Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: uFLPiooObcE1ADz5E7USaK1F+F8X5p7HSLA8KLVdbjk=
Subject key identifier: 45:07:AC:C0:E1:5C:CD:4E:27:18:B7:5C:84:3A:44:A9:1D:33:7D:E1
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019F2369B3479BCDA09751386D76907E3433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 179C
Signing time: Thu 02 Jul 2026 15:19:17 +0000
Manifest this update: Thu 02 Jul 2026 15:19:17 +0000
Manifest next update: Fri 03 Jul 2026 15:19:17 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: B56v2wQ9Fmd553RS2f/OZSrAqIVeFCfkju0ZQRiTEAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:b3:47:9b:cd:a0:97:51:38:6d:76:90:7e:34:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Jul 2 15:19:17 2026 GMT
Not After : Jul 3 15:19:17 2026 GMT
Subject: CN=4507acc0e15ccd4e2718b75c843a44a91d337de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:53:29:00:7e:d4:4f:78:be:4d:d9:52:7a:
d9:d6:82:fb:be:da:ec:69:33:21:27:a3:11:fc:73:
f4:4b:ef:6a:6d:f7:d9:32:3f:fa:c6:2e:c9:1d:aa:
13:19:13:60:03:3f:ce:7d:af:d9:2b:8a:db:a1:1f:
17:09:4b:8b:bb:aa:2b:6c:50:40:9c:21:ec:53:e7:
cf:79:96:5a:b4:5a:c6:33:ff:ec:09:69:d3:f6:a2:
4e:20:b0:43:c4:a8:dc:26:60:c0:79:a4:c4:17:07:
54:4e:2d:1e:5e:ff:8d:25:ab:27:3d:d2:b9:8f:b1:
dc:18:72:d2:cb:c7:a0:ea:d8:d8:8a:17:21:3c:c4:
7f:08:8d:6a:49:64:9f:e9:3a:df:9a:4e:64:e3:e5:
40:3e:02:b2:c8:4a:57:e5:79:ec:c6:5a:c4:e8:a7:
3f:a7:01:ef:d1:49:28:bf:a4:2f:67:61:a9:e1:98:
50:5c:5b:42:18:07:a9:49:90:0e:0f:29:7d:12:45:
a0:77:b6:3d:db:19:50:2e:68:c8:e4:50:7c:d4:a0:
fb:55:7a:2a:64:a1:cd:9d:47:9d:92:d1:88:75:b0:
57:48:cc:63:42:4a:0d:8f:14:43:27:68:6b:52:8b:
bc:a5:91:df:b3:36:01:be:04:34:88:f0:16:6d:68:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:AC:C0:E1:5C:CD:4E:27:18:B7:5C:84:3A:44:A9:1D:33:7D:E1
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5e:76:30:77:a9:f4:30:3f:4b:e7:10:80:07:a8:32:fc:86:
1c:d5:9a:be:fb:bd:c2:4c:01:c6:a0:ba:73:44:68:83:20:6b:
19:26:41:9b:66:92:f8:dd:68:16:0c:7b:e3:95:2d:10:4d:cc:
6d:f9:66:00:fb:2e:72:b9:8f:28:78:6d:78:95:b6:15:99:da:
35:84:bd:74:10:24:74:bb:34:9c:28:71:2c:1d:72:08:0b:d5:
60:1a:01:80:b6:cd:f6:7e:1c:a4:c7:b2:4f:cd:25:c6:73:99:
48:90:bf:63:e0:0b:43:5e:5f:64:34:38:a4:d4:84:59:8f:6e:
d6:e7:b6:45:83:66:69:25:e3:86:46:73:99:ff:2d:72:c3:67:
54:ef:c6:10:12:7c:81:2c:c2:91:be:0b:85:c2:dd:76:58:e5:
9c:4e:52:e1:d3:28:20:1e:65:a8:8e:bf:1b:28:af:85:6c:72:
16:7c:54:90:58:be:ae:6c:b2:73:a4:23:a0:dd:30:08:d8:06:
2b:c4:69:b8:35:d0:7a:a6:d3:2b:2f:aa:56:4c:17:d4:ce:10:
b8:fb:51:fa:62:74:76:a0:f6:ea:29:46:9d:f3:e6:c7:e0:64:
c1:e6:cd:76:ae:ec:75:32:7a:f9:e0:40:33:62:b5:22:52:9b:
15:2c:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:33 2026 by rpki-client