Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: iFqDOBnq0DZcZBEcfFaYaDq/T3+v2c1W/QktQHEviQw=
Subject key identifier: D7:5C:9F:46:69:AE:5A:23:3B:0F:2A:85:BC:5D:48:B9:41:FB:35:61
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 019F236A6D2898BCA778A16AB6FBB055ABAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 1990
Signing time: Thu 02 Jul 2026 15:20:04 +0000
Manifest this update: Thu 02 Jul 2026 15:20:04 +0000
Manifest next update: Fri 03 Jul 2026 15:20:04 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: MmY2mBe3gzycMJy7q2qXqVXWFle3SvLUZPeJduqr1WM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:6d:28:98:bc:a7:78:a1:6a:b6:fb:b0:55:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Jul 2 15:20:04 2026 GMT
Not After : Jul 3 15:20:04 2026 GMT
Subject: CN=d75c9f4669ae5a233b0f2a85bc5d48b941fb3561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:0f:97:7f:53:ef:7f:b9:a6:a7:40:d4:f8:
5b:06:17:3c:8b:53:a7:04:7b:5d:be:1c:64:60:bb:
d7:8c:fc:9a:41:e6:8d:3e:d9:ef:c6:08:63:f1:46:
d8:14:bd:88:03:8e:4f:03:e7:11:c3:4c:5c:43:35:
bf:72:5c:ae:78:29:a2:81:e8:6d:9b:6e:3a:28:04:
dc:70:dc:0e:11:e5:d0:94:0b:4d:6d:10:85:6a:25:
ef:79:35:fc:d1:67:92:70:81:db:8a:df:a9:61:01:
37:c8:a8:0d:78:ac:8c:c0:39:44:0c:e8:83:75:60:
d5:50:67:80:f3:38:cb:76:e6:e1:c4:4e:04:28:e4:
05:ce:c3:3e:a9:21:a5:af:a2:47:b2:d8:10:20:ab:
ac:77:52:13:0d:3c:fe:78:44:fa:a9:2a:89:3e:10:
08:7a:47:0a:04:9e:53:11:c8:01:81:f7:d1:fb:e0:
ad:e9:9c:d2:c9:84:97:ef:35:71:57:3e:29:7d:7b:
07:a4:df:dd:1a:45:63:57:51:f2:c2:b6:b9:48:fc:
c3:06:6b:0c:65:e5:69:00:ff:6a:be:55:c1:54:d3:
79:9e:8c:9a:4d:44:b4:23:59:0b:fc:d5:03:18:1b:
ca:c5:df:41:f1:44:37:d9:e6:3f:95:a4:4b:8d:58:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5C:9F:46:69:AE:5A:23:3B:0F:2A:85:BC:5D:48:B9:41:FB:35:61
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f3:6e:57:84:81:9a:83:59:3d:32:72:b2:93:0a:ae:17:b6:
2d:6f:8f:e4:9c:3a:a6:9b:49:fd:b1:77:6d:5c:e7:79:bf:c9:
16:18:de:66:3b:9e:9d:17:41:63:4d:1d:e9:ea:49:7b:66:2f:
47:b2:7c:28:27:81:7a:a2:df:55:4e:62:f9:5f:26:02:2c:af:
15:20:eb:89:72:02:20:0f:c3:a1:bf:1c:02:d4:6a:78:5a:fa:
8e:54:18:7f:4e:83:8d:f6:de:28:c5:f1:4e:49:b5:fe:c0:c5:
9d:5b:ba:80:e4:b2:ef:ac:c9:f2:53:80:87:a9:3f:eb:07:dd:
14:3c:c0:2b:77:56:43:56:52:cb:f1:43:98:7e:dd:d5:f6:ca:
b1:41:93:59:41:71:41:80:c0:3b:f9:37:4b:5f:62:69:b2:37:
8f:b5:b6:6f:99:01:77:68:d2:38:9e:78:93:17:10:18:9e:a7:
d4:ff:3f:b3:71:19:cd:90:d0:66:90:5d:d4:af:75:85:b4:02:
a4:b3:ca:ab:56:1a:d6:bd:bb:e5:c1:10:72:48:99:d2:2e:4c:
0e:84:ed:74:31:54:f9:97:46:ca:6c:85:40:30:4a:ae:71:03:
50:45:cc:e3:70:45:c0:e6:3e:51:4f:5f:fb:24:eb:5d:0d:0d:
ea:a0:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:20:58 2026 by rpki-client