
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: tuut1tMJlpbJLCkQnGvEuXc4+qz+NMfEEp1TizUONsQ=
Subject key identifier: 4B:1B:6D:07:61:A0:64:1F:89:7D:5A:47:05:AB:EE:9F:D4:B0:38:FA
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 019F2247DF3EA4C22283C563CB6E48568AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 1308
Signing time: Thu 02 Jul 2026 10:02:42 +0000
Manifest this update: Thu 02 Jul 2026 10:02:42 +0000
Manifest next update: Fri 03 Jul 2026 10:02:42 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: 29sbtxjo1t4DWR75wRmnXuhj81AiFZzcFh8RQFwS65E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:df:3e:a4:c2:22:83:c5:63:cb:6e:48:56:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Jul 2 10:02:42 2026 GMT
Not After : Jul 3 10:02:42 2026 GMT
Subject: CN=4b1b6d0761a0641f897d5a4705abee9fd4b038fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:26:3f:ae:86:cc:cb:8f:ce:f2:e0:66:08:
46:0b:5b:15:73:9d:b9:b7:a0:a5:d9:21:ae:2c:d3:
96:36:f4:71:a5:c8:4f:57:e6:f3:cf:40:b5:08:c7:
8d:5f:75:d0:f2:1f:d5:be:9d:6b:81:af:f1:30:e7:
b4:e5:39:d7:df:a4:a3:c8:8f:f0:dc:a3:e0:cb:9a:
c6:bb:fc:ac:54:88:87:1c:b3:03:1d:34:95:84:74:
ff:36:1c:1a:9c:ac:2f:51:e5:72:5c:3e:2e:7a:0a:
d0:a3:80:0e:05:eb:c2:80:7a:c1:ae:bf:f5:01:ec:
0b:f1:ed:ae:59:00:4c:a4:3c:56:61:0e:54:12:9d:
6e:a2:70:83:36:5b:f7:37:90:96:2d:d3:0d:c0:dd:
08:65:49:93:8c:10:d9:c2:0b:9b:63:37:de:d0:21:
cb:00:2d:85:67:5e:f9:1e:90:60:e8:56:00:93:0f:
2d:72:4e:3d:db:2e:d7:1e:e2:18:23:d3:31:68:44:
60:77:40:69:8c:2b:63:82:56:ca:68:f2:17:14:61:
8b:b6:2a:dd:74:eb:63:41:a8:4b:ce:20:d3:38:03:
49:2e:0f:1f:b9:c4:5d:4e:83:98:cd:1c:0e:04:62:
8c:1c:7a:a5:b6:b6:f6:37:69:e1:db:f2:0f:a6:7a:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:6D:07:61:A0:64:1F:89:7D:5A:47:05:AB:EE:9F:D4:B0:38:FA
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:28:79:00:f7:c2:7c:70:af:fe:81:9d:65:75:e8:4b:55:4b:
8e:c8:6f:2a:e5:63:69:cb:f0:d3:b9:37:f3:36:2e:98:6a:f3:
dd:f1:aa:d9:2a:2a:1d:a2:3e:61:89:5d:64:0d:12:14:00:1c:
c5:c8:d2:83:61:50:a9:1f:7c:46:41:72:bb:b4:41:12:3a:68:
14:c0:d3:5c:e3:0f:3b:09:ad:1d:d7:53:fd:ae:fe:69:64:34:
d3:a4:60:f4:49:53:1e:84:cb:7b:cc:a0:d3:3f:70:a9:ff:15:
8f:c0:c5:36:8f:44:0f:08:ed:fb:9d:a8:2f:63:6a:75:18:ec:
20:c6:d5:38:ae:c0:18:f2:fb:2e:3d:14:e4:2f:9b:bd:28:f5:
c2:87:2e:64:c2:8d:11:e3:d2:11:08:71:11:9d:48:fd:1e:2d:
15:0d:f4:d6:80:d9:c6:fa:a5:0b:06:76:14:51:18:fe:2f:f5:
a1:9e:90:5e:28:49:b3:04:88:cf:05:c6:ea:ad:42:b2:de:38:
13:c3:01:3b:33:f7:5d:f5:5a:ce:bf:6c:1d:2a:54:da:d1:f7:
ae:88:66:3c:bb:3b:16:8a:f2:de:05:ea:bf:03:8a:4f:79:dd:
50:a5:be:89:bc:a9:0e:cc:9e:84:82:bb:9e:b8:a9:cf:7b:ba:
a5:54:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:49:22 2026 by rpki-client