Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
File: 2J8W9XSSQzePgUyUskA010s5J98.mft (raw, json)
Hash identifier: rYsOC6bFEnfdjmROvGgimVnb60eIq+JnIMPvZMTNXHA=
Subject key identifier: D0:BD:92:22:87:AA:E1:C5:E8:9E:01:76:FF:EA:0A:FE:AA:59:2C:16
Authority key identifier: D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
Certificate issuer: /CN=d89f16f5749243378f814c94b24034d74b3927df
Certificate serial: 019F2369DE4BBE6DE0393D094C3D01252500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
Manifest number: 063D
Signing time: Thu 02 Jul 2026 15:19:28 +0000
Manifest this update: Thu 02 Jul 2026 15:19:28 +0000
Manifest next update: Fri 03 Jul 2026 15:19:28 +0000
Files and hashes: 1: 2J8W9XSSQzePgUyUskA010s5J98.crl (hash: ON8T8ZZXOrlCVEQxcwmA7yAv1hs9nSwKtX23isMmKfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:de:4b:be:6d:e0:39:3d:09:4c:3d:01:25:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f16f5749243378f814c94b24034d74b3927df
Validity
Not Before: Jul 2 15:19:28 2026 GMT
Not After : Jul 3 15:19:28 2026 GMT
Subject: CN=d0bd922287aae1c5e89e0176ffea0afeaa592c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:13:35:42:4b:33:71:be:36:d7:8f:6f:9d:
f8:8a:28:64:ab:ff:9d:47:e2:9f:55:c4:d0:3f:62:
10:35:10:ef:de:9d:2c:f8:77:22:09:e8:9a:1b:68:
9b:ee:cc:85:fe:ef:7c:0d:fb:06:25:85:e8:44:32:
a9:92:fa:af:5b:8d:65:a5:2d:8b:ca:11:ce:4c:64:
7a:81:96:3f:1a:f8:32:01:f7:6e:aa:7b:3c:a5:ea:
1e:45:74:94:79:7e:ed:59:1d:23:0a:e7:a3:09:91:
c1:b2:7c:72:ed:fd:df:b3:69:34:56:8f:34:e7:f0:
16:c0:ed:79:2d:e3:d4:24:0d:4c:1e:4c:25:17:b7:
2c:b7:ff:96:8a:f4:0d:fe:4d:25:ad:9c:87:b8:3e:
ae:dc:20:d0:38:7a:7c:45:17:09:c1:8c:18:8e:5d:
34:7a:ee:75:1d:94:74:be:f7:0d:7d:e1:ec:07:f1:
ba:2c:c1:55:e3:b2:50:df:df:27:b0:66:f1:38:82:
90:69:db:c4:95:81:d5:fc:04:2c:ab:3e:d2:1d:83:
9a:6a:1d:3d:db:3a:65:1b:e9:cf:1f:ef:7b:b1:c5:
d5:b0:24:0d:ff:85:88:16:4d:25:2a:7b:f4:e7:25:
73:82:d7:1d:c0:a0:a6:06:9f:65:e5:9c:b2:86:dc:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:92:22:87:AA:E1:C5:E8:9E:01:76:FF:EA:0A:FE:AA:59:2C:16
X509v3 Authority Key Identifier:
keyid:D8:9F:16:F5:74:92:43:37:8F:81:4C:94:B2:40:34:D7:4B:39:27:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J8W9XSSQzePgUyUskA010s5J98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/2J8W9XSSQzePgUyUskA010s5J98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3f:4b:ed:73:4e:ae:36:24:a8:a8:e5:fc:bd:cc:ca:92:db:
7d:ec:de:71:fc:2b:c1:9f:b8:f5:fb:c1:32:92:ad:ff:77:01:
a7:b1:c2:59:4c:50:e5:e4:2e:f1:af:ab:19:7c:d8:ca:c4:fa:
a2:95:68:43:24:e7:87:66:f2:1f:41:75:81:ef:bd:3e:fb:34:
15:a9:b5:97:58:ff:8e:31:17:0b:ec:1a:7c:9f:2a:56:69:b0:
29:e7:02:b7:ee:47:00:eb:ab:5a:de:19:cf:db:e1:e4:86:91:
61:a9:6b:e8:e6:d0:33:e6:ae:ea:80:6a:fd:63:71:2a:52:86:
c0:8f:a5:a8:7e:a8:4d:f6:47:9f:45:da:14:f0:82:e1:fb:c7:
64:e0:e5:d7:51:e2:b6:c1:67:42:be:bd:24:f0:5e:5d:c5:43:
14:aa:d7:69:30:a4:2c:41:12:c5:e6:1c:ae:b2:73:c3:3d:7b:
18:3e:2a:2b:19:26:85:90:16:ef:32:1f:02:6e:21:38:a8:f3:
d7:63:11:58:b7:79:b7:ca:f6:a8:11:9c:36:71:e5:c5:d3:8e:
08:98:f6:06:b8:9a:04:ba:1d:e8:a5:55:72:5e:6e:cc:3f:1a:
89:ab:50:1a:d2:71:ce:f6:74:83:5d:4c:ca:b4:84:96:b3:d5:
70:b9:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:07 2026 by rpki-client