Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: sLnqDgurD4jTsh8H0Ej7UygB59ENCjEtYR2XsGX0HNU=
Subject key identifier: C4:4A:7F:C2:26:95:E7:3B:69:AC:11:61:79:41:54:A4:FD:56:5F:20
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019F2369CF181C3E8F750A26A75F3A27F234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 1990
Signing time: Thu 02 Jul 2026 15:19:24 +0000
Manifest this update: Thu 02 Jul 2026 15:19:24 +0000
Manifest next update: Fri 03 Jul 2026 15:19:24 +0000
Files and hashes: 1: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: z/hU+7mT1W8JjqeZ1ja+XcHETIRd8ojzgw6oqiknhPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:cf:18:1c:3e:8f:75:0a:26:a7:5f:3a:27:f2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Jul 2 15:19:24 2026 GMT
Not After : Jul 3 15:19:24 2026 GMT
Subject: CN=c44a7fc22695e73b69ac1161794154a4fd565f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:cc:c2:ea:3b:59:b9:9a:0d:c8:2d:49:69:
3a:8e:c4:0e:bc:66:b2:45:49:84:91:a1:1d:35:72:
61:d3:5a:84:49:4f:ea:ad:3f:ad:eb:81:fe:37:46:
f8:49:46:2d:5b:48:70:8e:51:b1:53:35:57:6c:42:
93:df:38:b5:37:54:1f:75:b5:ff:e7:4b:17:49:1d:
7b:28:f0:5a:a5:1f:da:ce:d5:2b:93:7b:e1:15:eb:
26:96:0c:53:d8:ac:fd:30:a9:d8:8a:ba:97:57:09:
5a:ea:d3:a3:3a:5e:2a:27:43:c9:01:ce:8f:95:43:
bb:07:27:9d:6a:a6:16:e2:0e:6d:7d:51:97:8d:9f:
b1:61:ed:ec:d1:85:b3:b6:28:90:7f:5f:16:35:14:
49:e2:23:f0:aa:31:ce:c0:0f:8b:5f:8b:04:12:0a:
92:0a:c9:3a:64:fb:31:4b:f1:b4:15:92:d2:e0:af:
89:90:a3:0c:a4:5a:f2:d9:5b:3c:a6:b8:58:20:d6:
7f:c7:98:e1:87:0b:15:3e:e7:96:56:ba:0f:85:c3:
2a:4e:83:79:4d:87:a7:5d:4d:88:d9:49:77:76:85:
9d:68:c7:ec:e6:36:6f:9b:1b:92:e5:af:0a:7c:2f:
2d:79:80:ca:03:f5:dd:b9:d0:d7:0f:8f:8a:d9:99:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4A:7F:C2:26:95:E7:3B:69:AC:11:61:79:41:54:A4:FD:56:5F:20
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6f:92:d1:71:c8:a4:38:d9:da:a6:6d:e1:53:df:cf:cb:b9:
16:10:a5:25:c3:c9:ef:4f:03:33:4a:02:bb:ea:b2:e3:a3:ed:
09:20:76:ce:14:8d:e1:fd:c5:53:8d:27:44:20:f8:c9:97:c5:
07:fa:67:7e:34:28:8f:14:1a:41:11:5b:fb:3b:cd:0c:8f:af:
fe:93:01:8f:dd:57:7c:d9:12:f3:12:04:dc:d9:a1:9a:50:a1:
fe:4d:d0:07:a2:99:bc:63:20:29:54:b1:59:a5:2b:14:c7:05:
5c:b2:cb:77:5e:b5:c3:1d:3f:4d:8d:05:d5:4a:9a:0d:4b:91:
48:bb:df:34:3a:1b:8a:f8:9a:09:3b:e5:4d:85:a5:02:3a:48:
bc:e8:05:8b:dd:b5:dc:47:43:4c:fd:68:59:a3:8d:f4:05:ab:
19:eb:0a:7b:d4:74:be:5a:38:ed:99:7c:0d:a3:a2:f4:11:6c:
3d:af:95:f5:92:8a:c3:e8:51:b7:8d:9f:40:38:15:17:fa:17:
ba:f7:a3:cc:bc:4c:7c:53:fd:42:2b:c1:8d:ef:93:02:e1:f9:
18:c9:7f:3d:b2:dc:6c:a1:33:d7:9c:14:a3:6c:ac:32:86:e7:
ab:97:94:c5:34:b4:a6:bd:b0:c1:03:f3:7d:a0:6a:fa:e4:e2:
8d:e0:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:31 2026 by rpki-client