Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: oACws+ZtHMafL6dVHbEQ5MTFmmktMspOxTTul6GMAmc=
Subject key identifier: 12:A3:E2:E4:22:FF:A1:AA:76:07:60:29:F4:44:20:0C:A5:CA:12:2E
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019F23698349E15DF587DE8B44C37B7037FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1510
Signing time: Thu 02 Jul 2026 15:19:05 +0000
Manifest this update: Thu 02 Jul 2026 15:19:05 +0000
Manifest next update: Fri 03 Jul 2026 15:19:05 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: DfaM/Yg2FYC5rU9NHXN4i8V9+s09OtBMwMdQKy9vML4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:83:49:e1:5d:f5:87:de:8b:44:c3:7b:70:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Jul 2 15:19:05 2026 GMT
Not After : Jul 3 15:19:05 2026 GMT
Subject: CN=12a3e2e422ffa1aa76076029f444200ca5ca122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:a0:2e:4a:58:68:1e:b9:98:fb:df:13:27:
b0:33:77:c1:32:ef:d6:6f:8c:12:ed:cf:e4:4f:98:
61:d6:fd:4c:03:9b:da:4d:7f:d8:65:64:03:92:44:
c4:2f:01:9b:2b:3d:54:fd:e6:5e:fc:38:01:09:b3:
ba:6c:4d:6e:7c:dd:ea:94:77:5d:66:0b:18:f7:66:
fd:77:b1:b3:d5:62:d7:df:0d:bc:86:55:3c:18:ea:
e6:42:99:0a:7b:c5:b9:08:bf:d2:f9:ef:1d:35:40:
04:de:ed:2b:4f:06:5a:35:7a:86:44:89:20:58:a9:
de:0e:bb:c0:28:c2:c4:f5:ce:0e:3d:3d:05:39:77:
dc:e2:4d:82:66:a4:b5:8a:aa:a1:11:58:4c:da:3e:
e4:69:25:c2:9a:7e:50:ff:99:9d:3b:cc:1e:e0:00:
fc:57:17:bd:d9:04:ed:67:1c:6f:24:53:b3:9b:e3:
bd:b0:8c:27:53:b0:7e:58:e7:0d:af:9b:25:df:79:
eb:cc:0a:ec:27:ec:01:1d:d7:31:5e:8c:4b:9d:ad:
3d:93:10:46:0d:dc:34:11:ad:90:5c:d1:73:88:e4:
81:dd:81:86:82:b8:64:5e:fa:fc:81:88:0e:cd:52:
7c:eb:02:ef:88:05:64:36:cc:8b:cd:27:60:a3:cf:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:E2:E4:22:FF:A1:AA:76:07:60:29:F4:44:20:0C:A5:CA:12:2E
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b7:72:6c:7b:82:a2:55:b6:57:69:7c:6c:6b:ce:93:d0:35:
79:75:f5:ae:59:dd:cf:15:da:a3:14:6c:4f:83:29:60:2f:9a:
97:16:cc:d7:da:84:ad:63:a8:85:c6:11:96:60:f0:df:1d:10:
e4:15:4e:74:09:24:94:40:fc:08:b2:82:c6:07:dd:e2:99:f8:
92:63:d2:1c:a2:02:37:7e:02:a0:0b:4f:49:bb:21:da:2e:ec:
30:73:50:50:dd:16:48:17:8c:66:a0:cb:aa:64:73:9b:3e:48:
0f:3c:72:6f:de:fa:48:c8:30:2a:46:0e:74:ef:7d:ae:60:e1:
dc:05:f1:a3:78:50:e9:d4:03:f9:ce:9d:5f:52:4a:fb:92:80:
09:78:cb:10:af:56:e8:a5:26:b8:d5:da:7b:53:cd:f3:79:a0:
ce:80:ea:34:13:91:51:9d:f4:bd:4e:fc:b0:da:73:c1:40:d1:
8d:61:e7:c5:f0:13:11:d4:14:3c:be:86:1c:ef:23:17:78:bd:
09:c2:43:69:3b:0b:97:63:2a:f6:b4:39:fe:e1:54:c4:6d:f3:
5d:70:ac:ec:90:89:ee:98:68:95:d7:94:9f:eb:3b:a6:1b:58:
f0:59:ea:85:58:d3:ab:a0:58:b2:8a:2f:31:40:cd:26:3c:1a:
87:fb:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:59 2026 by rpki-client