Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: u3t5lI5by17LAthKIWvfsw9+SU+SsKc1PB4VKONBPLI=
Subject key identifier: 2E:01:09:5C:B0:25:F2:10:AC:C1:93:30:FF:66:8C:26:CA:D6:B4:80
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 019F236A07766D4DA51D88BE26F7446A786A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 0B13
Signing time: Thu 02 Jul 2026 15:19:38 +0000
Manifest this update: Thu 02 Jul 2026 15:19:38 +0000
Manifest next update: Fri 03 Jul 2026 15:19:38 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: JKLhDJHIKRY8fCiYr0buz3sLvWoa1aNtNM6OIoquKvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:07:76:6d:4d:a5:1d:88:be:26:f7:44:6a:78:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Jul 2 15:19:38 2026 GMT
Not After : Jul 3 15:19:38 2026 GMT
Subject: CN=2e01095cb025f210acc19330ff668c26cad6b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:b9:6e:8a:64:8f:c7:2e:85:8a:cd:c5:e5:
d3:8f:ab:9e:4e:e1:38:52:df:39:34:f5:08:77:30:
1e:48:8e:29:ef:10:da:01:8a:c0:53:0f:50:61:5d:
eb:f6:2c:ac:17:7a:2a:9a:50:4e:2a:42:c0:0f:67:
e6:37:56:46:03:4f:ab:d1:bb:2b:2c:ad:ed:b3:19:
c0:37:b5:4f:98:82:fa:96:ca:ab:d1:db:ca:96:f5:
b8:9f:68:97:28:a8:19:64:6c:1c:95:fb:5f:6b:1d:
c9:b3:77:44:48:20:f2:f9:66:96:0f:7b:53:ed:70:
00:36:07:e4:06:d3:b2:24:5f:fa:f2:4e:ea:14:31:
ca:0b:14:67:07:27:00:fa:b9:c8:f0:89:7d:fc:13:
33:ec:64:8a:2e:66:e2:80:d2:b7:24:88:2e:13:ea:
0f:8d:51:5b:10:82:93:10:2f:a9:c1:f5:b5:34:82:
54:56:3d:8b:39:4d:e8:dd:a4:00:99:5c:37:e6:e5:
ff:fd:01:a6:21:6b:84:84:53:48:03:8c:ae:90:28:
8f:d4:9a:1c:14:1b:7e:7f:16:09:db:1e:a0:91:7a:
09:34:a0:88:1a:6c:83:31:d0:dc:62:25:d6:d3:ad:
3d:84:2d:41:5d:10:15:53:7c:08:60:c2:83:00:6b:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:09:5C:B0:25:F2:10:AC:C1:93:30:FF:66:8C:26:CA:D6:B4:80
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a8:a9:bd:31:f0:08:74:1b:55:a1:f6:a7:b2:3c:91:2f:e3:
7a:6e:a0:fb:ed:e8:44:90:08:97:9d:82:0e:89:fc:ea:1a:7f:
70:40:c4:7d:3d:d0:67:21:82:77:2d:87:64:d5:13:37:aa:78:
14:47:3c:0a:ae:74:21:63:74:51:50:fb:97:d4:42:c4:64:80:
69:81:da:20:bb:32:d5:30:25:5c:56:52:76:d2:ec:e8:c5:f3:
a7:fc:32:0a:66:e7:74:59:37:4d:e4:0b:7a:f5:3d:bf:82:e7:
0f:e5:33:ee:30:80:9e:d8:95:e2:3a:72:50:e5:e9:dd:d9:6d:
78:d1:4d:68:b4:55:6c:9b:b0:94:c2:de:79:49:7f:7d:2b:6a:
d7:1a:c8:e9:2f:0b:2c:03:a4:fc:8a:9a:49:cb:d5:5a:92:41:
57:1f:99:0a:87:4a:3f:41:79:47:bd:25:c5:0b:13:c0:42:ee:
5a:bf:7e:1b:60:66:0c:d5:85:1b:b5:40:73:3a:c0:23:ee:ee:
74:ac:b9:8e:64:b9:26:5a:a2:68:a1:bb:ee:6e:33:ce:ac:65:
5f:b8:db:6f:33:69:2c:43:62:cf:a3:11:a2:c2:3a:a4:4e:b9:
9c:11:75:00:bc:70:5d:68:f0:2d:98:36:70:73:b4:9c:d0:2b:
38:4e:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:55 2026 by rpki-client