Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
File: 2O6Q00LYZepn8rDS-3TAOfg-Skg.mft (raw, json)
Hash identifier: M6Orraibb2fKQDeVkoCV6HshPCDy04swnW7ySeF0u18=
Subject key identifier: 6C:89:DD:59:63:07:27:19:02:03:42:AB:96:04:7A:C8:1C:1D:44:23
Authority key identifier: D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
Certificate issuer: /CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Certificate serial: 019F236A1DC62032B6FB9B7D0AF405C06094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
Manifest number: 06B1
Signing time: Thu 02 Jul 2026 15:19:44 +0000
Manifest this update: Thu 02 Jul 2026 15:19:44 +0000
Manifest next update: Fri 03 Jul 2026 15:19:44 +0000
Files and hashes: 1: 2O6Q00LYZepn8rDS-3TAOfg-Skg.crl (hash: 0O+J1LL6VaUmQ7XILzRzkuDcNyl+kf7fD9JGtrbQprM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:1d:c6:20:32:b6:fb:9b:7d:0a:f4:05:c0:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ee90d342d865ea67f2b0d2fb74c039f83e4a48
Validity
Not Before: Jul 2 15:19:44 2026 GMT
Not After : Jul 3 15:19:44 2026 GMT
Subject: CN=6c89dd5963072719020342ab96047ac81c1d4423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:7b:3e:d9:05:37:f9:d2:2b:2e:88:c3:8b:
5c:da:48:0f:2f:5c:bd:e9:27:ac:89:b4:80:c6:27:
fd:c4:86:fc:c9:b1:34:52:80:9a:82:17:b2:b7:e8:
80:cb:4c:ef:d1:6a:dd:3b:dd:a0:00:d7:06:e1:07:
cb:f4:8c:ba:2c:03:00:1e:c1:14:2c:ae:08:39:34:
60:69:d8:9b:02:5b:9f:68:f6:26:e7:24:c2:ce:8c:
40:b7:d3:2b:1f:ed:8c:ab:a0:94:07:e4:72:2e:9d:
00:08:01:c0:45:b9:9d:6c:27:b0:96:cc:a0:52:fa:
36:d4:82:af:6c:a6:fc:61:e5:bb:0a:b5:8b:aa:b6:
15:00:cd:b0:f8:cf:78:3b:64:a5:3c:b0:80:3d:c7:
5c:69:bf:69:7e:d4:90:00:64:17:b7:17:72:07:25:
e9:ee:46:87:da:90:88:cc:e5:a9:35:18:e4:c5:e6:
38:d7:ae:b3:b9:65:d0:a5:03:83:0d:a3:b3:c8:2c:
ce:2b:d5:4d:1e:f9:c4:42:ce:b7:e0:12:dd:05:46:
5d:b5:8b:63:2a:a8:d9:f9:45:ab:c1:cd:28:41:c7:
39:bb:18:93:59:df:32:00:f0:06:cd:39:79:02:d7:
2e:eb:fe:f4:8d:82:a4:54:ed:d2:3b:f5:a1:3b:d1:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:DD:59:63:07:27:19:02:03:42:AB:96:04:7A:C8:1C:1D:44:23
X509v3 Authority Key Identifier:
keyid:D8:EE:90:D3:42:D8:65:EA:67:F2:B0:D2:FB:74:C0:39:F8:3E:4A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6Q00LYZepn8rDS-3TAOfg-Skg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cf5c10-2131-4116-b6f9-510525c4744c/1/2O6Q00LYZepn8rDS-3TAOfg-Skg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fc:31:c9:6f:b7:43:31:94:12:fd:54:b2:b4:b6:51:6c:23:
03:49:1b:77:c3:3f:9b:8c:f7:a1:ab:dd:f2:f0:0d:3b:bb:90:
3c:cf:e3:42:07:56:89:a0:03:33:89:f2:62:fe:40:48:80:f8:
a0:85:de:96:3f:0f:ec:73:5f:64:74:3a:fc:9c:95:65:bc:a2:
76:a7:86:0c:ef:50:d6:07:fb:93:54:7c:72:ec:af:a6:8f:fd:
55:86:71:1a:ea:23:66:6e:31:8b:b9:57:a0:9c:3e:8a:6f:11:
41:28:f7:fb:94:43:6d:3d:8e:89:73:00:dd:69:9d:f4:16:aa:
7d:1e:8d:be:4d:ac:9a:45:b2:71:b2:6c:30:16:0c:84:17:b5:
48:db:35:3e:11:e9:68:4a:ce:1d:ad:2c:ac:79:6b:e9:68:6e:
0a:bf:4a:da:2b:66:44:bc:ae:9b:13:c7:89:fa:ac:81:e6:51:
a0:bc:17:4f:58:1a:64:ff:29:0e:2b:d5:35:52:20:8b:d7:b3:
69:8f:c9:57:40:4f:a9:e6:50:90:b2:6a:e5:bb:02:69:e3:e2:
4c:0d:ae:12:93:21:9d:14:2c:72:ff:99:16:0e:13:ba:81:12:
46:27:a1:28:44:30:ac:a9:aa:3a:c7:59:62:87:e6:23:63:f1:
ed:19:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:11 2026 by rpki-client