Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: 2tLt5mGb8z18zbcFILc85mWD1now43499hSWr5uXOns=
Subject key identifier: 01:FD:38:A8:FB:42:4F:59:3F:A1:17:B3:15:A8:80:4F:79:CD:FB:26
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019FA6AAB80D38CF85B9CAFAD0AE2E2FB95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 093D
Signing time: Tue 28 Jul 2026 03:00:33 +0000
Manifest this update: Tue 28 Jul 2026 03:00:33 +0000
Manifest next update: Wed 29 Jul 2026 03:00:33 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: WSgy1C6MAp1OJcUW+7lsg+b2IMXcFZQ7xOXh5bEf1JI=)
2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:aa:b8:0d:38:cf:85:b9:ca:fa:d0:ae:2e:2f:b9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Jul 28 03:00:33 2026 GMT
Not After : Jul 29 03:00:33 2026 GMT
Subject: CN=01fd38a8fb424f593fa117b315a8804f79cdfb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:62:96:0d:e4:78:21:76:7a:7a:11:0b:8d:
c1:96:9a:a1:d3:da:b0:27:e1:3f:37:19:3f:55:da:
6d:4e:5b:18:19:22:ae:48:d9:a7:a4:82:5c:87:d2:
0c:77:cd:dd:39:c9:61:ea:d8:a6:b1:0f:ae:bd:38:
08:97:39:89:28:85:bf:a8:ed:4c:ec:18:b8:c5:b3:
54:32:0c:4d:2b:50:be:42:c2:d8:24:8e:4e:4a:6c:
b0:f0:f6:1e:3a:dc:4b:cf:73:ca:d0:a0:dd:50:27:
1f:56:85:ce:f5:82:48:1e:40:fe:71:6e:0b:75:33:
95:b9:b7:66:c6:05:6c:6c:8b:8b:34:0d:df:1d:4e:
b8:bf:5d:d1:2d:94:05:60:bf:ee:ff:a7:6b:08:0c:
09:1e:e5:65:0b:1f:46:44:d2:4b:2f:ca:58:5b:ea:
a2:cf:a4:a0:10:e6:d5:83:08:d1:e6:60:3d:fe:1a:
b5:0b:67:14:db:4a:c2:2e:04:33:23:f7:94:61:34:
88:f7:81:73:01:65:fb:6b:d0:39:41:0c:e4:96:e3:
f8:c3:60:64:92:0a:5b:2f:e8:a5:47:c7:85:33:16:
00:5d:10:a0:2b:af:b8:53:2a:fe:54:63:96:43:75:
a6:9f:7d:61:2f:24:45:a2:54:56:26:13:63:7d:c7:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FD:38:A8:FB:42:4F:59:3F:A1:17:B3:15:A8:80:4F:79:CD:FB:26
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b9:37:4a:c9:20:79:8c:7f:15:b2:07:4a:87:a4:2b:7e:5d:
57:37:2c:9c:ca:c8:dd:34:e7:72:dd:9d:02:a5:e8:a6:93:37:
c0:b9:46:dc:9a:1a:60:dc:c4:d8:b5:24:b5:65:7d:5b:b6:fc:
4f:b6:54:f7:06:c7:0b:a7:98:be:97:ee:b7:97:e9:cb:fb:09:
b5:40:5c:96:1b:b2:11:ff:43:ee:12:7d:b1:7a:91:4e:7f:5b:
a6:50:66:a1:97:45:27:a9:8b:03:a4:87:6f:d9:65:be:a5:32:
8a:3f:d7:48:bf:87:76:fe:84:0e:19:af:03:fb:93:05:43:a2:
da:6e:e3:36:34:b7:6f:2c:01:ad:69:ca:53:a3:ac:aa:5c:a6:
fd:00:71:4e:c4:10:82:25:a1:7a:2f:f8:7b:a0:d2:54:c7:f9:
bf:3a:53:4b:b7:ef:22:93:4c:bd:8f:a4:ba:f1:4a:3a:b4:c4:
6f:25:5b:fb:99:bd:02:2c:4c:c1:58:ca:e6:a8:09:30:48:72:
94:e6:fc:c8:2f:8c:55:28:af:a5:29:50:ee:e2:14:2d:67:67:
c3:0c:64:6a:c8:6a:93:5e:f1:c1:7f:7c:69:7e:c6:fb:84:3e:
ad:c3:58:bb:82:08:d1:fe:df:e8:7c:de:d6:db:1b:28:87:82:
4e:db:e2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:15 2026 by rpki-client