Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: Vgs1GPESRjvqqUcCrVKgJpqxa62mKeg5Gl9apRrT5Bg=
Subject key identifier: C2:6F:02:C6:D0:1D:CF:F1:CC:F1:F0:F6:3F:BE:88:E6:2C:F1:21:F5
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 019F2369A8228AB6BBB892463B97DF8F0695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 113C
Signing time: Thu 02 Jul 2026 15:19:14 +0000
Manifest this update: Thu 02 Jul 2026 15:19:14 +0000
Manifest next update: Fri 03 Jul 2026 15:19:14 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: PKgVN+U3RnxVYy0Ly6+q2xxbKZ1mka14ax0mMbxvZRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:a8:22:8a:b6:bb:b8:92:46:3b:97:df:8f:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Jul 2 15:19:14 2026 GMT
Not After : Jul 3 15:19:14 2026 GMT
Subject: CN=c26f02c6d01dcff1ccf1f0f63fbe88e62cf121f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:d3:34:10:1f:77:ae:e9:aa:65:ae:1b:6b:
4b:21:d0:ab:91:d0:be:8b:fd:5b:c2:ca:1a:b4:82:
cc:71:9f:70:2f:25:5e:e0:98:93:6d:d9:f1:b6:09:
28:c6:bc:49:a1:1d:d3:7e:a4:de:06:83:3d:b4:bc:
ec:34:42:50:02:9a:51:cd:63:aa:ae:ab:9e:03:47:
99:19:a4:45:40:5c:cb:41:00:83:54:43:74:ef:bd:
8d:18:2f:6e:9d:29:13:7b:28:1b:be:34:ed:de:e1:
e3:04:77:48:44:d6:83:2e:3b:dd:e2:22:1d:57:a4:
d3:96:1f:04:89:6e:e3:25:34:e6:cc:1b:88:15:97:
0e:3b:e0:1e:22:4c:75:e4:1a:55:5c:7a:88:df:4b:
54:da:7e:25:92:7c:43:65:ab:66:b3:7c:04:37:72:
6e:3e:4f:0e:f0:6a:e6:84:94:51:f2:0e:83:17:d6:
d1:9b:81:a3:09:c5:2d:cf:35:90:3c:f1:49:93:d6:
09:e0:42:07:f1:10:94:0a:73:10:8a:4a:35:d0:b0:
8a:d5:6e:da:a2:8a:33:e9:42:ff:b4:c1:e8:ac:6b:
47:f3:46:52:28:1e:c5:be:c4:19:af:ba:df:63:24:
17:e5:f2:48:b9:26:cc:31:52:2a:32:69:9c:ad:33:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:02:C6:D0:1D:CF:F1:CC:F1:F0:F6:3F:BE:88:E6:2C:F1:21:F5
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cf:5d:e4:32:f0:1f:c5:0f:2e:92:ff:c6:f0:b7:30:24:64:
d2:f9:2d:27:ae:8d:57:fb:f2:ee:d6:d5:09:5f:b6:15:28:78:
ec:ae:2e:32:0e:06:ab:70:7c:8e:1f:26:39:bd:dc:12:d8:2b:
00:13:22:d9:ab:e4:6a:41:0c:5d:d4:f1:e4:ee:7e:ed:19:00:
09:8c:a0:32:e0:40:fc:df:e9:9d:73:cc:07:8c:6a:a2:0f:d6:
f4:55:1b:e0:3a:8e:81:53:ea:78:b7:5e:c9:b0:08:f0:2b:c6:
bb:33:a9:14:51:ce:1a:3d:39:d1:6e:23:50:ba:b0:f0:91:e2:
b7:ea:8c:39:21:0c:7a:37:1b:e7:c4:a0:24:54:75:9d:5c:6a:
95:2e:e4:04:ab:2b:0f:bc:18:df:68:60:24:a8:de:00:5c:35:
9d:f4:6c:81:f4:76:95:9d:0f:9f:22:8d:ec:e7:60:1a:20:0f:
3a:eb:02:a2:07:7d:d8:e4:fc:89:49:fe:d8:13:9b:96:31:f7:
68:87:62:d2:4d:d6:61:c7:ff:b0:64:01:19:56:24:ea:e8:9f:
95:d1:96:5f:d7:9d:f9:bb:7a:85:5c:9e:2b:f5:d8:24:88:8d:
88:9d:08:bb:5c:4e:00:96:00:e1:83:8d:3f:92:f1:14:7c:0f:
2e:74:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:25 2026 by rpki-client