Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: w7rZr3QUBtthTQnyGl2oQYDgqf9vhe1PgtH93dBNSWI=
Subject key identifier: E2:57:68:D2:DF:1B:66:26:87:5F:88:93:98:A4:09:FB:8F:A7:CB:3E
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019EFCB98C005BD76CB2B207771FE53DDDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 05CD
Signing time: Thu 25 Jun 2026 03:01:18 +0000
Manifest this update: Thu 25 Jun 2026 03:01:18 +0000
Manifest next update: Fri 26 Jun 2026 03:01:18 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: PuOvBAVLL4TPVDqytg0kR8DwGMjOyQYIWOZ8O7X1bIM=)
2: OfoBCzmtnFm0hwGR9A2PXWfAk1I.roa (hash: ayIedPzOzNkrSBeiWSMs33csQjbzHkEQVrKoALTU/M0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:b9:8c:00:5b:d7:6c:b2:b2:07:77:1f:e5:3d:dd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Jun 25 03:01:18 2026 GMT
Not After : Jun 26 03:01:18 2026 GMT
Subject: CN=e25768d2df1b6626875f889398a409fb8fa7cb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:7e:56:e7:c4:fc:c8:c7:21:c4:d2:e9:c0:
31:97:c3:e1:b4:08:cd:1e:c2:85:37:56:20:72:16:
8f:2d:e3:f7:86:9f:a2:2f:6b:bf:ac:c0:ce:99:47:
fe:b7:41:52:8a:f0:89:24:6f:92:83:62:bd:b1:08:
50:3a:8b:2f:62:bb:e7:74:5e:5d:21:16:09:53:64:
f1:0e:ca:d4:13:20:54:76:9f:9b:60:e1:27:06:88:
0b:22:40:d7:12:f2:d1:b7:c3:8d:f8:bb:0b:25:26:
fb:d6:12:26:b3:de:b5:32:be:fc:05:24:39:16:00:
03:09:e3:a2:d5:38:0d:1a:ea:a7:51:eb:79:14:0f:
bb:de:62:e5:4d:17:30:0a:52:c4:bd:69:01:0a:fb:
0c:55:b6:06:df:09:b3:07:ac:29:57:09:77:f1:0d:
7f:f6:6d:ca:16:7f:d4:bc:e5:26:5b:14:31:96:57:
69:0e:47:5b:31:58:54:6a:bb:81:77:fd:ce:09:0b:
41:4f:05:11:8c:e9:39:f1:b5:df:1c:97:18:51:8e:
75:e8:43:f2:49:21:12:20:3f:c6:c2:99:1b:dd:7b:
1c:a9:14:f7:c2:55:f9:8c:be:2b:0d:e6:d9:bb:3e:
79:67:5e:5f:45:48:35:49:20:df:ee:ca:35:5b:19:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:68:D2:DF:1B:66:26:87:5F:88:93:98:A4:09:FB:8F:A7:CB:3E
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:8d:de:4a:e8:7a:bc:93:24:92:78:f1:4b:80:ef:14:57:
7e:cb:91:72:f6:67:44:1a:85:a1:4c:26:df:19:21:0e:3c:73:
f5:c8:6e:5f:db:60:5d:7c:05:c7:de:63:95:ee:99:3c:b2:9a:
4e:d1:70:93:c9:02:4d:e9:56:56:2d:40:e7:2c:44:b8:fc:30:
fe:d8:9d:44:b5:85:04:d7:6f:70:42:46:94:83:dd:f6:c5:9b:
f6:c7:89:b9:f6:d1:4f:c9:0f:ca:8a:13:3d:7e:ae:22:10:88:
d5:9e:06:9d:4d:95:b7:2d:e3:06:9a:02:0c:b1:8b:a4:d6:b2:
33:c7:15:e5:61:cd:5f:3e:89:aa:6b:9d:6c:0b:ab:90:41:1c:
99:34:18:68:45:54:bd:aa:91:1e:57:15:6a:80:bf:7a:43:1f:
57:bf:57:46:b4:d8:81:91:49:f9:98:eb:9f:09:7c:a5:e2:c5:
ce:eb:6f:4a:94:0d:b0:a8:a5:34:ff:a8:19:a4:ee:70:92:65:
ba:37:af:71:dd:68:c5:37:2e:1f:66:0b:d0:92:84:90:9c:13:
63:0c:77:16:3b:ee:7d:e9:54:2b:c8:a5:fd:b1:10:3d:48:25:
c8:dc:20:91:8f:5c:b1:cd:1b:60:95:46:01:18:b1:62:92:8d:
a2:ef:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:55 2026 by rpki-client