Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier: lMZoFMl5fm8ltniKH66eP34o2pZD7uht7V7JZ2ril2M=
Subject key identifier: 77:1F:55:4C:C4:A6:E7:6D:57:97:89:58:B3:36:F3:5F:38:DB:8A:83
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial: 019F23697DD11195AF0DB0E3E055D9C96ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number: 1080
Signing time: Thu 02 Jul 2026 15:19:03 +0000
Manifest this update: Thu 02 Jul 2026 15:19:03 +0000
Manifest next update: Fri 03 Jul 2026 15:19:03 +0000
Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: gi7ZTmQSdLLrOOMrqwS4092gjhb6eQvD/0pR7aJvG7M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:7d:d1:11:95:af:0d:b0:e3:e0:55:d9:c9:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Validity
Not Before: Jul 2 15:19:03 2026 GMT
Not After : Jul 3 15:19:03 2026 GMT
Subject: CN=771f554cc4a6e76d57978958b336f35f38db8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:d7:db:bb:9b:81:74:56:54:3d:44:22:63:
55:f0:d0:10:6a:0e:14:2a:20:33:79:ca:89:97:64:
a3:3e:3e:88:86:e3:91:f9:cf:b9:89:b4:a4:43:99:
a4:7d:0a:35:71:2f:3d:42:f0:6d:b4:62:3b:76:85:
a0:e4:81:32:ee:e6:7f:1d:42:07:4d:79:e1:30:ac:
55:23:91:20:de:6b:f3:22:ee:be:e5:4d:4a:f5:6e:
8c:47:e8:b1:bf:d1:1e:17:7d:ef:df:39:ae:c9:b3:
c2:e5:13:9a:40:fb:1c:4b:46:04:6f:c5:c3:45:87:
b4:d9:8a:d0:06:7c:22:67:eb:cf:d0:f2:af:af:a0:
07:c7:6f:02:e4:a8:38:ae:6b:c6:0d:a0:8c:23:2f:
0b:be:5f:81:d1:fa:83:18:83:05:bb:64:40:0c:a8:
cc:26:da:80:f6:12:ce:87:2b:6d:a2:44:76:f7:79:
39:fa:52:98:0d:24:23:1e:92:0f:f8:e9:28:3c:80:
64:89:bf:9c:2b:78:8b:cf:49:14:e6:e6:07:f8:6d:
fb:ce:70:5b:18:46:3c:10:bd:ca:be:09:c5:02:f4:
e1:c2:e8:e0:f0:69:e6:b2:ff:90:7a:bf:f1:8d:79:
1d:de:2f:0a:c8:dd:9d:bb:d3:79:68:cc:90:ed:5a:
ac:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:55:4C:C4:A6:E7:6D:57:97:89:58:B3:36:F3:5F:38:DB:8A:83
X509v3 Authority Key Identifier:
keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e3:22:63:de:11:48:60:37:3c:87:b3:79:82:fe:e7:ba:fd:
ba:ae:a5:5e:37:70:75:78:86:79:01:19:1d:a8:34:b5:b2:e8:
bc:e5:ca:e2:e8:5e:24:6a:df:82:7c:08:59:00:a1:91:67:5e:
95:03:c8:70:b0:3c:0f:6c:af:34:c1:b3:6c:85:96:d1:61:17:
78:41:61:fb:0f:9d:68:61:39:84:2e:18:16:68:f9:40:ef:46:
8f:e6:0d:86:e6:94:a9:59:a5:96:a7:8d:14:ec:56:0c:16:c9:
96:78:17:61:1e:6a:1e:cb:4d:39:19:58:d9:b2:07:26:f2:89:
44:b5:68:f5:bc:d6:9f:01:df:5c:80:4f:09:71:3d:c9:4e:27:
1d:0e:10:b7:88:f7:32:fd:ae:5d:48:42:f4:72:80:c0:f8:e6:
12:4c:1e:3f:f1:d2:6e:da:fa:bc:22:87:9e:90:6f:73:e1:49:
98:fe:25:40:4a:f2:d1:15:69:d5:c0:73:81:7f:67:b6:28:86:
0b:c5:4c:f6:ba:88:d7:ef:68:37:3d:4f:01:ee:81:6f:c9:1d:
5f:4a:c4:86:83:68:aa:d1:45:f8:e3:28:a0:bc:15:aa:60:31:
26:20:04:a9:1f:c2:4f:9c:25:0c:a8:92:07:c7:ee:74:fe:42:
56:76:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:37 2026 by rpki-client