Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: pXrC/Qgza0yfjM1nVgIffrFctnpRhLP1uHsf4KueXRg=
Subject key identifier: 03:F9:C0:D8:E2:66:98:AF:DF:29:C8:F9:48:CB:E3:C9:4A:F4:1D:42
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 019F21D9CB8A147369FCBC1D30065F227949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 1096
Signing time: Thu 02 Jul 2026 08:02:29 +0000
Manifest this update: Thu 02 Jul 2026 08:02:29 +0000
Manifest next update: Fri 03 Jul 2026 08:02:29 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: AuyZYNbAPIHv0T66UY5rurCG+dHVPN526Ic8AURfUeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:cb:8a:14:73:69:fc:bc:1d:30:06:5f:22:79:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jul 2 08:02:29 2026 GMT
Not After : Jul 3 08:02:29 2026 GMT
Subject: CN=03f9c0d8e26698afdf29c8f948cbe3c94af41d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:0f:d4:6d:91:06:92:e6:ce:96:c8:fb:90:
22:ba:b3:6b:6a:6b:cb:16:20:fc:b5:b1:97:89:af:
78:7c:5e:ca:47:b2:54:a0:42:c5:89:df:c1:60:4f:
b2:41:af:c0:b0:5d:e0:0f:09:56:66:29:20:3f:48:
c5:90:45:22:3a:75:06:63:23:b3:9e:dc:1d:a0:eb:
c5:b1:63:b5:1d:ef:b0:4a:4e:3a:02:fa:fc:06:bf:
44:1f:fc:33:ce:a4:72:86:bf:ee:c6:03:30:87:42:
df:5c:eb:ab:0a:fb:a5:01:4d:7d:71:37:e6:95:61:
b6:99:5c:fc:6c:a7:ce:bc:e3:ce:0f:0d:ca:12:42:
00:43:76:e6:5f:1b:ba:76:52:28:42:c8:ea:e2:0e:
a4:2a:b1:3c:86:23:1b:d4:f0:89:46:87:21:46:ee:
98:cf:48:fe:3c:24:6d:3f:7e:52:fd:db:26:1a:9b:
30:13:e8:52:36:5b:68:72:6c:6c:53:bf:20:cf:97:
22:46:a0:d7:1c:95:52:5f:9f:10:32:1c:4c:a7:56:
0f:54:cf:89:76:54:6f:e2:73:2e:1f:2d:b6:f9:33:
b5:ae:40:04:0a:e6:8c:33:5a:64:d7:73:ea:be:fa:
77:21:d6:d5:6c:56:70:63:2e:65:23:0e:dc:6c:8c:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:C0:D8:E2:66:98:AF:DF:29:C8:F9:48:CB:E3:C9:4A:F4:1D:42
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:f0:c3:ed:bb:d9:74:f9:01:05:cf:9e:c8:38:6a:3b:29:
6f:ce:d7:19:5d:82:3f:db:00:3b:70:b7:b8:61:00:90:45:e3:
32:5b:d4:1f:1f:35:49:d5:53:c0:4f:e7:81:bc:2f:fe:73:ab:
c9:59:29:54:ba:8a:5f:6e:54:59:66:86:28:25:20:ed:d0:37:
a8:94:2b:c6:4f:55:25:bb:74:fc:bc:40:f4:21:54:25:0e:9d:
93:69:8d:de:aa:dc:0e:da:34:08:ec:47:2e:7e:eb:ae:68:1c:
e0:80:a1:3c:0c:83:4b:65:9f:42:fc:d7:1a:48:f5:9c:f3:09:
b1:2a:d6:96:da:d8:53:04:d1:5e:5e:37:10:1d:c1:64:e3:14:
3e:21:22:73:24:81:7c:b6:c5:4a:a4:14:ce:fe:03:1d:f3:55:
89:b6:42:5a:56:40:a6:30:17:9d:6d:a0:57:32:59:ca:96:3b:
36:1e:f0:cd:83:bd:17:8b:4c:4e:1d:e7:fb:b7:55:5f:7c:a2:
e6:23:92:eb:af:05:28:5a:5f:c0:02:50:98:17:85:66:3f:77:
41:73:88:cf:2f:6b:ba:2d:e8:67:de:f4:af:4b:8d:4e:1f:14:
f1:97:19:cd:73:f7:8b:a9:30:c4:b3:47:32:ea:c7:51:19:7f:
6f:c2:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:44 2026 by rpki-client