:31:e2:70:19:1a:2a:
f8:d5:b7:05:9b:c2:49:32:7f:a4:5e:0b:04:bf:da:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:24:5F:ED:B5:0D:66:8B:E1:1C:AD:84:36:67:14:94:B6:DD:FE
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:5d:97:47:48:25:3e:dc:95:a2:52:01:4f:05:e3:0e:a7:c5:
c6:98:ae:3c:57:20:d9:9a:1e:cd:11:73:68:58:a4:b9:d3:c8:
29:49:65:59:12:1b:bc:3f:a7:89:c7:c8:da:e1:8d:b5:11:7c:
45:45:37:86:7f:c2:86:1e:9d:c0:4b:fa:b7:25:8b:09:4d:e0:
dd:51:36:e7:41:27:f6:20:47:c9:6e:58:87:8d:aa:3d:c8:83:
54:bc:df:a6:2c:fa:2f:06:e1:d9:12:5e:25:f4:ba:1b:75:19:
01:5a:b3:db:b3:84:cd:f7:36:0e:38:cf:8f:10:e8:f4:1c:39:
08:46:bf:04:c3:10:c8:65:e8:56:09:dc:73:b0:1d:2b:40:32:
f5:fa:b6:a9:4c:68:11:b2:6c:81:0c:92:af:bc:f2:00:80:ec:
28:19:5c:30:6a:bb:ff:b1:b6:b1:d5:88:85:ed:0e:a3:bd:50:
0a:39:c3:9d:53:fb:bc:9e:c1:89:e7:6d:a1:f1:2e:4a:08:d2:
8b:5d:01:15:7b:c5:5d:01:59:e2:b4:00:ac:75:81:4a:8d:ad:
d3:4d:cc:31:b1:f5:25:f9:e4:ae:da:d6:6f:30:2c:24:98:90:
8f:17:a2:81:e0:af:c1:e8:82:26:b9:fd:0d:b1:23:a6:e7:b1:
eb:58:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:15 2026 by rpki-client