Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File: VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier: //Zx9P323zEvfsuDRnA6uQ+VetIywKE0yf0Jwr+vizQ=
Subject key identifier: ED:ED:5E:28:E4:58:8C:8F:91:1C:8E:74:C6:E5:F1:21:D0:50:63:85
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer: /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial: 019BD95A1B0396CB27B496C3A925AE10759C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number: 0645
Signing time: Tue 20 Jan 2026 03:01:59 +0000
Manifest this update: Tue 20 Jan 2026 03:01:59 +0000
Manifest next update: Wed 21 Jan 2026 03:01:59 +0000
Files and hashes: 1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: rQE9FKhlqMMuykQoQ+SGAzolW+6RfIRWOMSjiOKcTJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d9:5a:1b:03:96:cb:27:b4:96:c3:a9:25:ae:10:75:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Validity
Not Before: Jan 20 03:01:59 2026 GMT
Not After : Jan 21 03:01:59 2026 GMT
Subject: CN=eded5e28e4588c8f911c8e74c6e5f121d0506385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:68:90:ff:21:7f:7d:24:36:da:4f:c6:59:
a8:c1:7a:43:00:80:f9:40:a6:e3:a8:4b:bd:8c:d5:
4d:9d:74:c5:54:09:3b:c6:cc:1f:c6:b1:3c:a0:16:
b3:e3:f7:f9:4b:61:ab:31:07:1f:ac:8a:2c:d6:e9:
85:34:62:9c:ab:17:5b:12:0d:7e:87:58:8a:aa:7a:
ea:db:cc:13:02:8e:b2:f5:72:c3:e4:6a:c5:e7:a9:
fe:9b:3e:26:90:8a:00:f9:36:34:d2:3a:63:fc:4e:
49:2c:cd:e3:81:ab:84:59:c5:19:e2:19:e6:f3:69:
f9:9f:c8:e0:f3:85:d0:ee:90:bd:58:d3:a3:b9:9a:
b1:b9:4b:a3:c1:90:6f:c6:d3:cc:a7:e8:e2:2e:54:
49:78:2b:81:b9:9a:47:65:a1:1e:97:47:a8:d8:dc:
f9:ec:b7:5f:08:f9:a2:5e:c8:46:8d:1f:c8:c5:15:
b3:b5:02:14:22:7e:12:f7:3a:d9:83:8d:58:f1:91:
3b:f5:30:61:b5:c5:ef:4d:17:31:ef:5b:fb:ca:6f:
eb:8e:61:e6:21:20:d2:18:69:ec:d6:77:89:b9:09:
c5:5c:3b:b8:9a:46:2b:1f:01:f1:13:6c:81:75:04:
2b:d1:68:d7:50:f0:4c:c6:87:1f:49:1a:d5:13:0d:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:ED:5E:28:E4:58:8C:8F:91:1C:8E:74:C6:E5:F1:21:D0:50:63:85
X509v3 Authority Key Identifier:
keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:0b:31:2b:62:44:e1:56:64:e2:55:06:7f:29:e2:09:c5:
ab:98:8f:81:4e:41:81:ab:5b:b7:d3:b3:48:e8:51:bd:06:82:
39:50:cd:52:de:d4:b9:de:9b:bb:66:c1:67:e8:71:dc:cf:81:
92:63:64:ee:1a:c6:1f:63:19:08:3e:16:5b:ca:58:78:72:cd:
a1:9a:3e:04:e0:f8:64:c8:06:9e:15:f9:08:8c:69:fc:20:5c:
8e:18:95:2a:93:21:f9:4a:48:2d:74:56:08:4d:4d:00:65:1a:
17:4a:50:e7:75:3e:b8:58:c2:b9:75:32:c7:3f:51:75:92:6a:
63:bc:43:58:e8:eb:bc:d2:1f:59:a9:86:ab:ae:fd:a8:9f:ba:
6d:03:09:8d:44:19:78:6a:62:1e:19:11:9a:23:b0:64:79:dc:
7c:a1:59:90:4b:b7:0d:79:42:a7:56:42:7b:a9:61:71:67:23:
c8:39:43:a0:45:8b:2f:cf:f0:50:59:e0:83:b7:cb:5b:f4:da:
71:17:fd:05:d8:ac:3a:63:eb:c0:e9:b3:a4:0c:ed:63:13:dc:
a8:d5:12:b1:41:4c:59:ff:55:19:3c:04:fc:5f:6c:7e:f4:93:
1a:61:6e:50:11:a3:c5:ee:56:50:a5:b6:27:6b:a6:4e:fe:06:
f6:d1:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:20 2026 by rpki-client