Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: Qc+5iG+lMYyWBL0qFUaS70nuSeax8mMKSFDPC/017K0=
Subject key identifier: D8:77:5D:9B:28:63:E2:7A:C4:FC:29:4D:DA:A4:D2:B8:9C:9F:DB:EE
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 019D2DAA345F7D2BCB530FD49B8171A883C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 150A
Signing time: Fri 27 Mar 2026 05:00:22 +0000
Manifest this update: Fri 27 Mar 2026 05:00:22 +0000
Manifest next update: Sat 28 Mar 2026 05:00:22 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: i9EYTDGOYzSOsHuBqfnHcHL0rxYmXu21LeeNJ9xt4MI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:aa:34:5f:7d:2b:cb:53:0f:d4:9b:81:71:a8:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Mar 27 05:00:22 2026 GMT
Not After : Mar 28 05:00:22 2026 GMT
Subject: CN=d8775d9b2863e27ac4fc294ddaa4d2b89c9fdbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:7f:e4:c6:ae:32:2c:3f:21:7f:ea:80:72:
d3:66:2f:e0:80:6b:0e:76:90:31:81:c1:b8:cb:13:
f5:59:28:a7:91:f1:90:f3:9c:8e:61:85:34:eb:7c:
fa:a6:d6:c4:be:b7:41:a0:80:ce:cb:5d:02:d7:56:
3d:7d:13:4b:2c:29:29:3e:52:aa:d5:a0:6b:bf:db:
80:be:28:d6:8c:ec:51:d3:bd:1c:99:6f:fb:98:e2:
3d:be:06:f6:47:82:b3:3e:b2:d4:3f:68:dc:8e:93:
c6:3a:7b:00:47:25:43:8a:b5:c1:21:03:fd:57:d7:
e3:69:43:ef:ca:78:2b:60:3c:26:6f:f3:54:76:ef:
4b:c1:49:c3:c5:9f:32:f7:5c:72:e5:32:d5:d5:97:
d6:1b:e6:0d:1a:1c:1d:98:f8:80:62:fa:6d:b7:9d:
bb:7f:24:02:d8:03:1d:24:84:64:53:c9:5d:b2:c7:
88:9f:33:23:6e:c5:97:a7:97:f8:bb:22:8d:8f:43:
94:e9:c3:1c:e8:26:8a:0f:6f:e4:db:ea:20:7e:57:
d4:ba:19:ee:eb:fd:23:7f:c0:da:7c:e0:60:7e:c1:
c5:60:3d:98:c3:d4:1a:98:95:a9:83:41:45:b7:a1:
39:86:fc:c4:60:6e:6e:09:77:87:e1:4e:48:81:43:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:77:5D:9B:28:63:E2:7A:C4:FC:29:4D:DA:A4:D2:B8:9C:9F:DB:EE
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:06:00:c7:60:bf:98:94:a3:ec:74:e7:78:50:c2:7e:26:93:
f3:1a:be:0e:ba:3b:e8:81:bf:c8:a1:75:f0:5d:2c:d7:6a:d2:
e7:b8:5e:ba:a9:60:f9:fa:20:44:e9:b5:89:d2:cd:93:5d:bc:
7e:7a:99:9b:34:74:b8:df:be:c4:fa:af:2e:54:9a:b8:67:8e:
50:8f:31:cb:bb:a3:9f:47:1b:d2:7e:79:18:95:a9:e1:6d:c2:
28:07:e9:ce:f8:e2:ac:41:c0:ba:38:4f:f7:7c:e9:9c:a7:8a:
6f:4e:b5:40:1a:e4:c4:96:cb:d0:a1:02:62:f4:1a:a5:d9:a7:
fe:7b:75:88:ae:6b:cd:92:34:96:1a:49:32:51:cf:48:33:b0:
a1:3c:4b:bd:cb:b1:9e:30:ee:dc:33:ec:c6:a8:2a:c4:f4:78:
dc:03:48:7e:97:1b:73:ef:c0:03:d8:1b:68:f5:f7:4f:77:bc:
34:d3:b8:08:08:e2:fc:56:97:5c:dc:d7:fe:9d:e7:58:5b:c2:
1c:a7:1b:45:8c:9c:ff:00:7c:67:86:71:8e:44:00:d1:15:80:
44:32:00:e4:23:d1:10:1e:e7:91:ed:8c:04:56:7c:35:94:4f:
a0:29:dd:dc:d1:77:bd:a7:e6:ba:9a:53:94:69:7e:ff:39:2a:
41:60:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:51 2026 by rpki-client