Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: sbDfp2P0S3LC2Ofgx2gms9LlvYWQoFbaIaeB8W9EXJs=
Subject key identifier: A5:39:8A:36:35:1F:4E:5C:A9:39:C0:20:11:7B:C4:B2:9C:3A:AE:BE
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 019F236A4EE733351530D5143739CAE1A542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 198D
Signing time: Thu 02 Jul 2026 15:19:57 +0000
Manifest this update: Thu 02 Jul 2026 15:19:57 +0000
Manifest next update: Fri 03 Jul 2026 15:19:57 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: Huv8parofvOz+A/B3eSs3cgjRctqFWH20z4P47N7Fxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:4e:e7:33:35:15:30:d5:14:37:39:ca:e1:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Jul 2 15:19:57 2026 GMT
Not After : Jul 3 15:19:57 2026 GMT
Subject: CN=a5398a36351f4e5ca939c020117bc4b29c3aaebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:11:40:9e:56:a4:54:f2:85:24:0b:15:d2:
ed:09:db:64:57:cb:19:b5:0c:8e:97:84:75:57:db:
7b:2a:36:07:c1:a7:f0:9a:98:05:32:93:b2:3e:84:
13:3d:2d:dc:a3:75:56:b2:61:0e:1f:8b:7a:26:8c:
7a:f2:bb:07:d8:68:83:ce:6d:95:9c:4c:7e:01:53:
39:e8:68:79:e1:3f:fa:c4:f4:40:da:66:25:5b:e5:
4a:a7:be:8d:4a:28:98:b7:45:ee:75:7e:1f:18:8f:
e9:c0:31:e5:5a:39:be:73:ad:d7:62:fe:17:49:16:
17:db:f6:d0:ac:82:0a:27:f3:d4:0f:fa:28:85:a7:
9f:55:b5:7f:09:54:a5:f5:91:cd:2e:22:a9:71:92:
40:2a:0e:f0:54:98:73:22:a7:f8:b7:3a:c5:77:02:
d7:2b:e7:01:7f:1c:d0:27:70:86:dd:72:da:44:3e:
8b:da:ac:3a:98:12:d0:03:1a:e2:1c:d4:c0:5e:44:
90:f2:15:f7:10:e9:94:9a:8f:46:a8:22:23:ee:9a:
9b:59:16:42:2a:ee:88:e3:58:44:b3:3a:1a:8a:e9:
21:6e:68:af:4d:fd:8b:ed:aa:4b:df:16:67:0b:aa:
c8:c4:6a:2a:fd:b5:9a:95:66:bf:02:5d:ec:c1:77:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:8A:36:35:1F:4E:5C:A9:39:C0:20:11:7B:C4:B2:9C:3A:AE:BE
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d6:79:9c:68:f9:3f:5a:ec:2e:96:38:43:86:11:0e:22:34:
84:79:d6:44:b0:37:fb:60:74:75:f9:23:e6:e6:a7:62:57:2e:
d4:ea:96:da:e8:6a:3d:5b:70:5b:ec:8e:21:3c:68:f0:0b:65:
1e:d5:a6:b9:98:4e:50:4c:d5:48:bd:77:cb:83:ae:9b:f4:b2:
71:9d:e3:58:45:85:91:80:ee:1d:16:b3:e0:95:37:7f:5a:93:
f8:c3:1f:f9:98:ce:b1:d3:04:60:25:8a:56:1c:1c:64:c7:c8:
8a:0e:30:95:80:0a:50:76:8a:df:15:9f:4c:a8:6a:ae:ac:f5:
0c:f7:12:24:24:d2:3c:5b:23:9c:0e:71:b6:4e:a5:a1:6b:a0:
e8:a8:7b:39:f8:99:22:25:cc:81:19:6a:34:70:a6:21:d7:9f:
e8:30:ba:1f:62:db:b7:57:52:14:8c:90:ea:e6:4d:b0:dd:c7:
32:99:6b:4b:e7:cb:77:7b:3a:a1:51:f2:e7:91:3b:4c:bb:fa:
4a:3a:8c:f7:31:d9:7d:92:3d:8a:89:5a:8c:02:87:06:2f:89:
dd:a9:6d:cb:fc:9e:0b:d9:17:93:e0:1b:b9:e4:4e:23:94:13:
ba:7f:12:e0:25:93:a2:e6:d1:5a:1e:6a:fd:53:cc:2c:10:fc:
18:33:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:20 2026 by rpki-client