Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: 4MyuJrCuXI36Tay8Dznx3QtWmXXKKlKEG25QJOFjqis=
Subject key identifier: 0E:62:3F:B6:F9:28:E3:D2:D6:6C:39:6D:1C:C7:42:3B:CE:1C:68:14
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 019F2369F8C3C56BB29238192AF295258862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 1999
Signing time: Thu 02 Jul 2026 15:19:35 +0000
Manifest this update: Thu 02 Jul 2026 15:19:35 +0000
Manifest next update: Fri 03 Jul 2026 15:19:35 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: suM79afqU1p6qLlnGiZyrRvIcDNlcYTgf3fvwrcYbmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:f8:c3:c5:6b:b2:92:38:19:2a:f2:95:25:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jul 2 15:19:35 2026 GMT
Not After : Jul 3 15:19:35 2026 GMT
Subject: CN=0e623fb6f928e3d2d66c396d1cc7423bce1c6814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:9d:e1:42:c1:24:b2:97:5b:4b:f3:0a:cc:
e4:42:ba:1f:4e:10:de:35:65:9d:d1:62:e3:98:42:
3a:1c:00:7f:ab:41:25:98:0d:3b:20:b9:df:9b:80:
ac:b6:6d:5c:f5:62:25:df:53:36:5a:bc:a3:b5:bb:
89:19:24:33:b7:17:4c:30:aa:e6:01:47:00:97:c5:
21:37:e5:4e:e9:36:7b:77:34:a6:cb:57:7d:30:88:
42:8c:f3:37:42:c0:00:76:cf:ba:93:b7:9c:db:81:
35:07:2a:ef:2e:93:cd:96:0d:a0:97:34:d2:d4:f1:
90:05:49:42:64:66:38:a8:7c:53:22:95:ae:3e:34:
25:cb:4e:0c:5a:df:96:b5:02:a5:db:9c:00:f1:cc:
8b:28:bf:8e:89:23:ec:9f:9b:83:94:58:08:a9:55:
10:99:28:c1:95:29:cb:80:68:20:fa:0a:f6:80:b4:
f2:03:dc:3b:b7:49:d4:2c:ec:a4:78:ad:a0:33:12:
8f:2e:97:d3:cb:01:57:1b:34:50:08:ff:99:44:f5:
10:9a:57:9c:3e:ea:65:04:28:d7:16:3f:86:8f:a5:
f1:fc:40:17:eb:55:fe:fd:90:31:fa:58:a5:a3:9e:
7f:c3:66:30:47:3f:f7:94:87:65:3b:19:9b:85:2e:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:3F:B6:F9:28:E3:D2:D6:6C:39:6D:1C:C7:42:3B:CE:1C:68:14
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0f:4e:d9:0a:ad:50:5c:09:f2:3b:68:20:9a:58:8c:7c:b6:
fa:cb:e7:89:05:59:c1:78:96:e7:f3:c2:66:fa:4d:94:0a:d6:
82:29:21:57:aa:0b:e4:a0:87:3e:a3:35:a7:8f:68:d5:06:6e:
b5:1f:dc:73:5f:fb:34:56:21:c6:5a:cb:b3:15:cc:a4:8b:2d:
47:0c:82:83:f5:75:db:5b:50:44:8d:27:52:2b:ac:87:35:71:
be:10:a4:15:0a:f4:11:34:76:29:9b:e2:fa:e4:b3:2c:58:b6:
c3:ae:94:cd:dd:1b:e6:a4:25:6e:c3:d8:20:55:65:f0:16:63:
5c:1e:93:f4:0f:f9:b1:30:de:2e:64:4c:f1:16:26:6f:20:0e:
f0:dd:c1:49:77:f3:92:07:65:6c:b1:f1:96:ef:4b:03:e4:7d:
42:22:34:b6:66:bd:b6:12:38:26:ca:8f:0e:84:70:04:fb:eb:
af:87:3c:25:eb:6f:05:00:b8:94:2d:b2:95:09:e6:52:31:6d:
6c:35:61:21:2b:32:6b:cc:14:16:d4:33:28:ee:49:d1:0e:79:
48:60:5d:f1:8a:21:21:b4:67:b9:74:01:f4:00:23:98:69:ba:
c3:72:66:88:db:48:2b:9b:1f:a3:ae:52:80:c7:27:03:e4:9d:
97:45:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:35 2026 by rpki-client