Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: 194zDz+6+c585XFM9dl0lBwP9o2moj+CbJ2e6q83SHQ=
Subject key identifier: C0:10:40:24:C4:8F:65:31:DE:E6:C8:C0:DE:56:EB:56:87:FA:E6:02
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 019CD12EE5B1DC608712F781A0E5882374D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 08A8
Signing time: Mon 09 Mar 2026 06:00:37 +0000
Manifest this update: Mon 09 Mar 2026 06:00:37 +0000
Manifest next update: Tue 10 Mar 2026 06:00:37 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: W9lUtau63qzdZEf2YtBLM/+8B3H0wms99JatDTQZ6c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:2e:e5:b1:dc:60:87:12:f7:81:a0:e5:88:23:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Mar 9 06:00:37 2026 GMT
Not After : Mar 10 06:00:37 2026 GMT
Subject: CN=c0104024c48f6531dee6c8c0de56eb5687fae602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:8c:d3:ee:88:46:93:f1:98:6a:de:eb:88:
da:03:df:bb:8e:7b:1e:af:ed:a3:c2:b3:79:96:c8:
23:e6:63:a7:9f:59:95:16:4e:42:48:e1:5e:6c:6a:
36:af:48:bf:1b:2b:63:fb:67:34:80:9b:f8:02:cd:
d4:df:8d:3a:e5:04:8c:8a:d3:16:c5:c9:ec:0c:fb:
fd:c6:f9:39:c1:23:08:8a:53:be:62:a1:5b:9f:e7:
07:dd:9f:eb:a4:6d:fe:f9:14:9d:8c:72:c2:3e:b7:
1f:8f:fd:43:3e:2a:28:11:7c:79:cf:39:55:07:cc:
c9:82:14:69:8c:35:6c:98:92:f8:7f:fe:fe:c1:ec:
32:54:48:76:36:a4:b4:89:07:52:92:dd:a2:48:de:
3a:38:31:0d:6a:9a:34:71:c4:c5:58:bc:c4:1e:4b:
d2:59:f7:57:42:f4:35:28:fe:f1:2e:9b:dc:b2:1f:
27:50:37:bf:8c:4a:2b:9e:04:16:c6:92:a5:48:7f:
6e:d6:b1:e2:88:2b:4f:02:9c:79:a7:46:89:f9:6d:
21:1e:01:9b:1b:a1:9c:25:32:06:2a:c0:1a:64:bf:
f6:8e:1a:38:a9:34:28:be:57:da:4c:1c:ac:c1:43:
54:ac:c9:55:6b:e0:ed:58:e8:29:fc:81:6e:f8:da:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:40:24:C4:8F:65:31:DE:E6:C8:C0:DE:56:EB:56:87:FA:E6:02
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:27:88:1c:e6:74:66:78:5c:44:c6:02:1b:f4:b6:d4:c1:5c:
38:94:5c:f5:5e:51:b0:9f:6c:4e:07:b1:d5:f5:f6:65:ce:ce:
fa:1f:66:8f:f3:29:2d:8f:ed:29:04:fc:fb:7d:ca:21:d0:f9:
cb:b2:8d:2e:2e:6f:97:d8:94:a2:af:ad:d2:d5:ad:83:40:f2:
e7:b2:83:bd:ee:10:57:0e:72:90:34:43:a9:be:45:1d:bb:4a:
ac:84:73:66:1b:3b:d5:b2:d5:09:30:52:1b:8b:90:2d:f3:d5:
6d:6f:13:19:54:05:93:13:18:ad:cf:a4:94:a8:de:95:28:c9:
ce:3a:b2:90:d5:15:3a:2a:3e:a9:82:7c:f6:90:cb:18:63:3f:
59:03:84:37:5e:4a:da:8f:ba:ef:5d:b9:1f:c7:bb:13:5d:42:
40:7b:52:f4:aa:ff:05:49:a7:7d:bc:d6:3c:44:1a:ed:48:99:
5d:de:3d:9c:9e:fa:62:cd:a3:0d:d3:00:46:79:f6:b6:fc:a9:
d6:69:69:2b:99:2e:bd:ba:f4:0e:28:1b:b6:3d:67:ad:0e:7d:
0f:28:b8:93:00:84:f2:59:19:20:eb:57:67:3c:db:a4:8c:8b:
ad:b7:3e:fb:11:7d:59:38:08:f2:f3:9c:fd:65:32:89:26:a2:
02:57:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:23 2026 by rpki-client