Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json)
Hash identifier: MkS4aChxzuwTxNIBBYYJwYmEW0Z/Qp7ArHC9V8wJpVo=
Subject key identifier: A4:D7:98:A1:88:76:B4:78:DF:81:11:5B:1E:74:DA:1D:30:11:D2:B0
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 019F236A153B66054B38D932E4B1E3E65FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
Manifest number: 0DE6
Signing time: Thu 02 Jul 2026 15:19:42 +0000
Manifest this update: Thu 02 Jul 2026 15:19:42 +0000
Manifest next update: Fri 03 Jul 2026 15:19:42 +0000
Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: U1pkx0s8VDIE/zIDIcbpF4S2mMYP2mPpQtNkh8/UJiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:15:3b:66:05:4b:38:d9:32:e4:b1:e3:e6:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Jul 2 15:19:42 2026 GMT
Not After : Jul 3 15:19:42 2026 GMT
Subject: CN=a4d798a18876b478df81115b1e74da1d3011d2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:f0:62:5c:24:a1:9d:f2:14:d2:71:a7:38:
57:e8:0f:86:c0:72:33:f2:e9:18:83:41:cf:7d:e2:
65:9a:46:06:e1:82:81:57:ec:8d:3e:e2:aa:2b:7d:
5b:aa:d7:e0:76:d5:10:9a:20:f7:eb:ac:db:3b:54:
e3:46:fa:7e:db:be:9c:7f:18:27:46:7d:5b:d5:50:
f2:d2:49:0e:17:43:52:74:93:86:19:11:2e:41:5e:
5a:6c:f9:46:62:a9:51:63:b6:13:10:4c:9e:b2:f3:
5c:27:11:12:b2:02:93:b0:4c:69:ac:2e:dd:0d:96:
93:eb:a9:1f:f8:b4:04:4a:02:39:2b:9e:9c:d5:33:
c2:71:ae:cd:09:ee:64:52:dc:77:e8:e3:2a:24:6e:
5a:39:d5:0b:17:13:0b:78:22:a7:7c:69:06:b0:0a:
6e:99:6d:5c:f4:ac:3b:47:1e:dc:37:30:e9:c7:57:
95:79:4c:48:69:18:32:de:ed:7b:68:63:c2:82:fc:
96:a1:f9:3f:ec:dc:3d:cd:6c:88:04:83:92:87:e6:
b9:19:98:29:13:77:9f:20:f5:a5:af:e1:c9:7d:32:
db:61:0e:84:8b:e5:ed:62:9b:b6:5e:ba:f1:b3:b6:
9b:df:8f:fb:9b:42:f3:9a:32:be:4c:d4:6e:cf:df:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D7:98:A1:88:76:B4:78:DF:81:11:5B:1E:74:DA:1D:30:11:D2:B0
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:52:29:cf:3a:bf:ff:ec:f5:b9:c0:1c:22:e1:3c:dc:1f:b1:
ba:98:16:2e:12:e1:ee:1c:81:fc:f2:a6:85:91:16:4e:ff:1e:
35:c6:3f:29:7e:b4:11:ab:27:49:ed:b1:0d:33:57:fe:1f:4a:
e0:ae:2b:1e:02:59:c7:a6:67:29:f9:46:fe:68:00:81:66:18:
45:d7:60:fc:f2:8c:05:cf:df:c8:71:01:1a:d1:72:4f:dc:e7:
48:d5:86:59:72:a2:5f:6d:54:6a:0b:82:3f:17:1f:cc:3b:e3:
89:1c:9c:f9:d2:ab:15:25:2d:57:56:a8:51:92:6f:3e:3d:29:
b8:e3:b4:99:b5:6d:81:6e:58:a8:b0:ab:b0:81:85:1d:15:51:
e1:71:bf:46:ca:3b:6b:c2:52:52:34:1e:34:1b:5a:fa:74:ae:
a1:39:e2:7e:d4:53:f0:4e:e4:33:98:81:83:23:71:df:a7:30:
c4:49:ce:db:a0:ec:84:8f:86:4f:e7:ab:9f:98:0e:a7:a8:40:
db:3f:db:97:e1:f4:29:1a:90:f3:fd:18:d6:28:23:db:b6:b6:
6a:a4:84:a9:bb:ad:66:ee:52:43:89:b4:86:f2:09:b0:48:4e:
b3:6d:ad:97:8d:14:79:64:1b:91:7d:25:11:22:bd:85:d8:f1:
c0:d4:21:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jahU7ZgVLONky5LHj5l/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGNlODcwZTQ3M2MzNTQyNzNlODljNWU0ZTJlZDNlMGMw
NjkzNTYwHhcNMjYwNzAyMTUxOTQyWhcNMjYwNzAzMTUxOTQyWjAzMTEwLwYDVQQD
EyhhNGQ3OThhMTg4NzZiNDc4ZGY4MTExNWIxZTc0ZGExZDMwMTFkMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTPwYlwkoZ3yFNJxpzhX6A+GwHIz
8ukYg0HPfeJlmkYG4YKBV+yNPuKqK31bqtfgdtUQmiD366zbO1TjRvp+276cfxgn
Rn1b1VDy0kkOF0NSdJOGGREuQV5abPlGYqlRY7YTEEyesvNcJxESsgKTsExprC7d
DZaT66kf+LQESgI5K56c1TPCca7NCe5kUtx36OMqJG5aOdULFxMLeCKnfGkGsApu
mW1c9Kw7Rx7cNzDpx1eVeUxIaRgy3u17aGPCgvyWofk/7Nw9zWyIBIOSh+a5GZgp
E3efIPWlr+HJfTLbYQ6Ei+XtYpu2Xrrxs7ab34/7m0LzmjK+TNRuz9+hTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTXmKGIdrR434ERWx502h0wEdKwMB8GA1UdIwQY
MBaAFNLc6HDkc8NUJz6JxeTi7T4MBpNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAt
MzJkODBkOGQxNjE1LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAtMzJkODBkOGQxNjE1
LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlIpzzq/
/+z1ucAcIuE83B+xupgWLhLh7hyB/PKmhZEWTv8eNcY/KX60EasnSe2xDTNX/h9K
4K4rHgJZx6ZnKflG/mgAgWYYRddg/PKMBc/fyHEBGtFyT9znSNWGWXKiX21UaguC
PxcfzDvjiRyc+dKrFSUtV1aoUZJvPj0puOO0mbVtgW5YqLCrsIGFHRVR4XG/Rso7
a8JSUjQeNBta+nSuoTniftRT8E7kM5iBgyNx36cwxEnO26DshI+GT+ern5gOp6hA
2z/bl+H0KRqQ8/0Y1igj27a2aqSEqbutZu5SQ4m0hvIJsEhOs22tl40UeWQbkX0l
ESK9hdjxwNQhIw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:17 2026 by rpki-client