Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: nT5fnxHaD6u5GnO7dImI8K4ukGx5AvYL9LwZXv0A7m4=
Subject key identifier: 71:3F:2A:C4:99:0A:11:F8:66:00:51:8D:5E:25:10:26:C3:ED:50:FD
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019F2369AE82E651D27D2877BD9726FFE61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0C30
Signing time: Thu 02 Jul 2026 15:19:16 +0000
Manifest this update: Thu 02 Jul 2026 15:19:16 +0000
Manifest next update: Fri 03 Jul 2026 15:19:16 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: dSn+aiEscSkB32CEKL8xHEq8dr6KDzebN5hziquZF+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:ae:82:e6:51:d2:7d:28:77:bd:97:26:ff:e6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Jul 2 15:19:16 2026 GMT
Not After : Jul 3 15:19:16 2026 GMT
Subject: CN=713f2ac4990a11f86600518d5e251026c3ed50fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:51:cb:27:f1:70:7a:da:0d:6e:7c:d8:e0:
4b:df:ed:43:14:0e:cb:23:ea:02:d5:09:e2:6e:64:
eb:a1:bf:cc:77:d7:30:8f:b6:8d:1a:8e:74:db:68:
94:d9:a9:ff:49:7a:2d:3d:03:e0:26:fe:18:d5:08:
de:a4:98:53:f5:64:80:ae:30:48:b5:22:58:aa:2e:
58:5e:a4:10:f8:67:e0:38:28:68:9f:b8:8e:21:52:
32:da:73:b0:8d:af:b5:6e:ac:1f:8e:ef:57:5c:ae:
a3:bb:c9:91:0a:49:ce:65:f3:18:04:c7:e3:d0:5b:
2a:31:73:7b:d6:9d:2d:00:90:51:7d:87:35:62:a0:
cd:87:15:62:93:64:c6:59:1c:c1:e3:6c:36:73:c2:
26:ef:26:ba:7f:ee:99:90:31:6b:bd:c9:2c:61:48:
3c:2f:62:1f:c8:8d:97:59:d5:21:c2:9e:5d:b3:3f:
88:fa:8f:4e:57:41:6e:51:12:56:2d:40:28:6e:89:
32:54:25:f1:45:88:72:6f:84:50:62:1f:8e:46:69:
51:d8:5f:27:aa:09:0d:f2:41:50:67:9b:3f:b0:8a:
8d:ff:b8:15:eb:2a:ea:8e:7a:ab:38:c4:5c:30:1b:
52:7b:6a:3a:85:db:51:ad:3c:a0:38:f3:99:97:47:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:2A:C4:99:0A:11:F8:66:00:51:8D:5E:25:10:26:C3:ED:50:FD
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:b5:aa:eb:46:e2:54:dd:4f:35:7e:4f:03:6a:79:5c:0a:
65:1e:46:bf:82:07:84:d1:91:db:47:31:d4:47:ab:ae:8d:b9:
a4:67:87:70:c6:02:4c:ca:55:5b:dc:81:8e:76:a0:d4:8d:96:
4b:68:c1:b3:6f:00:50:38:12:f8:76:1f:99:13:cb:fc:65:bb:
68:17:d6:cb:ba:25:37:89:c9:63:6f:04:3a:fd:03:ff:26:0b:
00:fc:4d:c6:3e:ec:30:04:77:91:92:f5:e2:2a:78:27:6d:a7:
75:32:57:7c:55:60:c8:39:28:92:78:65:22:33:2a:0e:21:d9:
05:14:ad:1c:48:6e:c5:fe:be:a0:d4:09:8f:85:77:f8:6b:50:
37:93:0c:0f:be:31:a5:ef:1c:59:98:fe:08:87:6d:27:8b:8e:
b2:c4:ab:e9:86:b9:ff:e7:02:fe:a6:92:2e:d6:a2:ca:77:07:
a0:67:b9:c7:67:cc:6f:c4:2b:1c:d3:e9:80:81:22:86:65:8e:
14:47:d3:17:57:71:db:aa:70:0f:a7:07:17:9f:28:d4:24:f1:
59:42:26:81:0a:32:42:53:67:1e:55:7b:89:b8:c0:ca:f7:cf:
f6:84:19:5d:a3:5a:5c:ec:88:7d:4c:3b:ef:af:95:5e:94:d8:
e1:92:52:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaa6C5lHSfSh3vZcm/+YcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZmMDMzNTM3YmJkODYzYmJjYTJiNjIwOTJkOGRlMzYx
MWY2NTEwHhcNMjYwNzAyMTUxOTE2WhcNMjYwNzAzMTUxOTE2WjAzMTEwLwYDVQQD
Eyg3MTNmMmFjNDk5MGExMWY4NjYwMDUxOGQ1ZTI1MTAyNmMzZWQ1MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrJRyyfxcHraDW582OBL3+1DFA7L
I+oC1QnibmTrob/Md9cwj7aNGo5022iU2an/SXotPQPgJv4Y1QjepJhT9WSArjBI
tSJYqi5YXqQQ+GfgOChon7iOIVIy2nOwja+1bqwfju9XXK6ju8mRCknOZfMYBMfj
0FsqMXN71p0tAJBRfYc1YqDNhxVik2TGWRzB42w2c8Im7ya6f+6ZkDFrvcksYUg8
L2IfyI2XWdUhwp5dsz+I+o9OV0FuURJWLUAobokyVCXxRYhyb4RQYh+ORmlR2F8n
qgkN8kFQZ5s/sIqN/7gV6yrqjnqrOMRcMBtSe2o6hdtRrTygOPOZl0fSJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE/KsSZChH4ZgBRjV4lECbD7VD9MB8GA1UdIwQY
MBaAFAoG8DNTe72GO7yitiCS2N42EfZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWIt
MmE0ODEzYTEzMTIwLzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWItMmE0ODEzYTEzMTIw
LzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV61qutG
4lTdTzV+TwNqeVwKZR5Gv4IHhNGR20cx1Eerro25pGeHcMYCTMpVW9yBjnag1I2W
S2jBs28AUDgS+HYfmRPL/GW7aBfWy7olN4nJY28EOv0D/yYLAPxNxj7sMAR3kZL1
4ip4J22ndTJXfFVgyDkoknhlIjMqDiHZBRStHEhuxf6+oNQJj4V3+GtQN5MMD74x
pe8cWZj+CIdtJ4uOssSr6Ya5/+cC/qaSLtaiyncHoGe5x2fMb8QrHNPpgIEihmWO
FEfTF1dx26pwD6cHF58o1CTxWUImgQoyQlNnHlV7ibjAyvfP9oQZXaNaXOyIfUw7
76+VXpTY4ZJSaw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:03:49 2026 by rpki-client