Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: QNsbihei8FJn7hg/CkejXHsJ2RQ74HRGOeGXgNjEHxs=
Subject key identifier: 3F:95:9A:4C:7D:1A:82:A0:F1:A7:BF:E1:7B:C1:2D:1C:08:39:39:81
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 019F236A4DD48DF45BCA177D150CDA18542A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 07D2
Signing time: Thu 02 Jul 2026 15:19:57 +0000
Manifest this update: Thu 02 Jul 2026 15:19:57 +0000
Manifest next update: Fri 03 Jul 2026 15:19:57 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: cJluylbHkMP2MsP9/83ymmA8mQzIv2fqKAPUoxShDPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:4d:d4:8d:f4:5b:ca:17:7d:15:0c:da:18:54:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: Jul 2 15:19:57 2026 GMT
Not After : Jul 3 15:19:57 2026 GMT
Subject: CN=3f959a4c7d1a82a0f1a7bfe17bc12d1c08393981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:82:48:2e:f8:20:d6:4c:04:49:ae:c0:17:
e7:30:d3:24:2d:81:a2:0f:7d:69:28:e7:58:66:8c:
d2:93:34:cb:0f:c2:a5:20:24:79:20:92:97:b8:b8:
27:4d:d2:37:4e:77:71:ca:ba:b1:15:2b:8d:d9:6a:
fc:9e:ae:47:dd:1f:f2:9f:71:5c:b4:f6:21:0a:d3:
90:1b:73:87:1d:46:b8:d7:a8:72:10:a7:43:1a:ac:
58:01:b1:87:65:d5:ad:13:0f:2c:d7:b1:51:11:9d:
64:9b:4b:64:47:a9:5a:3c:5a:13:4e:0e:50:4c:54:
94:73:b4:cd:db:41:b6:9d:00:72:b0:c2:f1:27:ec:
ca:58:63:37:e4:cb:ee:fa:50:fb:ce:16:06:95:4e:
d8:09:3e:84:73:c1:23:39:97:b2:61:c5:ae:0e:e7:
f9:bb:c2:b5:7e:29:f3:6a:32:e2:d5:d6:77:8e:48:
b1:db:ce:ad:26:bd:d7:3c:21:ea:5c:b2:71:13:54:
6a:db:ee:40:c9:f3:c3:92:d4:d4:3f:d9:fa:59:a8:
c2:08:22:84:c3:ea:97:96:fb:51:7c:4b:ca:ae:9a:
60:f0:a4:a0:3c:3d:56:85:d4:69:83:87:f7:6f:db:
57:4f:d5:a8:ad:cc:ed:ef:fd:86:d7:57:db:31:5e:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:95:9A:4C:7D:1A:82:A0:F1:A7:BF:E1:7B:C1:2D:1C:08:39:39:81
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9f:04:2c:34:15:19:c7:22:e1:8b:33:45:fc:54:62:76:83:
23:52:b9:f4:14:d0:ff:d3:f1:c5:a7:ea:2c:35:4f:9a:b1:c6:
17:76:8a:26:0d:bc:51:19:7d:7d:80:40:cd:02:ef:51:78:83:
19:77:bd:05:93:d6:ab:07:27:81:a2:90:01:f1:6e:bb:30:5e:
d0:ab:be:85:b7:4b:50:c7:1d:07:bc:98:a8:ab:c0:8f:ae:8e:
73:26:e8:a5:d0:d9:c8:07:05:4e:04:98:d1:46:0f:10:1a:37:
50:d9:06:ae:fd:e0:d7:b9:34:84:1e:5b:b0:76:b4:a2:db:fd:
55:fb:10:b8:b0:68:25:71:8e:ce:96:4b:55:27:c7:12:bd:e0:
9b:57:12:b7:68:8f:5c:da:17:35:f1:00:ae:59:30:6d:6a:52:
d2:71:69:fb:49:34:ad:c9:9e:70:a5:64:52:a2:b3:f3:b9:c2:
5e:38:71:b3:09:16:ba:d2:31:c1:5e:c4:da:e7:b3:f3:25:b5:
fc:a5:ec:36:9e:2e:ea:2f:05:17:6b:61:4b:8d:c5:dc:c1:c8:
b2:ff:c5:c5:8f:77:41:f4:3c:02:2d:d0:6c:1e:31:f9:c9:13:
50:0b:66:ec:6c:0c:5d:c7:90:bf:ce:cf:e7:64:d5:3a:6a:2c:
2b:95:0a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:02 2026 by rpki-client