Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: Gmm2BWjt8p3GFFskG/Y9c2RbUAYsdowgMDS4aJmSqsg=
Subject key identifier: C1:FC:44:13:D2:1C:69:40:60:F7:AD:B5:54:3E:02:9B:20:AC:D6:67
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019F236A3EDEA2345A85128F8DAC8350D0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1630
Signing time: Thu 02 Jul 2026 15:19:52 +0000
Manifest this update: Thu 02 Jul 2026 15:19:52 +0000
Manifest next update: Fri 03 Jul 2026 15:19:52 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: /cF98csptH5YKJ1idsQGnC/fkewcV5Q22i8zypOS1Dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:3e:de:a2:34:5a:85:12:8f:8d:ac:83:50:d0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jul 2 15:19:52 2026 GMT
Not After : Jul 3 15:19:52 2026 GMT
Subject: CN=c1fc4413d21c694060f7adb5543e029b20acd667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:79:9f:b8:b2:ff:9f:da:7b:4f:43:76:d2:
56:9e:68:35:a3:db:1f:f0:63:b8:44:ec:92:c2:87:
f9:0d:71:30:57:7b:03:d2:b9:02:a4:6c:6f:b0:36:
fb:02:d0:27:01:0e:1a:b5:91:21:62:79:f9:86:7f:
a1:9f:87:e2:7f:43:30:64:b8:80:dc:6d:21:f6:5c:
a4:d0:9a:bb:99:87:b4:eb:4e:73:dd:e6:87:28:3b:
b9:01:fc:f3:3c:ec:9c:cc:cb:f2:a0:f0:a9:11:33:
76:b6:9e:8f:51:e2:c5:d7:48:2c:ff:0d:d6:d2:97:
c7:a5:ff:a8:ce:5b:cf:18:79:e6:d8:e9:05:4c:98:
12:cb:33:9d:57:41:5a:7f:24:da:66:ac:6b:f4:4e:
af:95:47:53:7d:6b:0d:f3:c9:74:bd:fa:88:60:89:
06:2c:3c:77:7f:3e:fc:5d:42:0f:d5:bc:48:75:31:
ab:82:56:60:b2:04:ca:98:3c:86:6b:aa:18:46:bb:
dd:79:eb:55:fa:1d:97:cb:ea:59:26:97:7e:08:b1:
98:2e:21:85:4a:69:d0:a0:81:40:99:ed:70:b8:21:
72:dd:62:b8:e9:21:58:12:1f:d4:4b:f7:51:18:50:
35:b6:40:9d:ad:ec:de:bb:a7:c9:c8:a7:87:5a:d7:
74:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:44:13:D2:1C:69:40:60:F7:AD:B5:54:3E:02:9B:20:AC:D6:67
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:2a:a2:66:a4:93:85:4e:37:cd:d9:22:34:d0:b7:d8:75:
cf:93:04:4d:c3:b2:f6:b4:97:34:b0:9c:ba:af:ba:9e:9f:7b:
bf:19:14:ca:06:58:4b:3f:c5:33:d9:59:08:b8:d3:04:23:af:
7c:c9:d8:86:43:d2:67:c3:51:ed:45:23:66:35:e6:8a:11:59:
cc:e6:b0:d2:8a:30:91:89:72:9c:fc:e0:d1:ea:0f:6c:a2:cd:
51:29:78:8e:bb:30:70:38:81:cb:7f:22:ef:4a:2e:d2:1b:dc:
d7:2a:21:8a:8a:f1:7a:f3:93:16:a2:de:6b:eb:19:02:5b:57:
0a:af:64:7e:19:b6:72:ad:96:40:7c:06:b6:6a:5c:7f:f5:5b:
8e:ae:55:1b:22:2b:00:00:4c:d7:86:cc:04:95:ec:45:d1:ee:
b4:99:e5:80:64:08:5a:1b:26:d8:22:51:3a:65:cc:0f:79:1a:
5f:72:17:02:e8:a7:b8:d1:46:3e:d5:94:d6:db:10:49:1b:84:
06:89:d8:96:85:f2:ee:82:53:d5:59:8b:45:d8:27:1d:4d:ef:
84:e7:c1:e8:43:fc:61:21:ee:63:99:b6:0e:a2:d1:17:17:ee:
44:65:99:56:1b:61:24:2d:47:69:97:3d:76:85:f3:bf:b4:be:
4c:5c:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:05:52 2026 by rpki-client