Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: NDWE3EM95ZS5tpkysQViOKVhZmdMMAESEsT+0DJ9UQ8=
Subject key identifier: F6:09:D9:D7:6E:C3:EE:E1:64:6E:BB:D5:FF:7C:F1:42:88:62:98:4F
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019F2369E7F401F6B232A19C38872742C24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 11F4
Signing time: Thu 02 Jul 2026 15:19:30 +0000
Manifest this update: Thu 02 Jul 2026 15:19:30 +0000
Manifest next update: Fri 03 Jul 2026 15:19:30 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: gAMnWFJzYM+gkDTQr2ozfs/vlpCGER0tGTMgUcbfQZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:e7:f4:01:f6:b2:32:a1:9c:38:87:27:42:c2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Jul 2 15:19:30 2026 GMT
Not After : Jul 3 15:19:30 2026 GMT
Subject: CN=f609d9d76ec3eee1646ebbd5ff7cf1428862984f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:52:de:ab:89:e6:a6:b2:56:f8:d5:9e:fc:
61:ba:55:82:59:86:c1:0f:6e:c9:29:ad:a5:4d:ba:
30:20:a2:44:dc:60:e7:6e:fc:96:ee:89:0e:96:3e:
05:02:55:cc:de:2e:49:82:81:98:2d:71:0a:e8:f6:
cb:7b:61:6d:a4:72:ad:bb:67:13:81:f4:35:2c:3f:
5d:e3:72:17:93:e3:36:12:7f:c5:7a:14:82:1f:c9:
f7:7e:4b:4f:6a:d9:80:b2:14:3a:3d:57:77:11:2a:
aa:93:10:22:63:7b:ce:bf:6d:dd:b2:67:4c:49:8a:
4f:2e:04:96:45:e0:da:14:35:fa:7c:af:82:c9:fb:
c3:b2:39:26:40:ca:18:aa:1d:7c:8e:9c:52:96:be:
04:91:af:c3:e6:8d:61:e2:0f:52:cc:43:e3:8a:ce:
52:96:47:3e:9a:ac:45:dc:6b:84:59:a1:9e:ce:76:
16:3d:3a:aa:6f:e2:ab:a8:1d:76:1e:df:7d:b0:05:
05:4e:be:bf:49:93:8e:5a:76:c5:01:cf:73:bc:a2:
da:6a:4c:1d:e9:05:9e:f2:48:ac:43:f9:07:3c:ee:
61:2e:f1:38:5c:92:80:14:df:ad:7d:98:21:ae:e7:
b8:08:a0:c9:01:03:11:9b:0c:0f:44:36:4f:b0:14:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:D9:D7:6E:C3:EE:E1:64:6E:BB:D5:FF:7C:F1:42:88:62:98:4F
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cf:8d:9f:be:06:e8:d3:18:5b:ba:01:f9:9f:c8:94:d6:86:
92:6e:c6:4d:cf:39:4e:d6:e6:15:9d:7c:35:0d:50:06:51:4a:
8a:bb:4b:d8:ca:4a:33:f9:75:b4:6b:17:2a:f1:0e:6c:9d:ba:
77:13:b2:ee:19:22:11:06:b7:1d:a5:bb:9f:b3:b0:3e:17:38:
db:f9:00:ce:88:cc:ff:d1:fc:77:9e:d7:e9:c1:13:59:b8:b7:
70:e6:8d:6d:4f:43:ab:38:5b:b3:b3:51:6e:89:3d:32:62:fd:
ac:02:33:4e:8f:11:11:61:78:22:b7:01:12:69:58:cf:fe:ec:
7a:e1:ae:5d:90:03:7c:0d:87:38:49:e7:67:38:8d:82:e6:af:
47:96:89:bf:62:bc:26:59:d3:54:f1:09:cb:95:71:67:3f:26:
8e:8b:d9:50:95:03:45:ae:04:0d:f1:16:39:41:2f:b1:7d:32:
a9:e7:36:ac:09:8d:e7:26:f3:bc:4b:b6:66:c8:d5:5b:10:0e:
cc:b8:c0:d3:bf:fb:b8:3e:3a:0c:42:ca:bf:f0:07:5d:48:fe:
9d:b3:fe:ec:33:90:4a:d3:82:67:58:1a:96:77:cc:79:b6:bd:
c8:f3:ba:04:6d:c7:bd:88:c6:d7:49:99:31:60:f7:0f:97:8c:
ae:89:4f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaef0AfayMqGcOIcnQsJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZWExNzdiY2MyYjBlZjY0Y2FiNjA0ZTZlNjQyN2IxYWRl
MGJmNjkwHhcNMjYwNzAyMTUxOTMwWhcNMjYwNzAzMTUxOTMwWjAzMTEwLwYDVQQD
EyhmNjA5ZDlkNzZlYzNlZWUxNjQ2ZWJiZDVmZjdjZjE0Mjg4NjI5ODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HBS3quJ5qayVvjVnvxhulWCWYbB
D27JKa2lTbowIKJE3GDnbvyW7okOlj4FAlXM3i5JgoGYLXEK6PbLe2FtpHKtu2cT
gfQ1LD9d43IXk+M2En/FehSCH8n3fktPatmAshQ6PVd3ESqqkxAiY3vOv23dsmdM
SYpPLgSWReDaFDX6fK+CyfvDsjkmQMoYqh18jpxSlr4Eka/D5o1h4g9SzEPjis5S
lkc+mqxF3GuEWaGeznYWPTqqb+KrqB12Ht99sAUFTr6/SZOOWnbFAc9zvKLaakwd
6QWe8kisQ/kHPO5hLvE4XJKAFN+tfZghrue4CKDJAQMRmwwPRDZPsBTFKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYJ2dduw+7hZG671f988UKIYphPMB8GA1UdIwQY
MBaAFO/qF3vMKw72TKtgTm5kJ7Gt4L9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZWYwOWItODAyYS00NWY3LTllN2Yt
MDZkNTMwY2VmZDhhLzEvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82ZWYwOWItODAyYS00NWY3LTllN2YtMDZkNTMwY2VmZDhh
LzEvNy1vWGU4d3JEdlpNcTJCT2JtUW5zYTNndjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAos+Nn74G
6NMYW7oB+Z/IlNaGkm7GTc85TtbmFZ18NQ1QBlFKirtL2MpKM/l1tGsXKvEObJ26
dxOy7hkiEQa3HaW7n7OwPhc42/kAzojM/9H8d57X6cETWbi3cOaNbU9Dqzhbs7NR
bok9MmL9rAIzTo8REWF4IrcBEmlYz/7seuGuXZADfA2HOEnnZziNguavR5aJv2K8
JlnTVPEJy5VxZz8mjovZUJUDRa4EDfEWOUEvsX0yqec2rAmN5ybzvEu2ZsjVWxAO
zLjA07/7uD46DELKv/AHXUj+nbP+7DOQStOCZ1galnfMeba9yPO6BG3HvYjG10mZ
MWD3D5eMrolPYA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:03 2026 by rpki-client