Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: NZeOWmNFqWPPpGbemkpAtejvniNZ/3P6pgLK7dcw9js=
Subject key identifier: EB:76:74:CC:A0:50:26:C3:A1:72:8C:5A:E5:26:A2:C9:DE:15:7C:D7
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019F23699A2F9651DAD71FD55B7973A70389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 157A
Signing time: Thu 02 Jul 2026 15:19:10 +0000
Manifest this update: Thu 02 Jul 2026 15:19:10 +0000
Manifest next update: Fri 03 Jul 2026 15:19:10 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: G+HnRhRifLO24AHsA2RohQnNU+pMioPeZuMfWWBnhwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:9a:2f:96:51:da:d7:1f:d5:5b:79:73:a7:03:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Jul 2 15:19:10 2026 GMT
Not After : Jul 3 15:19:10 2026 GMT
Subject: CN=eb7674cca05026c3a1728c5ae526a2c9de157cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:2d:48:a0:0d:29:4c:f4:00:ae:67:04:1f:
5c:b5:83:84:df:27:f9:10:dc:b9:3d:47:74:9f:c5:
11:32:40:86:6f:55:d4:bc:d5:38:53:b1:df:7f:3a:
e2:9c:97:6d:ec:3f:60:61:0c:81:56:48:f8:ac:c7:
df:92:7b:15:49:d4:9b:01:8f:e3:8e:cb:3d:9c:48:
c3:c6:3c:85:b6:cf:11:b9:58:9e:65:cb:14:a1:ea:
83:38:a7:7d:3b:47:67:55:86:ef:89:ae:a3:19:45:
ab:a0:39:e0:72:f1:01:22:1e:13:94:c2:22:16:ea:
2a:69:e7:04:8a:8d:20:dd:79:6d:47:03:ea:5c:30:
66:44:2f:18:dd:c0:46:8c:81:3c:02:53:bf:4a:f2:
da:9d:ce:be:09:a9:8f:ec:86:5f:3e:cb:89:48:7f:
ec:0a:bc:a0:92:41:5c:0d:45:7b:4a:34:4c:01:81:
ee:88:a6:b3:a7:ee:44:59:ec:fb:1c:19:b0:38:ed:
c4:92:02:c2:19:bd:6f:4f:2e:4b:79:f6:a0:7c:7e:
99:7f:2a:fb:68:93:18:ac:9d:34:99:a2:fc:7e:7a:
9e:3c:9a:08:ef:58:46:70:4d:18:0c:19:4c:37:c5:
8b:46:32:5b:7c:dd:13:13:77:a0:08:46:08:9d:52:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:74:CC:A0:50:26:C3:A1:72:8C:5A:E5:26:A2:C9:DE:15:7C:D7
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:ac:bd:13:3d:fe:5f:10:c3:8a:97:f8:eb:5e:fd:8f:2b:
18:27:7f:74:7f:de:54:cb:43:18:64:08:3c:78:8b:9c:70:99:
29:c4:78:b1:18:14:a4:a1:04:c3:4e:a4:85:36:a0:98:ef:12:
b4:f7:b4:3c:86:a2:c8:66:2a:c6:02:d1:2a:fa:13:65:9d:d1:
6d:10:6d:63:8a:dd:1e:c2:e2:11:fa:37:4c:2f:33:df:72:b4:
f7:a9:2d:3b:63:83:88:53:e4:53:2a:af:4b:36:40:98:3b:98:
a8:45:cc:e0:aa:60:43:e9:a3:14:f8:65:31:aa:2c:4a:c3:47:
1e:2f:14:9e:a8:37:ae:84:21:0d:3c:88:22:f9:5c:f6:6e:12:
f1:64:5c:d7:f7:5a:80:06:b9:ef:df:8f:ba:6d:3b:65:67:ec:
5f:60:6f:0b:a3:b4:55:7d:39:f0:73:19:f0:ae:79:b6:18:54:
91:a3:d5:1f:70:5a:c1:89:60:17:b5:07:6a:1f:d3:76:41:75:
7e:f3:db:b6:e3:91:35:4c:71:7f:21:3d:00:01:64:8d:af:01:
4f:7e:42:7f:d1:45:c9:b5:3d:df:6e:41:82:97:51:5d:90:90:
58:9d:7e:9e:bf:0c:44:27:62:77:ca:de:cd:15:98:ec:ca:8f:
f2:41:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:36 2026 by rpki-client