Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File: 2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier: D/oZ0zpJvhe8ywImWkbC26igQIE4QfFMJZGtF5ooWnA=
Subject key identifier: D5:2D:7F:F4:AA:46:D9:E3:7B:BB:C6:AA:C1:89:CD:C9:05:8E:B6:3C
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 019F236A6A24C40B58272C4EADDF0CEFA07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number: 160A
Signing time: Thu 02 Jul 2026 15:20:04 +0000
Manifest this update: Thu 02 Jul 2026 15:20:04 +0000
Manifest next update: Fri 03 Jul 2026 15:20:04 +0000
Files and hashes: 1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: wE566KQGIHAqWvvUBSVJvdKgG2IX6uiTrq6ZU65+qB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:6a:24:c4:0b:58:27:2c:4e:ad:df:0c:ef:a0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jul 2 15:20:04 2026 GMT
Not After : Jul 3 15:20:04 2026 GMT
Subject: CN=d52d7ff4aa46d9e37bbbc6aac189cdc9058eb63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:d0:64:d4:cc:0e:cb:08:59:ba:51:4e:16:
47:59:61:5f:49:56:c1:b2:9d:24:46:bd:97:47:9b:
2a:2b:5c:ac:a7:e5:21:bf:33:8b:e8:e6:a8:07:cc:
7b:90:45:9e:b4:62:4b:1c:23:1a:b8:eb:7a:4a:49:
58:9a:d6:05:fd:5d:9f:87:df:19:18:1a:9b:c8:70:
b7:bb:23:90:9b:29:86:59:55:65:fa:5f:a3:d6:02:
16:ae:28:4e:af:83:65:18:81:1a:37:23:6e:df:8f:
d0:bb:0a:18:27:65:78:c0:ab:96:4c:91:89:1d:37:
d9:c0:8d:1d:ef:bf:63:36:c6:8c:8a:71:60:7c:26:
35:c4:71:89:5d:3b:8e:c0:61:18:f7:1d:bf:c0:f8:
95:aa:df:17:9e:7e:35:97:af:2b:54:26:97:c5:f6:
9d:c0:28:36:94:37:80:fd:a0:62:7a:66:5e:fe:51:
cc:d8:25:a7:fe:d8:33:f9:e8:5a:b2:6d:64:9e:34:
51:ef:53:f2:e8:24:e7:6d:72:db:02:a6:d2:29:a0:
f1:2e:21:55:f1:6b:52:c8:65:28:b0:00:ab:af:86:
55:92:ca:2e:a2:19:39:d5:09:c0:a6:50:36:86:b7:
39:16:2d:e6:9c:d2:b0:bf:48:13:cc:ae:97:49:b5:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:7F:F4:AA:46:D9:E3:7B:BB:C6:AA:C1:89:CD:C9:05:8E:B6:3C
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f3:fe:f4:c4:b8:89:1b:14:fa:88:8f:3f:86:0c:db:c5:84:
f7:90:e1:ea:8e:2d:3d:cb:35:79:0e:64:79:b7:c0:61:07:2c:
d9:e1:97:50:3a:33:14:ac:e0:6e:b1:72:6f:f9:83:7a:4d:63:
25:94:a9:02:71:b9:99:6c:de:7b:87:84:99:40:a4:50:9d:76:
b0:22:bc:ce:e8:0b:1d:91:a8:89:6a:c0:94:7e:1f:7d:25:f6:
8f:7b:7c:43:5b:da:c0:fc:eb:44:f8:3b:e7:67:b7:dc:b5:33:
f9:9d:5d:41:e7:d3:7a:52:4e:53:81:eb:c8:5c:89:ed:4a:ac:
83:33:5b:b7:62:28:c1:c0:b4:86:5f:2f:ad:66:a0:b2:44:d1:
58:61:23:97:09:50:ec:0e:c5:29:7b:72:10:f7:46:4a:90:22:
7b:44:4d:52:5f:cc:ca:d2:73:4b:14:b3:5d:79:ee:11:73:75:
00:b5:af:78:33:9d:45:fb:51:92:ce:e7:81:c3:90:85:cc:cf:
4e:a3:1f:97:25:68:c5:33:61:e4:59:ad:a4:ae:82:f9:5d:c2:
29:78:e5:3b:eb:0e:d5:99:a8:aa:c5:d5:1f:f3:4c:ed:8e:1b:
38:c7:6e:c6:17:22:46:59:76:6f:a4:ed:38:f8:be:3e:93:21:
73:b8:87:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:57 2026 by rpki-client