Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: 44E9+YkEgqb5NBonxgYt4tagkXL2r0wX1DH+FXBzJXU=
Subject key identifier: D2:CB:F6:56:1A:9A:46:7B:11:60:C9:D3:CF:3D:BA:E7:23:80:FC:E3
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 019C017A11D242A12A36760074F2EAD90411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 084C
Signing time: Tue 27 Jan 2026 22:01:42 +0000
Manifest this update: Tue 27 Jan 2026 22:01:42 +0000
Manifest next update: Wed 28 Jan 2026 22:01:42 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: 3viGZ3qnLo6N+IhkQg6hVOV5cbZnL55YX12GyDOwsdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:01:7a:11:d2:42:a1:2a:36:76:00:74:f2:ea:d9:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Jan 27 22:01:42 2026 GMT
Not After : Jan 28 22:01:42 2026 GMT
Subject: CN=d2cbf6561a9a467b1160c9d3cf3dbae72380fce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:23:d1:a4:06:a5:17:d6:05:e7:3d:fd:c3:
8d:e3:16:5b:7a:e8:84:46:d4:3c:b0:29:66:8a:a7:
bb:f2:1d:c1:ac:16:18:ac:32:6d:58:46:68:17:fb:
92:a7:c5:ea:52:d9:64:9c:be:6a:53:9d:93:ae:4e:
0e:31:04:22:ad:c2:fc:1a:50:46:12:88:04:db:0c:
fc:6f:3a:e7:94:3c:4a:f5:55:fb:72:6b:3d:0a:58:
3b:0f:65:4d:07:0a:76:6a:7f:4d:bd:ee:08:d1:ee:
09:e1:d4:41:c0:7f:69:80:f6:87:d3:d4:04:5f:3e:
2d:d5:5a:40:37:94:20:08:e7:ad:b4:f8:4e:9f:f4:
5f:3d:9a:cb:1b:84:29:06:42:39:61:b4:e7:d9:8a:
7a:7c:de:f6:11:0f:cb:b6:10:13:0f:83:d5:3b:ce:
cc:3a:44:b4:cf:a9:52:41:f2:fc:1a:56:06:f9:ed:
1f:78:3d:0e:ac:93:d6:05:f6:35:43:de:fa:4f:69:
8e:f6:f5:82:28:80:32:be:fb:8b:7a:32:c3:71:39:
9b:80:ab:8b:05:71:48:2e:19:e1:10:15:89:52:9b:
21:8d:d0:d0:c7:c0:a4:6c:7b:64:0b:91:a0:8d:35:
2a:0e:bd:c3:61:20:02:74:64:51:e6:58:6d:6f:4f:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:F6:56:1A:9A:46:7B:11:60:C9:D3:CF:3D:BA:E7:23:80:FC:E3
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:10:27:ae:f8:43:14:b6:6a:1b:24:2b:55:a9:e9:02:67:c9:
e7:12:b7:0b:3f:ce:19:78:8b:0e:f2:d4:47:04:e6:18:0f:87:
5a:0a:a2:31:94:c9:22:6d:8a:6e:6e:49:b7:f1:c7:1d:a6:11:
c1:df:22:cc:5a:1f:f7:f5:d9:fd:b8:34:4a:3a:3a:e7:f6:98:
7e:64:db:0a:1a:ab:ad:65:6d:ec:66:8b:be:fe:50:79:0f:e6:
ce:e4:38:ac:8a:2b:fe:2c:43:7e:2a:ce:62:7a:8d:a9:2f:eb:
13:46:5f:ff:5a:9f:7a:e5:16:7b:46:8b:01:6c:9e:aa:64:1e:
cb:22:a7:80:c3:8d:07:37:2d:c5:88:7c:b6:b6:20:42:99:aa:
09:4a:ea:cb:3c:7f:7a:8d:d8:73:18:56:d4:cc:18:fa:d5:0c:
33:f7:01:ca:92:82:1b:87:19:4b:1b:55:d5:f8:6b:26:ff:82:
cc:4b:a4:77:93:14:8e:e2:49:57:bd:91:53:ec:47:39:91:aa:
3e:5a:21:46:6e:f5:45:c2:6b:7f:fd:9e:59:97:00:e3:cd:1d:
fb:0f:86:5d:c2:5f:7d:11:a2:1a:da:49:b0:6a:cc:35:18:f3:
6a:83:3c:dc:3a:96:ef:8a:ab:ad:ed:27:da:97:f5:c5:8b:0c:
94:17:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:12 2026 by rpki-client