Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier: uBPXFCdOjEG1yecCydqVuqp1XAgNpTWeQXhy6Vtt0c0=
Subject key identifier: 88:92:ED:36:C0:89:16:7D:1D:3E:BD:B5:CE:41:57:2E:48:BB:6D:62
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial: 019F2369FC73ADEA6132262ACA04E3A51C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number: 198D
Signing time: Thu 02 Jul 2026 15:19:36 +0000
Manifest this update: Thu 02 Jul 2026 15:19:36 +0000
Manifest next update: Fri 03 Jul 2026 15:19:36 +0000
Files and hashes: 1: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: TiF+p5W3ZAefc76u16hXCmjZAZPMZVrwhNCRMs3nY2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:fc:73:ad:ea:61:32:26:2a:ca:04:e3:a5:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Validity
Not Before: Jul 2 15:19:36 2026 GMT
Not After : Jul 3 15:19:36 2026 GMT
Subject: CN=8892ed36c089167d1d3ebdb5ce41572e48bb6d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:04:63:ea:0e:d1:38:bc:f2:7d:bd:8e:a6:
c9:9f:f9:c0:bc:03:19:f4:05:01:8b:06:4e:83:31:
52:88:60:12:ee:b1:0e:90:d1:ad:88:11:c3:2d:99:
23:0a:23:c3:45:37:f7:2b:85:36:2a:0f:9b:7d:14:
c5:78:ca:5e:5b:5f:e8:9b:2f:fb:b7:ad:d0:13:11:
7f:75:9e:78:8b:20:98:e4:67:33:92:df:67:43:e0:
f1:57:be:d8:72:ba:b0:d7:52:ae:fc:77:2b:62:ad:
d3:4e:16:23:32:d1:d5:83:3e:19:ab:a6:7c:c0:34:
9f:96:d9:e0:c1:f7:e5:1a:f1:83:b3:6b:da:a0:03:
63:6f:91:61:b3:93:eb:ff:cf:bb:a1:fe:df:24:35:
1d:be:ae:cf:d7:fb:e9:ac:82:be:c7:f7:d1:ab:e9:
1e:09:40:c3:f0:24:bd:4a:25:3c:37:e2:6b:84:2b:
f4:a7:aa:89:b3:81:e9:78:35:33:0e:b9:2a:40:ec:
19:43:60:f4:66:53:50:e2:78:62:ab:44:5d:34:69:
b2:19:da:12:d1:ff:7c:5c:f0:7b:79:89:68:4e:96:
ed:2b:78:aa:bb:e1:8e:4f:0d:fd:43:36:c5:18:c3:
08:53:25:48:eb:34:93:38:c4:7e:5b:0a:08:95:2c:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:ED:36:C0:89:16:7D:1D:3E:BD:B5:CE:41:57:2E:48:BB:6D:62
X509v3 Authority Key Identifier:
keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6d:b8:03:0a:2e:37:f5:65:03:13:14:cb:73:ed:0b:43:79:
32:fa:d2:0c:38:40:0d:f4:f7:f4:74:d1:e1:6c:15:8b:b8:d7:
76:19:6b:27:7f:fd:55:76:43:9d:b4:97:2d:3a:b0:f1:22:a7:
84:46:1d:c6:4c:6a:46:23:b0:bc:d2:18:c0:e5:ce:64:5b:34:
ad:21:03:57:9f:1f:27:a1:b0:d8:0f:fb:48:4c:2e:ab:29:bb:
85:6d:5f:04:81:9f:97:4f:86:e4:79:08:3b:c4:02:4b:3b:83:
71:e4:f8:0c:50:4e:3c:fc:92:b5:6b:27:dc:27:6c:45:7b:07:
e6:0e:78:9a:bc:05:a6:32:67:1f:6c:66:ba:6b:42:90:7f:4a:
5e:cf:ec:2a:2e:92:5e:c8:64:e5:28:7e:f1:58:e5:66:9c:33:
94:2b:db:2f:82:a6:db:d0:89:68:74:37:8b:d0:fd:a4:3d:c7:
b8:c1:68:94:ec:2d:67:67:8d:97:21:9a:de:8d:4f:57:3d:f4:
46:c4:08:00:ee:28:18:b5:29:3a:d9:bf:dc:8e:1f:d4:8b:c2:
94:40:aa:e6:79:18:4c:48:23:b0:b8:6e:cd:d0:29:a0:86:3a:
8f:9b:d2:60:ff:fc:d3:dc:32:1b:fa:d6:43:a9:8b:59:45:9c:
2e:06:52:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jafxzrephMiYqygTjpRxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk
ZTExNWMwHhcNMjYwNzAyMTUxOTM2WhcNMjYwNzAzMTUxOTM2WjAzMTEwLwYDVQQD
Eyg4ODkyZWQzNmMwODkxNjdkMWQzZWJkYjVjZTQxNTcyZTQ4YmI2ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F4EY+oO0Ti88n29jqbJn/nAvAMZ
9AUBiwZOgzFSiGAS7rEOkNGtiBHDLZkjCiPDRTf3K4U2Kg+bfRTFeMpeW1/omy/7
t63QExF/dZ54iyCY5Gczkt9nQ+DxV77Ycrqw11Ku/HcrYq3TThYjMtHVgz4Zq6Z8
wDSfltngwfflGvGDs2vaoANjb5Fhs5Pr/8+7of7fJDUdvq7P1/vprIK+x/fRq+ke
CUDD8CS9SiU8N+JrhCv0p6qJs4HpeDUzDrkqQOwZQ2D0ZlNQ4nhiq0RdNGmyGdoS
0f98XPB7eYloTpbtK3iqu+GOTw39QzbFGMMIUyVI6zSTOMR+WwoIlSzRlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiS7TbAiRZ9HT69tc5BVy5Iu21iMB8GA1UdIwQY
MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt
ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5
LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF224Awou
N/VlAxMUy3PtC0N5MvrSDDhADfT39HTR4WwVi7jXdhlrJ3/9VXZDnbSXLTqw8SKn
hEYdxkxqRiOwvNIYwOXOZFs0rSEDV58fJ6Gw2A/7SEwuqym7hW1fBIGfl0+G5HkI
O8QCSzuDceT4DFBOPPyStWsn3CdsRXsH5g54mrwFpjJnH2xmumtCkH9KXs/sKi6S
Xshk5Sh+8VjlZpwzlCvbL4Km29CJaHQ3i9D9pD3HuMFolOwtZ2eNlyGa3o1PVz30
RsQIAO4oGLUpOtm/3I4f1IvClECq5nkYTEgjsLhuzdApoIY6j5vSYP/809wyG/rW
Q6mLWUWcLgZSPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:55 2026 by rpki-client