Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
File: 2DLajUWISdX0C6bwuSCPhYXZ4j4.mft (raw, json)
Hash identifier: y4fn/vpQTnFM9GX3eOr5BdZDOiJW8+eS8056EELdW34=
Subject key identifier: B9:EA:25:B9:63:16:4D:6D:6C:9E:75:FD:F2:A8:EE:75:3E:37:6E:D6
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 019F236A20C1185A2317193B23307844B72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
Manifest number: 198E
Signing time: Thu 02 Jul 2026 15:19:45 +0000
Manifest this update: Thu 02 Jul 2026 15:19:45 +0000
Manifest next update: Fri 03 Jul 2026 15:19:45 +0000
Files and hashes: 1: 2DLajUWISdX0C6bwuSCPhYXZ4j4.crl (hash: dfd4dG12FplTwoh8CHn8tswgbZEK3SJDFLTlsUQxjxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:20:c1:18:5a:23:17:19:3b:23:30:78:44:b7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Jul 2 15:19:45 2026 GMT
Not After : Jul 3 15:19:45 2026 GMT
Subject: CN=b9ea25b963164d6d6c9e75fdf2a8ee753e376ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:9a:71:12:f1:78:c7:ad:28:1a:92:be:92:
b1:c0:c5:3d:8b:ec:da:4b:25:60:b9:18:d6:1e:c9:
be:d5:80:a8:c6:07:19:a4:71:3a:4c:9a:3c:4a:4d:
ac:c0:81:ce:1b:53:c1:fd:6c:e4:0b:2c:36:88:bf:
b1:f1:0f:23:73:8c:88:6d:7c:12:61:16:e0:a5:84:
e8:6c:bf:c7:3d:9c:14:3f:03:17:50:5a:60:25:c2:
fa:20:46:38:eb:2d:5d:39:39:34:ac:51:b8:48:3d:
c4:be:28:88:b4:c6:2b:d5:01:a3:81:cf:6f:50:0e:
29:33:aa:26:c1:13:03:2f:f9:08:f4:a4:48:cf:9d:
3a:6e:3c:09:e5:29:8c:8b:8f:05:de:71:cb:65:5e:
26:40:16:79:d2:7a:e8:8c:bd:dd:f2:b0:70:b8:52:
18:ca:ab:0b:43:ca:01:0c:23:ad:f8:92:8e:08:63:
8a:b1:e0:24:c4:f9:87:94:c7:7c:7a:29:31:65:b3:
11:21:a0:39:54:96:e9:e7:b2:8b:79:b5:dc:c7:6f:
7e:b8:43:2a:9a:23:21:e2:61:83:ad:f8:69:51:fb:
cc:5b:3d:9e:5a:be:bc:89:06:01:7e:f0:3f:bc:e0:
e2:b9:6e:44:9e:b7:b4:9c:85:3e:7d:06:f7:dc:6d:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:25:B9:63:16:4D:6D:6C:9E:75:FD:F2:A8:EE:75:3E:37:6E:D6
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:50:e2:6a:ad:ff:6d:a3:c1:42:c8:5f:22:c8:19:3b:59:b1:
14:92:88:58:fc:92:13:62:12:ed:8a:3f:b4:49:6c:3d:b8:85:
cb:30:15:69:3f:00:25:ba:4c:1d:d6:e1:ad:90:a2:f3:f8:ea:
2c:13:5c:bb:d4:57:1b:df:7a:e7:82:f9:ea:b7:5e:1d:f9:cf:
9a:ac:a9:dd:67:72:86:e8:43:37:c5:5e:d2:70:1d:40:78:f9:
e7:57:a6:c1:77:a3:b4:fa:0a:29:da:91:4a:ed:a2:10:4e:5a:
16:48:7c:f9:00:ff:24:fb:f3:13:f9:ec:ba:e1:89:fa:fb:63:
24:ba:14:44:d4:ac:6a:49:9e:92:14:78:39:c2:91:40:5b:32:
fa:25:20:cd:bb:2a:44:8f:a8:c9:d2:0a:45:d5:2f:9a:93:3b:
db:31:5c:1f:f7:9d:53:9b:c9:04:7b:74:00:c0:52:b6:6b:77:
5b:38:16:34:81:14:9d:67:7c:8e:95:6c:9d:09:00:7d:39:88:
07:af:6a:44:bb:2c:a2:ca:30:7c:b0:cf:da:44:cb:c8:86:ad:
92:73:98:54:08:ef:4d:c6:67:01:a6:c1:e5:b5:22:47:35:ca:
cc:05:08:38:fb:59:46:c6:76:c1:2f:4d:37:64:9a:36:83:d7:
e4:e4:cb:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaiDBGFojFxk7IzB4RLctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzJkYThkNDU4ODQ5ZDVmNDBiYTZmMGI5MjA4Zjg1ODVk
OWUyM2UwHhcNMjYwNzAyMTUxOTQ1WhcNMjYwNzAzMTUxOTQ1WjAzMTEwLwYDVQQD
EyhiOWVhMjViOTYzMTY0ZDZkNmM5ZTc1ZmRmMmE4ZWU3NTNlMzc2ZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2yacRLxeMetKBqSvpKxwMU9i+za
SyVguRjWHsm+1YCoxgcZpHE6TJo8Sk2swIHOG1PB/WzkCyw2iL+x8Q8jc4yIbXwS
YRbgpYTobL/HPZwUPwMXUFpgJcL6IEY46y1dOTk0rFG4SD3EviiItMYr1QGjgc9v
UA4pM6omwRMDL/kI9KRIz506bjwJ5SmMi48F3nHLZV4mQBZ50nrojL3d8rBwuFIY
yqsLQ8oBDCOt+JKOCGOKseAkxPmHlMd8eikxZbMRIaA5VJbp57KLebXcx29+uEMq
miMh4mGDrfhpUfvMWz2eWr68iQYBfvA/vODiuW5Enre0nIU+fQb33G1DFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnqJbljFk1tbJ51/fKo7nU+N27WMB8GA1UdIwQY
MBaAFNgy2o1FiEnV9Aum8Lkgj4WF2eI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYt
Yzk5Nzk1ZjM4ODVmLzEvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZDIxZWUtYTQ2MC00YzM5LTllNmYtYzk5Nzk1ZjM4ODVm
LzEvMkRMYWpVV0lTZFgwQzZid3VTQ1BoWVhaNGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1Diaq3/
baPBQshfIsgZO1mxFJKIWPySE2IS7Yo/tElsPbiFyzAVaT8AJbpMHdbhrZCi8/jq
LBNcu9RXG99654L56rdeHfnPmqyp3WdyhuhDN8Ve0nAdQHj551emwXejtPoKKdqR
Su2iEE5aFkh8+QD/JPvzE/nsuuGJ+vtjJLoURNSsakmekhR4OcKRQFsy+iUgzbsq
RI+oydIKRdUvmpM72zFcH/edU5vJBHt0AMBStmt3WzgWNIEUnWd8jpVsnQkAfTmI
B69qRLssosowfLDP2kTLyIatknOYVAjvTcZnAabB5bUiRzXKzAUIOPtZRsZ2wS9N
N2SaNoPX5OTLjQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:36 2026 by rpki-client