Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: rkifIaI6q6uivIbNxCil6fF5iwXbeWygcng43nFp3IY=
Subject key identifier: A7:12:18:D3:49:CA:F9:5F:50:10:64:EF:AB:FD:43:52:C4:6C:8E:1A
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 019F2369DC04B7436E4CCC57B62A5EA01775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 15F5
Signing time: Thu 02 Jul 2026 15:19:27 +0000
Manifest this update: Thu 02 Jul 2026 15:19:27 +0000
Manifest next update: Fri 03 Jul 2026 15:19:27 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: eos+XKQB71UBpliWvzmerCnt0tNPHvFvgFsZrVzUOJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:dc:04:b7:43:6e:4c:cc:57:b6:2a:5e:a0:17:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: Jul 2 15:19:27 2026 GMT
Not After : Jul 3 15:19:27 2026 GMT
Subject: CN=a71218d349caf95f501064efabfd4352c46c8e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:67:51:47:dd:9c:7a:22:f8:35:74:43:02:
5d:71:12:e9:e3:f3:aa:b1:de:25:8b:96:e3:73:71:
ab:5b:9a:ad:0b:08:3f:48:90:9a:87:7d:47:ca:f0:
b8:20:eb:a3:a8:01:83:75:ed:70:45:24:7f:b1:6f:
a6:4c:dc:fb:51:19:d1:e4:c0:2c:f9:20:0e:15:fb:
c4:d2:7b:c8:a3:92:cb:e9:b0:3d:1d:41:5c:0c:e2:
17:79:14:15:22:24:ec:a0:1a:bb:69:de:65:37:58:
3b:76:21:74:dc:b3:fd:76:cf:68:32:60:4f:db:5f:
f6:52:85:a1:1d:19:42:5c:64:17:1c:5a:be:ab:ce:
31:0a:06:e3:9b:7c:0c:2b:71:a1:4c:55:fb:6b:8f:
79:08:10:2d:ef:c3:25:44:74:ab:bf:4f:85:45:0e:
cc:91:56:db:92:b7:4b:7e:7c:e9:52:29:d2:bf:a9:
1b:89:23:89:d7:49:e3:a2:76:88:14:32:dc:32:9e:
cf:36:b2:0b:db:ca:82:97:67:64:6c:5c:23:25:de:
b4:42:0d:18:c4:40:eb:c4:6d:f9:e9:23:5b:ff:54:
2d:6b:3e:0f:9e:59:65:af:4d:74:68:39:ae:00:da:
c6:81:01:fe:66:72:f3:12:c7:7b:32:70:1c:cc:81:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:18:D3:49:CA:F9:5F:50:10:64:EF:AB:FD:43:52:C4:6C:8E:1A
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3e:a3:d0:79:b6:e5:a2:75:a5:c8:d1:e7:0b:01:8b:92:22:
f3:f6:7f:c9:3e:13:49:61:74:f3:a9:2a:ca:54:1c:72:a4:2c:
60:2c:58:bb:a9:ad:7b:1a:91:15:b5:b6:65:2d:d7:06:eb:1e:
e7:2b:e7:5e:a0:6a:f7:97:49:9b:d3:cb:9c:29:d5:61:bf:35:
37:d7:d6:e1:31:54:58:92:d2:26:30:d8:57:75:f4:13:40:b2:
85:04:2a:c4:27:c5:78:85:e6:41:01:9b:53:6b:e3:f0:a8:a4:
55:2e:f5:7a:8b:8c:14:cd:b3:b0:84:45:6c:77:64:1e:f3:97:
11:7f:40:63:54:42:3c:a3:f6:d4:4e:db:8f:82:e6:ee:5a:d7:
cf:74:25:15:2b:39:de:fa:f8:47:29:0c:90:03:21:d7:7f:48:
2b:d1:76:62:fd:31:f0:66:c9:35:69:c2:96:e4:53:3c:72:b3:
86:0e:b1:de:82:f2:1d:a5:83:1d:6c:fa:b7:78:5c:4c:28:51:
56:3d:3e:ec:aa:8b:d7:97:65:c9:1a:b3:92:c4:f2:79:04:f3:
76:4c:ac:05:7c:30:59:b6:d8:0f:19:28:73:bf:08:11:64:42:
75:65:42:46:e3:2d:b2:23:cc:99:6f:43:88:0e:e3:7b:b1:09:
81:7c:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:29 2026 by rpki-client