Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: O+SMgioSscRyjhNdyQ6CeaEzglI6e1X6ylWOknfZ6QA=
Subject key identifier: 34:F6:DC:CD:53:02:4D:1C:42:29:57:9F:27:54:B3:0C:F0:95:C8:09
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019F236A49A55B99E505FEABA93AA66F7645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0F67
Signing time: Thu 02 Jul 2026 15:19:55 +0000
Manifest this update: Thu 02 Jul 2026 15:19:55 +0000
Manifest next update: Fri 03 Jul 2026 15:19:55 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: /5KxpR1TYOhyB9CPsOW/Ib1V5Z7INkn3oLGlayEyPBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:49:a5:5b:99:e5:05:fe:ab:a9:3a:a6:6f:76:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Jul 2 15:19:55 2026 GMT
Not After : Jul 3 15:19:55 2026 GMT
Subject: CN=34f6dccd53024d1c4229579f2754b30cf095c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:3e:c4:f9:55:c5:dc:91:56:fb:05:cb:1c:
dd:97:b6:18:6b:0b:75:9d:65:36:17:6f:37:25:75:
f3:a4:0b:9a:c4:ea:27:d4:07:02:21:03:a4:4a:01:
10:3a:f5:35:63:af:ff:22:b3:f0:b9:7f:6c:6d:a7:
ff:17:ad:3b:74:7c:03:c4:46:fd:03:02:02:32:1d:
bf:f0:20:45:67:4d:61:9b:60:35:2c:b0:69:49:cb:
72:1b:65:53:45:eb:2c:41:2e:82:aa:1f:1e:40:ca:
6f:16:c8:80:0b:46:fc:9a:a6:c5:69:fd:58:47:ba:
36:4c:cf:45:a9:27:4b:a6:7d:62:3d:8f:49:de:65:
a9:a9:04:0b:69:fc:7d:39:a0:cf:aa:41:3e:54:47:
46:db:07:2d:1a:d3:fe:59:b0:07:30:db:26:d7:fa:
6e:26:26:55:a1:9d:25:5a:f9:be:85:b2:08:cf:69:
b1:d3:37:49:ac:80:c2:92:6b:b2:d1:3e:8b:45:a5:
77:f5:dc:61:af:5a:2e:06:b6:b0:45:9c:bf:05:eb:
10:fd:bb:4f:db:4b:4d:7d:37:63:6d:5d:95:66:4e:
d0:a4:1e:84:fb:38:59:f7:3f:35:61:5a:79:55:8e:
5a:1e:d8:d9:f2:35:af:39:fa:55:e1:5e:65:f3:37:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:DC:CD:53:02:4D:1C:42:29:57:9F:27:54:B3:0C:F0:95:C8:09
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:f1:29:b2:28:72:08:0e:cf:22:84:10:b9:a4:44:ab:01:
b6:75:f8:3e:3b:99:20:88:b5:78:61:7b:cb:6d:81:a4:3f:bf:
b7:b5:fe:65:ea:da:46:72:92:dc:4a:6d:7c:3a:43:9d:fa:6b:
70:b1:f3:32:f3:09:a6:19:50:3b:67:f0:79:b9:d9:bc:92:9f:
0f:70:7f:95:f4:7b:63:01:8d:28:66:a9:2c:b8:16:4e:39:d2:
ba:a2:11:19:aa:b1:35:ff:6f:fe:bd:33:31:5c:c7:26:6d:29:
92:bd:66:e4:9b:13:c7:5a:44:62:a6:1b:bd:7f:33:9a:03:d2:
63:53:9e:fd:22:1c:47:46:b4:ca:2e:08:05:1e:b4:d2:94:1f:
56:c8:6f:3c:ce:ec:ee:29:0a:86:5a:8c:47:2c:a0:0f:ae:ab:
11:f4:87:07:6b:63:80:21:13:e4:48:f0:62:8e:08:82:96:d1:
de:58:bf:35:8e:50:0a:74:4f:94:7a:98:e9:76:89:a3:17:52:
02:b8:d7:8e:b8:0f:d1:b6:25:38:3e:36:1e:dd:7b:76:10:46:
70:c0:a2:c0:5c:c0:34:7d:25:fa:d0:db:7a:ba:01:a6:3a:42:
52:00:db:46:65:64:2e:c5:f1:c1:b7:58:b4:25:04:cd:89:b8:
a9:d0:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:19 2026 by rpki-client