
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: oeIqh4d4gpe286ToeLAhbjW/RLWJajtChf59XjgmKQg=
Subject key identifier: 07:94:C7:B6:BA:8D:21:3F:0F:98:9E:4F:DF:F7:B2:7C:C1:8B:93:77
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019F235A023825E695B1E2D03A8B3CF7E359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 08DB
Signing time: Thu 02 Jul 2026 15:02:09 +0000
Manifest this update: Thu 02 Jul 2026 15:02:09 +0000
Manifest next update: Fri 03 Jul 2026 15:02:09 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: lYieA+l3UiiYS51HospMXnk7wegyzXpGxSfEYIyohXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:5a:02:38:25:e6:95:b1:e2:d0:3a:8b:3c:f7:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Jul 2 15:02:09 2026 GMT
Not After : Jul 3 15:02:09 2026 GMT
Subject: CN=0794c7b6ba8d213f0f989e4fdff7b27cc18b9377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:6c:f5:21:c0:45:fb:d1:64:e7:0b:6e:a3:
63:17:1b:c0:c6:a4:22:39:92:f2:0d:92:72:13:3d:
db:1b:0f:40:26:ec:9f:19:d4:57:fe:ea:08:e3:19:
83:c9:e7:de:14:0d:1c:ff:b9:d7:24:96:50:02:df:
1a:2e:35:c6:05:21:43:de:5b:bc:5d:94:12:89:7f:
80:9d:2e:67:08:7b:8c:54:12:7c:97:8c:7c:a0:9c:
87:43:c5:ca:dd:78:ec:12:95:d2:c2:5a:95:fc:3f:
b8:7a:e1:d4:68:48:77:51:fc:9f:dc:3d:2d:96:f2:
e7:29:39:fe:92:55:b8:4a:97:0d:0c:84:dd:42:ae:
88:69:df:ba:d5:69:c5:fa:82:e3:fa:e2:71:bc:16:
b0:82:23:53:1a:92:fb:12:d8:c7:98:49:4b:31:3d:
35:a0:f5:e6:b6:33:ae:c9:ea:e5:b5:e6:70:d5:47:
3d:70:9d:1d:07:f5:e9:21:05:0e:9b:a0:d8:88:94:
38:57:a7:cd:5b:7f:e7:4e:09:20:43:8b:85:da:b7:
c8:5b:65:f2:da:4b:6a:05:3c:ea:57:b2:42:a1:51:
f0:5c:3f:18:cb:d3:88:bc:3d:e7:ba:9c:d1:c9:b4:
a3:51:3e:2c:f4:1d:42:bb:f1:26:82:c2:5d:bf:5e:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:C7:B6:BA:8D:21:3F:0F:98:9E:4F:DF:F7:B2:7C:C1:8B:93:77
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ff:c8:8c:ff:71:6e:f3:14:a7:c2:53:4f:60:0e:c2:ea:32:
85:55:08:66:14:42:64:8a:b8:35:ee:02:49:d4:d6:14:a9:2c:
9f:0e:a7:ae:46:eb:60:88:38:aa:db:46:0c:7e:f0:1f:3b:d2:
f7:37:5d:4b:52:45:27:14:40:4d:2a:da:5d:50:41:54:17:bd:
29:6b:18:d0:6e:18:76:2d:7a:f1:1c:1b:b6:57:ec:a0:cb:c8:
b5:8a:40:3c:9c:21:78:fa:fe:9d:80:da:e7:d6:98:62:8c:cd:
22:f8:a1:71:e8:ae:10:3c:81:d5:2e:89:61:7b:1f:d9:b9:1d:
ca:68:8d:4d:00:88:3e:56:8d:4e:f5:ce:78:91:1e:4c:c3:a0:
14:ad:e1:e2:25:9b:cf:54:74:a7:e0:8a:f4:2c:f7:46:05:f2:
93:72:a9:f3:45:2d:bb:f0:96:9e:ae:05:ee:11:93:f7:b0:9a:
f5:1d:a9:99:cd:b2:2a:e4:51:f8:7e:a6:4e:98:ef:fc:be:09:
3c:3d:1f:03:ef:4b:49:52:67:55:52:3c:c6:38:0a:49:f4:82:
9c:c2:eb:60:0b:da:a2:f7:5c:96:96:3a:69:79:60:3a:d3:15:
72:2d:71:57:5e:d9:b2:e2:4c:30:f1:42:f8:b6:ff:03:3c:b3:
e0:77:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:15 2026 by rpki-client