Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: GgUHuKV26nQCwe4tMdX/ejGh5z2fGJj9cBRKufU5ZCY=
Subject key identifier: 3F:55:1D:14:01:09:5C:2F:21:9B:4F:F1:4F:9D:E2:E5:02:2D:E5:8E
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 019B928999C663FCBFF66F7118C9D29612A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 0945
Signing time: Tue 06 Jan 2026 09:00:49 +0000
Manifest this update: Tue 06 Jan 2026 09:00:49 +0000
Manifest next update: Wed 07 Jan 2026 09:00:49 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: LBbMm2+nYx4aM20WEvor8Y2VfTKsyrGrWfESk37snH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:92:89:99:c6:63:fc:bf:f6:6f:71:18:c9:d2:96:12:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: Jan 6 09:00:49 2026 GMT
Not After : Jan 7 09:00:49 2026 GMT
Subject: CN=3f551d1401095c2f219b4ff14f9de2e5022de58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:1b:7f:a5:5d:41:cb:8c:68:e8:4c:7a:35:
4d:95:2b:69:52:9c:b5:d2:aa:06:25:9f:a8:f4:56:
48:62:4b:b9:24:00:68:96:48:68:56:e6:4e:60:14:
9f:e9:39:cd:5c:7a:50:49:37:8f:75:03:39:57:4f:
7c:0d:ae:86:db:cc:8d:ff:9d:45:d1:a9:18:a7:35:
5f:fd:ff:5e:fe:d5:50:1c:52:be:32:6f:24:9b:14:
73:98:7c:99:ad:37:f0:14:43:a3:15:42:52:87:87:
79:01:f3:8a:43:9d:10:ec:3a:b2:41:32:21:3c:ae:
0b:1a:b6:df:28:2d:f0:a6:23:db:20:b3:86:ea:cc:
4e:fe:8a:2b:5c:b0:ac:74:3d:2d:87:c5:39:02:22:
97:6b:1a:76:35:4f:62:20:12:81:2f:f8:32:25:b7:
23:a8:67:68:87:15:04:c6:51:2d:9c:10:8b:0a:5b:
5f:3d:01:44:8b:dc:79:29:68:ba:e1:16:75:b1:89:
ed:90:33:7e:3a:b1:3c:6f:2c:d5:34:f2:e8:80:8f:
95:46:b8:e4:f0:5b:e1:da:4c:c5:25:68:4e:b9:70:
63:36:35:a2:a3:34:39:5b:84:64:51:03:e6:b9:b9:
ff:35:12:43:36:e6:fa:33:02:f9:c9:d1:96:c2:76:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:1D:14:01:09:5C:2F:21:9B:4F:F1:4F:9D:E2:E5:02:2D:E5:8E
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:3a:1d:86:6c:8f:94:fa:7d:6b:14:eb:76:d1:6a:6b:01:
68:e5:66:39:65:67:fe:55:02:58:0f:91:89:0e:3c:10:48:3a:
f6:af:28:0c:e8:c3:fe:95:fb:40:5d:e3:87:36:fe:7f:36:d5:
41:50:f3:d7:b0:89:34:20:b6:21:60:60:99:a9:a5:dc:69:bb:
a1:b0:0c:aa:ea:6e:d5:28:7b:52:e8:59:6c:71:17:43:e2:d9:
07:9c:1c:30:ac:5a:9f:12:77:3e:e9:b3:ac:35:2e:a2:3e:49:
07:54:4f:dc:82:05:ff:9b:f6:ee:47:b4:53:68:46:a0:5f:ec:
8f:ff:e8:0b:7e:e7:fc:78:e3:28:4d:84:3b:36:d2:ef:bc:e4:
d9:77:95:ea:04:ec:eb:d9:07:44:2b:74:2c:8e:ed:cb:2b:23:
37:59:8e:f3:22:82:a5:dc:80:b3:11:b5:27:2a:3a:e6:7d:81:
84:38:d7:0d:c6:70:d2:49:3d:b2:86:be:4e:86:0b:ca:06:48:
1f:86:09:53:fd:e0:d5:8b:ce:fe:df:4f:32:6b:2a:5f:2c:e0:
bb:76:74:f2:7a:a1:f6:d7:23:65:d5:42:e6:88:01:6d:49:74:
3c:75:3d:37:39:d2:03:08:b2:f4:a9:ce:c2:c7:23:b7:42:f0:
0b:71:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:08 2026 by rpki-client