Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: Xr+JDH13QLllguPvqYdds4HtgRXBo59bSOToTIdZdSk=
Subject key identifier: 4B:22:2F:AC:AD:88:26:0C:14:1E:91:3E:26:66:76:5A:6F:F4:9E:A8
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019F2369FECA811B119DD6683FBE272B62A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 12B7
Signing time: Thu 02 Jul 2026 15:19:36 +0000
Manifest this update: Thu 02 Jul 2026 15:19:36 +0000
Manifest next update: Fri 03 Jul 2026 15:19:36 +0000
Files and hashes: 1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: +DmimcwFV/2sXvVGDSW/O5FNO60P37+Rsv2CP8/e/W8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:fe:ca:81:1b:11:9d:d6:68:3f:be:27:2b:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Jul 2 15:19:36 2026 GMT
Not After : Jul 3 15:19:36 2026 GMT
Subject: CN=4b222facad88260c141e913e2666765a6ff49ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:ba:24:37:ab:92:dc:a0:30:55:94:83:4d:
cc:e3:94:4b:45:dc:b9:fc:58:d6:cb:59:e9:b4:17:
5e:cf:47:24:fd:f6:cd:f3:6b:64:1f:4b:2e:f7:24:
01:88:27:d0:a8:d7:b1:17:32:a7:24:9f:fe:bf:61:
89:58:a5:b0:73:8a:f3:21:02:a4:81:de:9c:f6:7d:
e6:2b:f7:88:01:cb:fe:0c:66:83:57:c3:e2:28:8d:
b5:be:da:37:a7:57:ac:86:76:da:45:89:a7:61:3c:
84:90:7f:9f:15:00:c9:96:72:68:a9:59:02:0d:71:
88:b0:90:89:fd:8f:be:11:97:2a:51:5c:f0:6a:9c:
e2:d7:c6:b0:85:aa:c8:cb:fd:f1:51:ee:e1:d5:ac:
07:ad:b2:e6:80:23:f2:39:70:94:8e:b2:fe:b2:66:
51:da:86:21:53:6c:30:e7:69:25:16:70:35:99:31:
08:26:94:af:bf:b5:d6:70:0d:d7:d3:e5:8a:53:8e:
96:8d:ea:ae:36:24:ad:47:f3:5e:eb:b5:86:08:02:
dc:bd:9f:44:09:8f:28:18:a1:bf:96:39:bc:f5:86:
c2:cd:18:6c:e2:76:17:84:d2:ad:a2:c8:b1:e5:5c:
c7:16:84:4c:fd:90:bb:d1:66:12:f6:f7:dd:9e:c9:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:22:2F:AC:AD:88:26:0C:14:1E:91:3E:26:66:76:5A:6F:F4:9E:A8
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8c:01:d6:6c:1b:83:aa:c1:9d:f2:e3:49:79:b5:0d:19:23:
b4:17:ef:8e:3d:7f:94:6a:9a:c1:d5:d3:a3:cb:38:37:a9:93:
49:7a:c4:4f:bd:e7:e8:a3:83:51:40:7c:4c:77:20:55:db:32:
e3:a7:d9:e6:73:03:12:7d:ba:bd:48:a2:11:74:ca:53:49:de:
25:0f:86:53:1e:6d:ea:f7:f8:d5:50:de:8f:89:ac:58:6d:95:
11:84:9c:6a:93:18:68:0c:e7:54:9d:70:99:e9:a4:22:7f:0f:
9d:91:ed:20:59:1f:de:c6:ca:ba:e2:8a:02:f7:5a:76:35:57:
fe:7e:0d:0d:59:c4:36:8a:91:bd:63:cb:38:cc:bd:a4:c9:27:
02:3c:30:d7:31:18:de:e3:e3:e4:81:f4:83:6b:1e:d2:86:bf:
5a:e1:fd:37:4d:73:ba:aa:c2:ad:05:8b:6d:6b:79:f8:2a:02:
ae:1f:11:bb:9a:fc:af:99:b7:18:4f:c3:db:0b:35:f9:1a:a0:
6f:1b:7f:e9:b3:f7:71:c4:fb:35:15:93:fa:b2:22:30:23:bb:
b4:54:25:bd:bb:27:ef:d9:12:ee:9b:5d:98:d7:56:39:eb:5c:
7e:5c:d4:45:46:d6:da:88:b9:1c:d1:6d:b2:c1:3f:54:a0:00:
c5:0f:21:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jaf7KgRsRndZoP74nK2KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMWU2ZDVlNzJkYWY0MTA4Y2Y2MGJkNDdlOTM2ZGYxYTFl
OTcyMjYwHhcNMjYwNzAyMTUxOTM2WhcNMjYwNzAzMTUxOTM2WjAzMTEwLwYDVQQD
Eyg0YjIyMmZhY2FkODgyNjBjMTQxZTkxM2UyNjY2NzY1YTZmZjQ5ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTW6JDerktygMFWUg03M45RLRdy5
/FjWy1nptBdez0ck/fbN82tkH0su9yQBiCfQqNexFzKnJJ/+v2GJWKWwc4rzIQKk
gd6c9n3mK/eIAcv+DGaDV8PiKI21vto3p1eshnbaRYmnYTyEkH+fFQDJlnJoqVkC
DXGIsJCJ/Y++EZcqUVzwapzi18awharIy/3xUe7h1awHrbLmgCPyOXCUjrL+smZR
2oYhU2ww52klFnA1mTEIJpSvv7XWcA3X0+WKU46WjequNiStR/Ne67WGCALcvZ9E
CY8oGKG/ljm89YbCzRhs4nYXhNKtosix5VzHFoRM/ZC70WYS9vfdnskIRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsiL6ytiCYMFB6RPiZmdlpv9J6oMB8GA1UdIwQY
MBaAFAwebV5y2vQQjPYL1H6TbfGh6XImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt
YTI5NTgxM2YxZjgyLzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy
LzEvREI1dFhuTGE5QkNNOWd2VWZwTnQ4YUhwY2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIwB1mwb
g6rBnfLjSXm1DRkjtBfvjj1/lGqawdXTo8s4N6mTSXrET73n6KODUUB8THcgVdsy
46fZ5nMDEn26vUiiEXTKU0neJQ+GUx5t6vf41VDej4msWG2VEYScapMYaAznVJ1w
memkIn8PnZHtIFkf3sbKuuKKAvdadjVX/n4NDVnENoqRvWPLOMy9pMknAjww1zEY
3uPj5IH0g2se0oa/WuH9N01zuqrCrQWLbWt5+CoCrh8Ru5r8r5m3GE/D2ws1+Rqg
bxt/6bP3ccT7NRWT+rIiMCO7tFQlvbsn79kS7ptdmNdWOetcflzURUbW2oi5HNFt
ssE/VKAAxQ8h0g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:08 2026 by rpki-client