Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
File: 2f-H9S43t2bsv0s_nLJlWN0wiCA.mft (raw, json)
Hash identifier: LGUP8K4gJEUHr0AMOZxlocoQv4lgHk7w4gFSPz9rAmQ=
Subject key identifier: C1:B9:BF:41:70:36:9F:55:BD:25:2E:73:A7:B3:6C:8F:8D:12:4E:87
Authority key identifier: D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
Certificate issuer: /CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Certificate serial: 019EC8CB1FBF8295EB71B3104FB8F9D50CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
Manifest number: 0F2D
Signing time: Mon 15 Jun 2026 01:00:15 +0000
Manifest this update: Mon 15 Jun 2026 01:00:15 +0000
Manifest next update: Tue 16 Jun 2026 01:00:15 +0000
Files and hashes: 1: 2f-H9S43t2bsv0s_nLJlWN0wiCA.crl (hash: RJVDcjNa01cm3q+uI+kb2MZhjl117uEA4cu2o/0Yt9k=)
2: 4FYy4IVc0E0edu7Aspaqd269s3k.roa (hash: AewBAICqPk/AoyYo2Nui0QpeK5+BqYlSJNp/7pYYLxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:cb:1f:bf:82:95:eb:71:b3:10:4f:b8:f9:d5:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff87f52e37b766ecbf4b3f9cb26558dd308820
Validity
Not Before: Jun 15 01:00:15 2026 GMT
Not After : Jun 16 01:00:15 2026 GMT
Subject: CN=c1b9bf4170369f55bd252e73a7b36c8f8d124e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:53:cb:a0:f2:b8:c0:0d:c3:21:63:d0:7e:
58:02:da:1b:13:d8:57:94:d0:70:3d:b8:96:56:5c:
c4:0c:1b:35:cf:8f:6c:98:db:e5:6a:69:ba:a4:b2:
d6:3c:c0:6c:8c:b5:dc:2a:ef:09:4c:9c:c0:9f:54:
80:82:fe:f1:e7:5f:af:b6:ba:9e:e6:f5:27:06:29:
d9:f4:78:24:14:16:94:06:c1:08:33:69:d4:4f:5d:
16:08:59:b7:d6:a4:25:01:15:47:64:65:7e:d8:5f:
75:03:48:f2:5b:ed:53:e5:e0:43:78:4f:f7:13:ea:
b0:8a:3b:e6:4b:97:b0:53:05:60:e3:0f:c8:ff:41:
dc:ba:5b:56:55:99:8f:78:b7:7e:57:f1:dc:bf:e2:
22:0d:e2:01:b2:30:34:d1:c6:57:93:57:71:9e:5e:
48:ab:61:8d:07:fa:5e:86:a0:d0:93:f8:f9:2f:42:
62:7a:ab:34:c1:10:0e:bf:b2:e1:c1:25:cd:25:ef:
d3:e9:8b:4f:02:7c:cb:ee:cc:f0:d0:2e:2a:fa:a8:
4f:6f:7e:7e:9c:0b:28:3b:ed:66:ab:f4:40:44:d6:
79:ac:6d:ec:4d:69:4f:73:dc:89:d6:1d:6c:46:12:
26:11:c1:51:c3:b6:c2:44:98:55:14:28:3a:b6:b8:
73:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:BF:41:70:36:9F:55:BD:25:2E:73:A7:B3:6C:8F:8D:12:4E:87
X509v3 Authority Key Identifier:
keyid:D9:FF:87:F5:2E:37:B7:66:EC:BF:4B:3F:9C:B2:65:58:DD:30:88:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-H9S43t2bsv0s_nLJlWN0wiCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e2aad8-e212-4828-a5fc-1e7300ccda36/1/2f-H9S43t2bsv0s_nLJlWN0wiCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a8:36:b2:2f:07:c1:08:c0:06:79:53:83:3a:36:8e:ee:b1:
cc:3f:f9:a5:09:53:84:9c:4c:c9:85:39:c8:ab:d0:80:65:ab:
cd:50:26:95:f3:6b:d7:64:df:e7:48:7a:23:41:9f:46:d9:f6:
44:c0:4d:ba:41:e2:4b:54:47:b1:e7:0f:69:48:5c:c1:f2:9a:
59:8f:df:f9:62:96:3d:fa:0b:8d:94:87:79:ab:90:f6:fa:28:
fb:da:98:3a:06:5c:93:3a:b2:fe:76:b8:6d:58:da:63:4e:0f:
95:e4:da:1e:e9:a4:01:24:c7:50:f2:cc:64:44:f5:9e:32:bf:
68:06:f4:c4:b7:8f:17:90:7d:25:c9:43:1e:2e:ab:c6:6e:0a:
a6:d5:88:0a:ed:52:15:6b:c4:0b:9b:ff:5a:81:9c:e4:58:18:
16:b8:cc:f6:5d:00:2d:41:21:f8:ce:ff:21:91:7e:62:38:aa:
47:fa:c8:c2:d4:40:5e:34:27:f6:a0:3c:c6:be:c5:54:3d:9d:
8f:c2:81:d7:c3:5e:ae:18:07:11:a5:f5:87:bc:2d:89:b9:a4:
4d:0b:3c:c3:e1:d3:cf:bc:99:46:8f:5f:9d:9f:aa:ad:f5:99:
15:79:d3:4a:4b:76:1c:fb:9c:ab:68:c9:ae:54:84:74:4b:1a:
e5:99:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:17:43 2026 by rpki-client