Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: ykLgdiwiIC+TLuBWmIU2gSVp0PMaMt2WvFm3MhAArEk=
Subject key identifier: E2:4E:7C:7D:64:FF:34:20:66:3E:41:C5:76:CE:37:C4:95:0C:C5:E1
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019F88330018404D0EDF9F32CEBD855413E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 099C
Signing time: Wed 22 Jul 2026 05:01:11 +0000
Manifest this update: Wed 22 Jul 2026 05:01:11 +0000
Manifest next update: Thu 23 Jul 2026 05:01:11 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: mphFS3aErp7WA351uPYMU60BAxQPQzE1AyoVaQxCzsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:33:00:18:40:4d:0e:df:9f:32:ce:bd:85:54:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Jul 22 05:01:11 2026 GMT
Not After : Jul 23 05:01:11 2026 GMT
Subject: CN=e24e7c7d64ff3420663e41c576ce37c4950cc5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:92:2a:1b:5f:0f:1c:b8:5a:5a:0a:6a:4e:
a7:19:75:08:9e:be:c7:10:1e:8b:f2:91:1e:10:0e:
b0:45:77:1b:d5:9a:81:16:fa:8f:b9:ee:a6:12:35:
c8:76:ea:d5:e4:f7:20:a0:52:0f:98:ad:ed:be:06:
53:be:c0:31:9f:5a:b2:26:59:d0:34:5e:30:69:be:
a3:75:75:04:90:41:06:fb:ba:17:e8:a5:f6:5a:21:
a8:21:c1:62:9c:32:f9:14:89:0c:e2:7d:d8:8f:c0:
71:29:ca:5e:3e:93:f2:8e:73:39:4a:24:cc:c9:cf:
01:e9:60:c2:ee:e8:18:13:7c:af:27:0b:a2:79:14:
9d:60:eb:cd:4a:2c:74:9a:c8:6e:56:f8:24:6a:95:
06:84:d8:10:b9:1a:6f:9c:33:9d:7a:b1:3a:bd:15:
9f:89:fd:cc:c6:c6:7a:9e:b4:c7:cc:f2:60:e8:05:
69:2c:89:7d:bd:8b:11:15:10:98:db:47:b4:a5:86:
04:2d:4c:c4:ea:0c:4f:43:1e:46:d7:7e:84:6b:25:
db:8f:5a:c8:76:77:7e:cd:2c:9b:93:99:51:ee:cf:
0b:59:36:b4:fe:6c:cc:df:49:f9:ac:f9:57:09:30:
a5:68:4f:16:31:c2:2f:93:69:90:ad:6d:1c:09:2c:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:7C:7D:64:FF:34:20:66:3E:41:C5:76:CE:37:C4:95:0C:C5:E1
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e5:a0:92:fe:4c:b9:7b:94:28:6b:ff:37:3b:f4:e7:df:59:
d6:0e:65:6d:49:fe:76:cb:e1:32:b6:8e:a7:a4:d4:b6:57:19:
df:f2:ac:07:16:5c:10:e2:e5:fe:39:63:79:53:aa:bd:3c:30:
9d:70:4c:1c:89:c2:7b:64:41:37:19:20:8f:4d:ed:ca:24:a7:
e5:c4:be:3b:28:bf:9d:26:be:e8:c1:22:36:0a:ef:c0:cd:9a:
56:45:a4:a6:00:b4:43:67:65:1e:39:98:32:14:d5:9d:6a:f6:
1d:9b:7a:e3:f3:1d:20:09:56:20:19:5b:09:53:6b:60:ec:ed:
8e:14:28:6a:0e:95:f3:7b:33:a6:8e:38:9f:71:cc:c2:12:b6:
24:3d:49:b9:09:d8:30:a2:5f:8f:dc:f8:12:9b:ee:e2:41:b0:
8b:ab:83:fc:58:a4:7e:1f:6c:d4:fc:fa:69:53:5c:79:fb:dd:
0a:c3:1b:64:22:22:40:29:3c:bc:eb:2e:9f:66:44:b6:c3:c4:
16:d3:79:55:7e:fb:3b:59:a6:61:40:4c:33:03:37:fa:6b:61:
26:2d:5f:36:98:e9:88:2f:ff:ef:f7:a7:6d:d8:f2:0e:a5:38:
35:3e:9f:11:65:b9:c5:91:47:41:d7:f3:19:9c:c3:32:10:fc:
42:71:9b:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+IMwAYQE0O358yzr2FVBPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4
NjU3OWEwHhcNMjYwNzIyMDUwMTExWhcNMjYwNzIzMDUwMTExWjAzMTEwLwYDVQQD
EyhlMjRlN2M3ZDY0ZmYzNDIwNjYzZTQxYzU3NmNlMzdjNDk1MGNjNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6SSKhtfDxy4WloKak6nGXUInr7H
EB6L8pEeEA6wRXcb1ZqBFvqPue6mEjXIdurV5PcgoFIPmK3tvgZTvsAxn1qyJlnQ
NF4wab6jdXUEkEEG+7oX6KX2WiGoIcFinDL5FIkM4n3Yj8BxKcpePpPyjnM5SiTM
yc8B6WDC7ugYE3yvJwuieRSdYOvNSix0mshuVvgkapUGhNgQuRpvnDOderE6vRWf
if3MxsZ6nrTHzPJg6AVpLIl9vYsRFRCY20e0pYYELUzE6gxPQx5G136EayXbj1rI
dnd+zSybk5lR7s8LWTa0/mzM30n5rPlXCTClaE8WMcIvk2mQrW0cCSyVwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJOfH1k/zQgZj5BxXbON8SVDMXhMB8GA1UdIwQY
MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt
NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4
LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOWgkv5M
uXuUKGv/Nzv0599Z1g5lbUn+dsvhMraOp6TUtlcZ3/KsBxZcEOLl/jljeVOqvTww
nXBMHInCe2RBNxkgj03tyiSn5cS+Oyi/nSa+6MEiNgrvwM2aVkWkpgC0Q2dlHjmY
MhTVnWr2HZt64/MdIAlWIBlbCVNrYOztjhQoag6V83szpo44n3HMwhK2JD1JuQnY
MKJfj9z4Epvu4kGwi6uD/Fikfh9s1Pz6aVNcefvdCsMbZCIiQCk8vOsun2ZEtsPE
FtN5VX77O1mmYUBMMwM3+mthJi1fNpjpiC//7/enbdjyDqU4NT6fEWW5xZFHQdfz
GZzDMhD8QnGbAg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:12 2026 by rpki-client