Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier: Dv9djgcVC5rrFNV9eRch4EndECsm61k7f62VdM7EN8A=
Subject key identifier: 67:CD:35:16:DF:69:FA:50:5E:10:A9:A7:00:FA:66:20:C9:CE:CE:BA
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 019F2369BD989C5C7548459B1210E701F00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number: 198D
Signing time: Thu 02 Jul 2026 15:19:19 +0000
Manifest this update: Thu 02 Jul 2026 15:19:19 +0000
Manifest next update: Fri 03 Jul 2026 15:19:19 +0000
Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: vIkk6kkiBIG97+0oiGZM64dHj2fgUDYaDrKi5WkYjkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:bd:98:9c:5c:75:48:45:9b:12:10:e7:01:f0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Jul 2 15:19:19 2026 GMT
Not After : Jul 3 15:19:19 2026 GMT
Subject: CN=67cd3516df69fa505e10a9a700fa6620c9ceceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:86:c6:0d:61:c0:ab:da:69:2e:00:50:c3:
1b:b3:a8:02:ce:16:5e:c9:02:51:81:f1:d9:54:ca:
ca:0b:14:94:62:3d:ac:59:17:b8:36:0c:b1:de:6e:
95:75:fd:32:0a:d1:de:da:6a:5e:d2:ac:75:98:5e:
b0:f6:66:d4:bb:94:85:99:f7:1a:49:0f:1d:ec:57:
e8:68:de:c0:65:eb:b3:c0:df:cc:d5:9d:f9:97:80:
34:54:aa:77:e5:4b:d0:c6:7b:79:a7:90:7f:60:8a:
24:be:55:87:49:93:25:67:89:ff:f1:5a:13:d3:f4:
ba:5f:bc:99:d2:dc:46:92:4e:89:db:15:0b:7d:0f:
6d:64:96:2a:a3:54:7a:de:84:28:b3:3c:49:f2:aa:
5f:9e:4c:7a:08:aa:c5:45:ec:a2:6c:b6:6e:e4:e3:
1c:1f:61:ad:51:cc:bd:46:92:e4:d8:5c:e0:01:6b:
78:fe:05:64:92:c4:56:ed:3c:28:bd:ac:a8:7c:f1:
b7:2e:c2:b9:bd:54:76:e5:d4:a6:a6:f7:7c:87:99:
ca:c4:fc:54:a5:35:8e:f6:33:2f:a5:a1:6c:10:5a:
44:4e:ca:74:f2:47:de:46:82:e0:93:f5:5e:74:29:
30:da:57:7d:dc:55:40:ed:4e:95:49:35:79:8c:db:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:35:16:DF:69:FA:50:5E:10:A9:A7:00:FA:66:20:C9:CE:CE:BA
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:55:5b:b0:1a:e1:e9:2c:35:b1:e9:a3:cb:3a:9e:0c:b3:
59:19:17:9a:3e:c1:47:13:35:1f:6a:07:31:33:72:50:fb:6c:
64:06:86:50:93:e5:69:0c:9f:68:5e:07:87:02:eb:51:d2:fa:
50:41:5b:e0:40:2d:23:c4:de:f8:0f:84:18:f5:95:22:43:b2:
ad:96:d0:0b:33:6e:cf:a3:ba:6d:ee:f2:93:4e:ce:09:f0:d9:
8e:60:af:b2:95:9d:5d:08:f8:a2:35:67:5f:78:f2:e5:b4:92:
1a:22:c1:cc:3c:4b:7a:0c:65:b2:56:39:0e:9d:ff:51:e6:f3:
13:af:bf:1f:c0:5f:e7:67:fe:4f:b1:83:1d:2a:e5:21:9a:95:
31:43:b0:89:b8:ac:7a:fe:5a:49:77:54:50:15:1e:18:a5:d2:
93:5b:49:c5:10:d8:c7:66:75:91:22:ec:da:37:88:d4:a3:ad:
bf:12:5e:70:73:a7:6d:00:29:e1:55:07:2b:5e:83:15:90:80:
f3:4e:ca:96:21:cf:56:72:20:c8:ba:38:19:66:78:87:9b:98:
cf:3f:13:21:29:ee:dd:78:4a:04:fa:44:f0:d8:97:f0:c4:9a:
79:65:ee:8b:4f:fd:52:44:64:db:07:de:96:9a:c2:e3:dc:d3:
ae:60:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:01 2026 by rpki-client