Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: bkESjaBQA51gCG2H/hnOUTCIxLGS3zAymSsbqfQXByc=
Subject key identifier: DA:07:61:97:53:F7:03:62:C2:EF:EC:4B:5E:C5:CA:2B:7E:64:1D:1B
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019F23698064B923F3CA07F5C9C3D755EAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 0812
Signing time: Thu 02 Jul 2026 15:19:04 +0000
Manifest this update: Thu 02 Jul 2026 15:19:04 +0000
Manifest next update: Fri 03 Jul 2026 15:19:04 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: +e2FlEet5CtLoHPgb2nevKxipwhw22TNHGqZ2N+IhFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:80:64:b9:23:f3:ca:07:f5:c9:c3:d7:55:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Jul 2 15:19:04 2026 GMT
Not After : Jul 3 15:19:04 2026 GMT
Subject: CN=da07619753f70362c2efec4b5ec5ca2b7e641d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:0d:ff:a7:ad:07:63:fb:55:5e:be:e8:e3:
7f:cd:5d:82:d0:52:af:1c:bd:be:7b:d3:f2:14:2e:
44:fc:88:0e:1c:10:95:81:55:b5:f8:c2:1b:cf:38:
7b:fe:9e:b1:bc:d2:a3:11:8a:6f:25:33:38:2b:0a:
13:d3:b4:92:eb:58:7c:ed:e2:29:0f:01:37:b0:7e:
00:20:44:db:1d:6b:8d:57:57:ad:8a:43:48:9b:8c:
b3:15:1d:38:f0:a8:6b:06:f9:82:bb:dc:aa:89:8a:
d7:6b:df:3c:e4:a8:63:7c:44:64:b2:31:92:1b:5f:
5d:1f:bd:13:08:f2:93:ca:bb:38:51:73:68:36:8a:
42:26:37:c3:1a:e2:e4:7a:c6:7d:ed:a1:95:40:f9:
3f:b6:a2:a6:b6:a5:cb:96:4f:c8:c0:b4:73:0d:57:
2a:bf:7c:9f:8f:3b:fe:0f:5f:79:c7:89:ee:ee:8c:
53:9e:d1:c3:ca:61:4b:20:6d:94:a3:4b:87:2d:4b:
de:4e:fe:e4:b2:19:57:41:68:8a:f9:29:3a:75:ec:
30:5f:b0:93:ab:32:2b:6b:85:82:f3:a1:20:8f:cf:
98:86:68:bb:36:1d:3b:a1:7a:1a:7a:9d:52:26:7d:
e4:05:35:4b:50:f3:00:9f:9c:a4:64:6c:e0:cb:8f:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:61:97:53:F7:03:62:C2:EF:EC:4B:5E:C5:CA:2B:7E:64:1D:1B
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5d:9a:8c:74:6d:3f:6d:cb:b4:f0:ab:6b:45:67:72:74:9d:
f5:b2:35:64:89:17:6f:0c:c6:52:cd:5f:d1:ce:64:2a:6a:d7:
95:2b:1f:19:09:d2:6e:ed:84:db:fb:da:e5:14:3b:d8:51:a1:
e2:df:66:fd:04:43:d1:d7:11:b6:83:f3:29:7a:e5:78:8a:90:
81:04:71:c7:c3:c2:d4:87:b2:0b:74:a7:d3:9e:0f:86:2b:eb:
46:14:6a:5e:ea:cf:3c:86:42:34:b4:ad:af:49:af:af:17:f8:
07:f4:53:b3:d5:43:e8:9b:e6:30:60:46:ca:14:1b:2c:a9:15:
f6:4a:d6:85:b5:cf:97:6f:3d:3e:05:11:43:59:a8:80:83:02:
5b:95:53:a7:8c:e3:c2:86:db:87:0d:91:f0:17:4a:0a:4f:5a:
9b:63:7a:99:71:20:0d:0c:88:5f:b6:ec:ff:1d:75:4b:1c:d3:
c2:03:e1:83:69:5a:08:a8:c1:2d:0d:f5:9f:3f:f8:ec:c2:10:
9e:5c:33:7f:68:2c:92:16:41:1a:dc:22:30:c6:ea:ee:01:16:
50:43:12:c0:6b:95:f7:8a:c3:26:d4:c3:ca:70:12:7b:79:39:
82:bd:0f:1a:9d:19:3e:e3:19:63:db:d4:a3:43:6f:ef:18:e3:
9d:eb:81:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaYBkuSPzygf1ycPXVeqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj
ODNjZjQwHhcNMjYwNzAyMTUxOTA0WhcNMjYwNzAzMTUxOTA0WjAzMTEwLwYDVQQD
EyhkYTA3NjE5NzUzZjcwMzYyYzJlZmVjNGI1ZWM1Y2EyYjdlNjQxZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndsN/6etB2P7VV6+6ON/zV2C0FKv
HL2+e9PyFC5E/IgOHBCVgVW1+MIbzzh7/p6xvNKjEYpvJTM4KwoT07SS61h87eIp
DwE3sH4AIETbHWuNV1etikNIm4yzFR048KhrBvmCu9yqiYrXa9885KhjfERksjGS
G19dH70TCPKTyrs4UXNoNopCJjfDGuLkesZ97aGVQPk/tqKmtqXLlk/IwLRzDVcq
v3yfjzv+D195x4nu7oxTntHDymFLIG2Uo0uHLUveTv7kshlXQWiK+Sk6dewwX7CT
qzIra4WC86Egj8+Yhmi7Nh07oXoaep1SJn3kBTVLUPMAn5ykZGzgy48K9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoHYZdT9wNiwu/sS17Fyit+ZB0bMB8GA1UdIwQY
MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt
OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj
LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp12ajHRt
P23LtPCra0VncnSd9bI1ZIkXbwzGUs1f0c5kKmrXlSsfGQnSbu2E2/va5RQ72FGh
4t9m/QRD0dcRtoPzKXrleIqQgQRxx8PC1IeyC3Sn054PhivrRhRqXurPPIZCNLSt
r0mvrxf4B/RTs9VD6JvmMGBGyhQbLKkV9krWhbXPl289PgURQ1mogIMCW5VTp4zj
wobbhw2R8BdKCk9am2N6mXEgDQyIX7bs/x11SxzTwgPhg2laCKjBLQ31nz/47MIQ
nlwzf2gskhZBGtwiMMbq7gEWUEMSwGuV94rDJtTDynASe3k5gr0PGp0ZPuMZY9vU
o0Nv7xjjneuBfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:56 2026 by rpki-client