Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File: 0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier: Zj6XbwNAUkJABtPkNPz6yUgm4dM6iKUbH6FuXMPCTD8=
Subject key identifier: CE:81:CF:AA:83:78:76:E2:36:01:2E:CB:B6:96:D3:91:70:51:41:61
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer: /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial: 019F2369F86642FAD79FD78A1417831E5920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number: 0AC1
Signing time: Thu 02 Jul 2026 15:19:35 +0000
Manifest this update: Thu 02 Jul 2026 15:19:35 +0000
Manifest next update: Fri 03 Jul 2026 15:19:35 +0000
Files and hashes: 1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: 7o55lSZRTc2M17rVS8ZELOy2LxBSZYMYB1h7xRLfFQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:f8:66:42:fa:d7:9f:d7:8a:14:17:83:1e:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Validity
Not Before: Jul 2 15:19:35 2026 GMT
Not After : Jul 3 15:19:35 2026 GMT
Subject: CN=ce81cfaa837876e236012ecbb696d39170514161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:07:78:51:3f:44:b6:1a:0b:5d:f7:bf:46:
da:0b:76:01:60:e9:c5:93:71:28:e0:1c:0c:7e:82:
3c:87:36:d7:52:65:37:0b:2c:3a:0c:41:48:db:c2:
39:42:cd:6a:35:f6:fb:48:1d:3a:7a:3f:f2:82:aa:
57:7d:b8:68:c0:47:1e:d9:25:45:6e:6c:18:58:3c:
b8:e5:6d:ab:db:7a:d0:de:05:68:54:3b:77:23:3e:
3f:55:da:90:cb:d5:f3:1d:a4:99:0a:d4:13:92:b8:
f9:c0:99:11:b4:71:56:c4:bc:77:7f:34:05:28:86:
81:be:ef:b4:d1:19:86:a7:98:bd:57:69:fd:c3:bc:
95:ec:c9:4d:cd:ca:b6:9b:d1:1c:9c:8d:e8:b9:0a:
38:dc:02:f5:b2:22:0d:c5:d6:fb:e9:50:70:c7:7a:
a7:b9:92:f8:6b:f5:0b:96:10:ed:12:56:c5:1f:c0:
67:ef:10:83:35:28:6f:02:ce:12:d7:b0:8e:00:78:
5d:46:8c:9b:d3:00:d1:50:47:d2:6e:da:47:cf:ca:
37:ea:34:24:88:cb:78:02:5f:d8:a7:97:f8:a8:d4:
eb:5f:ad:9f:b2:59:5a:05:08:c2:c8:c3:7f:20:f7:
48:64:4f:ec:3c:22:3f:af:52:2e:63:d6:ab:c7:b2:
fc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:CF:AA:83:78:76:E2:36:01:2E:CB:B6:96:D3:91:70:51:41:61
X509v3 Authority Key Identifier:
keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:c7:b8:70:f9:0c:8b:25:61:8c:a1:fe:38:de:a1:a7:6b:0b:
55:c9:39:d7:95:44:32:c5:f4:d0:9c:a7:7c:8f:e0:fe:95:a2:
c6:13:6a:ee:e0:31:7c:c1:f0:5d:6d:32:04:dc:da:22:56:80:
f7:3a:2f:48:51:a9:bb:df:15:db:27:8e:b9:b0:19:a7:ee:f9:
65:29:ac:92:21:41:13:47:6b:ec:e9:1e:d3:ec:ca:26:6e:13:
b9:00:70:88:b7:71:50:07:32:5c:1d:2b:97:5b:9d:c8:01:2a:
b6:31:bd:d8:cf:2a:13:a8:1e:85:f2:60:31:a0:a5:cb:e6:36:
87:ca:f5:3a:11:21:65:5d:6a:78:dd:82:f5:64:76:c9:8e:15:
51:42:13:c8:01:a5:6d:28:33:e0:7b:d6:46:f8:9a:da:0a:45:
f6:9f:93:db:53:20:6c:53:95:19:bb:b6:41:f1:75:3a:b9:14:
76:0d:af:84:26:88:3a:6c:4c:d0:d3:8b:81:7d:94:96:9f:be:
3a:5b:19:c0:a9:d3:8b:e3:c6:47:36:48:7c:15:9c:24:90:a8:
fd:f1:67:21:d9:af:aa:6d:32:36:a7:bb:06:0f:c7:a2:46:f9:
80:c5:a9:c3:7d:d7:e6:8b:ff:bf:db:bd:30:a6:0e:e2:03:30:
18:8b:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:46 2026 by rpki-client