Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
File: YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json)
Hash identifier: 2UF0rjW8zR3kswSMUHmHz4WvPeUQwHYEYwwdXrjkLjM=
Subject key identifier: E5:15:02:F1:11:1A:AC:2E:3C:A6:D3:B5:18:9D:E0:D0:42:DD:DA:F3
Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
Certificate issuer: /CN=633333d71526f533b1c1cf0be9fc321b623396d3
Certificate serial: 019BBAA9E08E07D157B3E57B9AD2F54C56B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
Manifest number: 085E
Signing time: Wed 14 Jan 2026 04:00:53 +0000
Manifest this update: Wed 14 Jan 2026 04:00:53 +0000
Manifest next update: Thu 15 Jan 2026 04:00:53 +0000
Files and hashes: 1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: 1DYtq/eF61Xmloc56c/8iwLWTBU3ZVGUsJstGT+bAuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ba:a9:e0:8e:07:d1:57:b3:e5:7b:9a:d2:f5:4c:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3
Validity
Not Before: Jan 14 04:00:53 2026 GMT
Not After : Jan 15 04:00:53 2026 GMT
Subject: CN=e51502f1111aac2e3ca6d3b5189de0d042dddaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:09:74:d9:0c:28:f9:9a:ee:3a:1a:28:45:
23:d0:25:0b:60:80:13:4d:a9:88:b0:d9:ab:9b:43:
3c:09:db:47:b0:44:b0:fa:70:e7:83:9c:ab:5d:64:
bc:0d:d8:74:0d:4b:4c:6e:aa:01:12:32:8a:4b:27:
56:b1:5b:42:a3:eb:d9:d6:9d:a2:42:93:c4:03:98:
c3:38:f0:61:49:a0:02:2f:3c:3f:cb:e2:d6:0a:c6:
03:c0:5e:52:e6:4b:c9:07:e3:b6:20:f0:a6:fb:b2:
3d:37:40:53:c3:fd:4a:72:5a:37:85:63:86:85:a7:
2c:51:bf:f0:fe:ef:f0:ea:53:df:fc:30:23:5c:23:
48:5c:34:56:a2:a3:c9:71:fa:8d:a4:23:a2:00:16:
df:98:36:ba:29:e5:04:fd:b8:92:5c:f9:93:50:db:
b2:4d:ff:0c:f1:c4:d2:42:ab:6c:13:cb:7e:31:f7:
5d:c8:29:04:e9:34:75:e3:cd:ee:7b:1a:66:88:6a:
73:8e:19:68:43:9a:13:b8:26:49:40:5a:ef:97:0e:
85:a0:38:6f:c0:0e:a6:14:22:cc:2e:ee:22:c6:b7:
13:98:3a:e0:e9:14:aa:8b:40:7a:6b:1d:28:02:56:
26:32:b9:a4:25:b2:0f:f4:74:bc:f4:bb:78:f5:c2:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:02:F1:11:1A:AC:2E:3C:A6:D3:B5:18:9D:E0:D0:42:DD:DA:F3
X509v3 Authority Key Identifier:
keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0b:8d:dd:41:6f:fc:de:78:8a:4b:0a:79:f5:a9:05:a0:c3:
25:9f:fd:e0:2b:3d:46:c7:97:95:1f:11:60:5a:42:bc:ed:94:
09:aa:61:8d:27:cc:94:51:ea:5c:0a:d5:e8:15:ec:41:d5:b1:
c7:58:ba:73:24:87:ee:ff:ed:9d:7e:0f:b7:a5:a2:fa:c6:14:
9a:cb:d9:00:de:a1:51:cc:e8:0a:4f:2a:e4:a0:f1:42:b1:b5:
d4:e3:d3:3b:5a:38:90:9a:17:60:d7:e7:4b:89:fb:15:3e:49:
b6:3b:d0:27:14:67:47:28:52:6a:01:73:8f:63:87:8f:5d:c5:
a4:27:fb:a2:ad:57:ed:70:45:ce:c7:6b:2e:a0:67:22:20:15:
9f:f0:78:96:9f:72:23:5a:bf:40:50:28:37:67:c5:50:ce:e3:
cc:ee:bb:dc:60:36:f7:6f:ae:c6:67:f2:e5:05:89:2c:2e:07:
8c:3e:73:72:8e:be:fb:d7:f7:46:13:d7:f0:97:6c:27:71:db:
34:94:68:dd:5c:b7:48:40:0d:95:03:ce:c5:4f:5d:07:f5:e2:
cd:e7:9c:ed:51:86:b4:b2:e1:5d:1f:55:03:77:de:34:2d:7b:
34:fc:32:54:b4:a6:fd:8b:d5:39:d4:0e:88:20:bb:73:5d:63:
2b:0a:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:39 2026 by rpki-client