Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: ANSB2/1uoi6xYBIQEO/NbAuqLzZ6S1EFuRXN0YLU41U=
Subject key identifier: 65:2A:A9:22:B1:CF:D0:33:3B:E4:77:39:70:5E:AC:80:12:23:1A:01
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019F236A02F8D390925E4E1ED32962FDB313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 1012
Signing time: Thu 02 Jul 2026 15:19:37 +0000
Manifest this update: Thu 02 Jul 2026 15:19:37 +0000
Manifest next update: Fri 03 Jul 2026 15:19:37 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: AHf1hlKkSHH8NVoZ6V9r4sp84S9zTfRy2UEzTbyU8z8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:02:f8:d3:90:92:5e:4e:1e:d3:29:62:fd:b3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jul 2 15:19:37 2026 GMT
Not After : Jul 3 15:19:37 2026 GMT
Subject: CN=652aa922b1cfd0333be47739705eac8012231a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:80:f6:59:09:0e:62:ab:a9:55:e6:3c:3c:
bf:15:f4:d5:8a:56:3c:cb:2e:d4:48:8e:ac:ee:21:
c9:65:ab:23:21:4b:f0:96:14:19:7e:b7:3f:ca:58:
1e:8b:bd:cd:aa:a7:28:34:2e:5e:02:5f:e3:24:10:
63:5e:37:f7:d7:96:26:81:fd:fe:86:e5:7d:44:5d:
da:0d:74:5d:c1:26:8b:6a:da:e3:14:37:fb:2a:6f:
c1:16:08:2b:44:fb:d4:d2:99:e7:d9:d8:82:af:27:
7c:20:23:31:c0:5c:d3:2b:60:b9:47:d7:a7:40:5d:
28:f9:ae:6d:45:d0:17:d4:56:7e:08:75:c9:b8:a5:
1e:1a:a3:fe:13:b9:30:b7:9a:4a:06:b2:60:c2:5f:
55:dc:d0:a6:c9:4c:20:b1:e9:27:59:0e:12:b3:47:
cd:63:ec:cc:e1:1f:25:4a:6a:09:a5:a6:34:0d:b3:
c7:7b:c7:28:12:b0:d2:af:00:b0:b1:51:4d:47:a3:
1e:61:18:6d:7b:69:e0:9e:05:a7:26:41:37:70:74:
69:d5:f8:4e:00:ce:28:fd:3e:a6:c3:84:22:da:60:
de:f4:96:1f:9d:d7:75:f7:5d:fc:b0:64:63:6f:34:
7c:0e:8d:bc:f2:7d:fb:d2:9d:94:88:15:10:48:af:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2A:A9:22:B1:CF:D0:33:3B:E4:77:39:70:5E:AC:80:12:23:1A:01
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:99:3f:db:26:3a:b2:51:bd:ee:76:5b:11:49:fc:e1:17:cf:
ac:ae:82:8d:89:b7:68:74:9f:af:8a:4e:af:ca:ed:66:fc:9a:
a9:9a:1c:ff:d5:ef:12:87:08:72:c6:aa:48:06:de:0b:34:bd:
1b:d1:17:9e:19:7d:8b:e2:a0:97:95:a7:90:bd:16:27:1d:b2:
e0:dd:3f:60:61:71:21:2f:ce:74:8a:55:b1:e0:62:1b:3d:04:
12:05:1b:4f:1f:8b:85:73:47:8e:4b:5b:fa:35:a5:f9:42:19:
60:8d:af:fd:6a:87:88:f7:07:51:bf:81:57:5c:e0:ba:07:e8:
db:78:5a:f3:d2:6f:12:ea:f4:a2:d8:90:ac:d1:1a:07:97:02:
23:ab:ce:51:01:ee:19:48:9d:e9:9d:0d:24:ab:82:dd:5e:72:
e0:8b:27:d6:ae:f8:95:90:8e:8e:58:4f:e8:88:77:a1:26:7a:
f5:43:16:ce:a2:97:92:ec:36:4a:f8:07:02:9a:2c:18:77:72:
c9:40:3b:f9:71:85:1c:e3:40:18:f0:82:1f:0f:bc:1a:c4:63:
84:0a:d0:9b:f3:ff:ee:25:81:ee:93:bf:37:28:0b:fe:83:94:
08:ea:32:4d:1f:7c:7b:76:8b:07:87:d7:c2:99:30:f0:27:fd:
d2:9d:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:46 2026 by rpki-client