Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.mft
File: 7bKno-y66qV0GCMdsLYkq797pkU.mft (raw, json)
Hash identifier: NYaLy3+L0VJuCaiToAhh2YJW41QzbjobKOlQWRDXkfU=
Subject key identifier: 64:BF:05:48:E7:68:52:1F:0A:B0:7D:C8:5D:B1:4A:EB:BF:B9:17:96
Authority key identifier: ED:B2:A7:A3:EC:BA:EA:A5:74:18:23:1D:B0:B6:24:AB:BF:7B:A6:45
Certificate issuer: /CN=edb2a7a3ecbaeaa57418231db0b624abbf7ba645
Certificate serial: 019F23591B18A35BAAB46CC588DEF1B000FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bKno-y66qV0GCMdsLYkq797pkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.mft
Manifest number: 1989
Signing time: Thu 02 Jul 2026 15:01:09 +0000
Manifest this update: Thu 02 Jul 2026 15:01:09 +0000
Manifest next update: Fri 03 Jul 2026 15:01:09 +0000
Files and hashes: 1: 7bKno-y66qV0GCMdsLYkq797pkU.crl (hash: W+y9NFg6spvnttYLhMzDMnLDsHZtL0lbVkrXVaoSoNQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:59:1b:18:a3:5b:aa:b4:6c:c5:88:de:f1:b0:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb2a7a3ecbaeaa57418231db0b624abbf7ba645
Validity
Not Before: Jul 2 15:01:09 2026 GMT
Not After : Jul 3 15:01:09 2026 GMT
Subject: CN=64bf0548e768521f0ab07dc85db14aebbfb91796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:96:5e:3f:85:1c:b5:3d:d8:d8:2a:51:71:
bc:1f:24:fc:49:f8:f3:cf:95:f5:5b:b8:18:dc:b8:
04:63:67:f8:c6:88:18:d4:e7:eb:5f:ff:49:ef:24:
d0:3c:50:e8:64:91:76:c5:b8:46:1c:ef:f3:90:48:
8a:26:4a:c1:a7:28:2d:78:f0:d1:dd:88:ef:2e:ff:
c6:f1:34:0d:bb:28:15:36:d7:f0:e3:83:53:1e:6a:
38:ed:d1:2d:5e:9d:43:30:16:c4:a3:26:a9:31:7d:
18:1f:74:a7:7f:e6:0b:f8:5b:47:6d:2f:e0:d2:3a:
e4:c2:a6:d6:80:1a:d4:b9:bb:5a:3d:e3:aa:1e:93:
fb:2d:2d:3a:05:1e:35:51:2e:d2:cb:c0:14:4e:5f:
78:c8:01:ce:62:29:63:9a:33:3a:7a:c5:71:63:17:
ad:7e:91:e0:75:82:c3:7b:66:78:bb:0e:b5:7b:9a:
cf:16:5e:8b:ad:0c:76:d7:6b:4b:b3:5e:59:bc:21:
14:b5:b7:84:9b:65:96:3e:d0:1f:aa:47:dc:d5:26:
d3:1f:73:98:53:0e:f4:f7:31:ea:85:78:43:37:8a:
d5:f8:7d:a9:26:57:5e:1e:a3:61:c2:e3:86:a5:b0:
4e:7f:05:52:e7:cf:42:a3:2e:8a:00:5f:47:7c:08:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BF:05:48:E7:68:52:1F:0A:B0:7D:C8:5D:B1:4A:EB:BF:B9:17:96
X509v3 Authority Key Identifier:
keyid:ED:B2:A7:A3:EC:BA:EA:A5:74:18:23:1D:B0:B6:24:AB:BF:7B:A6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bKno-y66qV0GCMdsLYkq797pkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/43ed1c-ff50-42e0-b7d4-af254ce3fe69/1/7bKno-y66qV0GCMdsLYkq797pkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f7:11:de:89:69:ff:79:ef:97:b0:ae:67:18:f6:c7:29:a7:
a4:3a:16:4f:ec:92:c2:b2:f5:57:81:f2:dd:5a:a1:e1:08:24:
5d:56:44:f9:e1:c4:41:57:37:b8:1e:08:39:0a:d2:26:70:b2:
93:56:7d:56:3c:82:a2:e7:bd:66:3b:79:3a:00:96:52:8c:02:
ea:59:9b:cc:04:b8:11:73:00:6b:36:3c:35:b9:f2:7f:3e:18:
33:43:4d:55:87:e3:24:5f:89:7b:fa:cd:eb:bf:14:8e:ac:c1:
d1:a9:42:e5:00:32:67:4d:49:9b:af:b9:1f:54:83:8e:09:7f:
2a:4b:9b:ed:c3:21:27:d8:55:2d:98:38:8b:91:11:2f:74:72:
9c:96:9d:74:06:00:c9:2d:7c:db:3e:94:3d:b4:05:62:81:7e:
81:ce:3c:12:48:d6:63:74:ac:de:91:71:48:d5:6b:ac:1f:85:
da:9e:99:54:95:92:5b:74:72:07:80:0b:05:d0:55:ca:59:60:
04:06:1d:35:17:e6:d5:8a:37:e6:57:1c:9f:57:02:8f:4a:67:
7e:a8:57:7d:e5:b5:a8:3a:f3:0b:bb:8d:09:90:9b:56:28:b1:
42:95:8d:a3:56:39:e7:75:db:13:6d:c5:26:f1:f5:5e:f4:c5:
a9:b0:8a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jWRsYo1uqtGzFiN7xsAD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjJhN2EzZWNiYWVhYTU3NDE4MjMxZGIwYjYyNGFiYmY3
YmE2NDUwHhcNMjYwNzAyMTUwMTA5WhcNMjYwNzAzMTUwMTA5WjAzMTEwLwYDVQQD
Eyg2NGJmMDU0OGU3Njg1MjFmMGFiMDdkYzg1ZGIxNGFlYmJmYjkxNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCWXj+FHLU92NgqUXG8HyT8Sfjz
z5X1W7gY3LgEY2f4xogY1OfrX/9J7yTQPFDoZJF2xbhGHO/zkEiKJkrBpygtePDR
3YjvLv/G8TQNuygVNtfw44NTHmo47dEtXp1DMBbEoyapMX0YH3Snf+YL+FtHbS/g
0jrkwqbWgBrUubtaPeOqHpP7LS06BR41US7Sy8AUTl94yAHOYiljmjM6esVxYxet
fpHgdYLDe2Z4uw61e5rPFl6LrQx212tLs15ZvCEUtbeEm2WWPtAfqkfc1SbTH3OY
Uw709zHqhXhDN4rV+H2pJldeHqNhwuOGpbBOfwVS589Coy6KAF9HfAjd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS/BUjnaFIfCrB9yF2xSuu/uReWMB8GA1UdIwQY
MBaAFO2yp6PsuuqldBgjHbC2JKu/e6ZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JLbm8teTY2cVYwR0NNZHNMWWtxNzk3cGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80M2VkMWMtZmY1MC00MmUwLWI3ZDQt
YWYyNTRjZTNmZTY5LzEvN2JLbm8teTY2cVYwR0NNZHNMWWtxNzk3cGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80M2VkMWMtZmY1MC00MmUwLWI3ZDQtYWYyNTRjZTNmZTY5
LzEvN2JLbm8teTY2cVYwR0NNZHNMWWtxNzk3cGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvcR3olp
/3nvl7CuZxj2xymnpDoWT+ySwrL1V4Hy3Vqh4QgkXVZE+eHEQVc3uB4IOQrSJnCy
k1Z9VjyCoue9Zjt5OgCWUowC6lmbzAS4EXMAazY8Nbnyfz4YM0NNVYfjJF+Je/rN
678UjqzB0alC5QAyZ01Jm6+5H1SDjgl/Kkub7cMhJ9hVLZg4i5ERL3RynJaddAYA
yS182z6UPbQFYoF+gc48EkjWY3Ss3pFxSNVrrB+F2p6ZVJWSW3RyB4ALBdBVyllg
BAYdNRfm1Yo35lccn1cCj0pnfqhXfeW1qDrzC7uNCZCbViixQpWNo1Y553XbE23F
JvH1XvTFqbCKIw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:26 2026 by rpki-client