Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File: 2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier: P4IzvKrnZFNyg6wMVoIdfM+oXb8ZTHLBprydKHXKLXo=
Subject key identifier: DF:0E:17:82:7E:0A:F1:DA:39:20:20:03:77:D1:FC:CC:0C:92:C5:E1
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer: /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial: 019DD653F1FDAC013804F38DDC42E141C495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number: 0865
Signing time: Tue 28 Apr 2026 23:01:58 +0000
Manifest this update: Tue 28 Apr 2026 23:01:58 +0000
Manifest next update: Wed 29 Apr 2026 23:01:58 +0000
Files and hashes: 1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: oippMgA8mIuQCy2tw846iQOZ2p7WyfZH1XEVZAI2Qb4=)
2: lQThS4mk1Leh8tKsh4-tfyHe4H0.roa (hash: H+cr/TGcF1ncxkT8Z3p54kLCJ/SNrYTbccJfu39qAvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:53:f1:fd:ac:01:38:04:f3:8d:dc:42:e1:41:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Validity
Not Before: Apr 28 23:01:58 2026 GMT
Not After : Apr 29 23:01:58 2026 GMT
Subject: CN=df0e17827e0af1da3920200377d1fccc0c92c5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:38:65:5d:a8:9f:5e:97:73:c0:ea:cb:e9:
38:27:45:3c:44:db:5c:05:7a:7d:5e:a1:53:17:86:
2e:cf:75:b3:4d:8f:5c:14:cc:45:f2:7f:71:61:44:
4a:fd:1b:8b:9f:62:3f:08:7e:04:a4:57:54:35:e0:
9c:60:5a:ae:1d:18:5e:7b:b6:fd:33:05:d8:a7:d9:
20:b3:73:29:8b:ad:7e:e6:fc:0c:19:11:96:85:cb:
78:ed:d7:5b:b6:aa:94:25:43:d9:e3:95:56:3d:96:
a8:cc:fa:00:5d:46:57:14:4b:4b:fd:ec:91:99:22:
73:36:f5:ef:db:96:30:99:17:2e:4b:3c:43:4f:74:
e6:dd:d4:33:c4:6e:75:24:48:9d:38:8f:b1:fb:63:
94:b2:5d:11:d8:b3:6e:cc:62:aa:06:d5:18:83:dd:
7d:12:06:d1:7b:76:e6:79:c6:4e:19:98:e9:16:2e:
b9:a6:5b:80:8a:e5:28:05:1a:74:24:6b:d0:d1:b0:
dc:a8:1a:95:5a:76:e8:fe:cf:c4:42:04:de:fb:b1:
44:e3:7b:08:39:02:0a:17:80:bf:d3:10:ab:cc:18:
3d:72:8b:07:92:de:90:88:f7:40:b8:2e:db:e3:bf:
55:31:89:f7:71:14:36:4a:b4:93:de:ee:cf:be:67:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:17:82:7E:0A:F1:DA:39:20:20:03:77:D1:FC:CC:0C:92:C5:E1
X509v3 Authority Key Identifier:
keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:66:9d:fd:0b:09:c3:7e:b9:8d:2a:37:3a:37:42:45:8b:b4:
cc:69:5f:34:b4:8f:51:c8:2a:8f:c8:2d:56:93:88:72:bc:80:
e1:52:96:18:1d:b6:45:71:28:8e:f8:5b:fd:93:9a:45:1d:6a:
dc:31:6d:15:32:3a:2e:9a:14:bd:23:c7:53:74:6b:a5:0c:c2:
af:88:5f:6c:e4:b2:f3:ad:95:c1:2c:3d:89:b8:86:aa:c2:2b:
e9:06:2f:98:da:d4:a4:3f:79:12:e1:0d:ba:51:07:0a:5b:97:
0a:fe:4a:64:43:2b:3d:f1:eb:49:47:a0:11:49:c2:43:73:2e:
a1:ab:55:2f:46:da:44:47:74:40:06:0f:d9:51:f4:ed:3c:ca:
e1:94:46:fb:bc:b5:c4:9b:e1:e8:86:65:37:c5:a1:35:b4:18:
1b:59:cb:06:7d:58:13:71:1a:97:e9:79:6a:d0:95:b9:c8:40:
08:b9:ad:80:82:44:81:f4:95:9a:2d:4e:25:ca:5d:6b:dd:56:
6b:8c:d1:78:5b:ff:d9:3e:b1:36:82:7a:ea:3d:87:de:bd:0c:
7f:06:71:7b:7a:42:64:3d:46:8f:6f:ba:7a:67:6d:11:5e:49:
a1:9e:b2:c2:ab:b5:fe:6b:66:30:9f:53:00:15:b2:45:bd:8f:
03:ba:41:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:00 2026 by rpki-client