Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File: AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier: CmaNqC74kChNRr/vAQRwMSQLh76By7xNugSxFoAln2I=
Subject key identifier: 7F:3B:07:D0:EB:FC:E6:78:A8:0D:C3:F9:AC:6D:60:EA:8E:C2:C0:21
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 019F236A60120CF89DC85EFFDCC8E30E3000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number: 0E83
Signing time: Thu 02 Jul 2026 15:20:01 +0000
Manifest this update: Thu 02 Jul 2026 15:20:01 +0000
Manifest next update: Fri 03 Jul 2026 15:20:01 +0000
Files and hashes: 1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: 0ZR70tzveqr9eDswEwGyMhV1DpkK/l+JCkS2PZWWeak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:60:12:0c:f8:9d:c8:5e:ff:dc:c8:e3:0e:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Jul 2 15:20:01 2026 GMT
Not After : Jul 3 15:20:01 2026 GMT
Subject: CN=7f3b07d0ebfce678a80dc3f9ac6d60ea8ec2c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:9e:86:fe:c2:85:84:6e:9a:9c:9f:9b:9f:
f9:80:95:46:6c:d3:84:a5:4f:a0:74:ce:03:ef:0d:
80:ad:51:17:97:09:ca:ac:c6:49:2f:2f:7e:ea:42:
7c:87:e3:62:15:15:13:68:7c:b3:18:58:0b:44:bd:
b6:83:54:bb:62:52:3d:79:8f:c8:bb:5c:3a:8e:09:
ea:02:f6:9a:62:9d:4e:04:3a:2a:83:e2:c6:28:5d:
47:e3:48:2f:a2:49:c5:1c:0e:0e:88:22:dc:a1:18:
0b:ed:37:45:fd:8d:3f:c8:53:c8:62:22:f6:c9:ab:
c6:53:99:03:3a:5f:7e:b6:9a:9a:66:d7:3d:19:41:
65:7c:ef:13:22:c0:2c:5b:07:0a:e0:9d:75:87:df:
93:e7:de:2e:cc:66:3c:e8:90:c2:66:a9:29:b5:94:
3a:18:a0:d5:90:b1:1e:2f:82:63:52:f2:d2:ed:a0:
51:a9:8a:12:e3:22:1e:07:a4:67:7c:4f:99:c0:e6:
29:f9:6a:16:ac:01:18:eb:6e:9a:64:ed:05:de:ba:
9d:c9:57:25:7f:cf:48:d8:c7:79:06:ff:b1:9d:4d:
ba:f5:aa:74:94:55:f5:b6:ff:25:4c:18:fe:89:ff:
e9:b4:69:f5:c8:93:3c:12:f3:06:77:75:cd:db:fd:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:07:D0:EB:FC:E6:78:A8:0D:C3:F9:AC:6D:60:EA:8E:C2:C0:21
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:9a:a5:aa:e2:23:5a:75:a2:73:d9:2a:5b:65:de:ea:f2:
ce:16:9f:8e:77:81:29:5d:d4:81:2d:01:d2:01:9f:a5:93:3d:
a2:e0:7f:7c:75:d6:d2:11:9c:b0:2e:44:4c:d8:57:1c:f1:cf:
94:71:55:ce:9a:f4:02:85:42:57:71:5e:5c:0e:eb:b2:3b:2f:
7b:97:7d:59:84:b7:85:a3:7e:17:d7:ce:6b:dc:68:8f:61:8f:
d0:20:79:b1:44:32:b6:d1:ba:cd:fb:e9:e1:d8:11:ed:a6:fe:
86:d8:24:b4:cb:cb:fd:ae:52:8b:6d:37:c4:ab:6a:e7:a1:f1:
06:e1:d0:3f:f6:74:27:8e:b3:85:32:07:40:4e:96:65:21:0b:
77:12:45:16:ee:d6:31:e1:44:5f:54:1f:e0:16:21:53:39:87:
0e:27:21:13:8a:ac:51:31:56:67:9f:2a:61:7d:44:a0:77:76:
5a:78:12:5d:e9:7e:73:82:21:0a:83:5f:f9:ff:da:a3:5b:a9:
dd:d4:6a:14:81:71:07:45:d7:00:bf:4c:30:ed:30:34:73:ee:
65:1b:2b:4e:39:25:04:da:16:fb:48:f4:4c:78:0e:19:36:78:
27:62:09:7f:cb:4b:dd:cc:5f:bc:3c:b2:9d:9a:e5:a8:61:75:
f2:93:60:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jamASDPidyF7/3MjjDjAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzJjMTg3ZDk4YjQ2MDM4MDRlZDExNjVhZGI0NTA5YjYz
MGE4M2EwHhcNMjYwNzAyMTUyMDAxWhcNMjYwNzAzMTUyMDAxWjAzMTEwLwYDVQQD
Eyg3ZjNiMDdkMGViZmNlNjc4YTgwZGMzZjlhYzZkNjBlYThlYzJjMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI+ehv7ChYRumpyfm5/5gJVGbNOE
pU+gdM4D7w2ArVEXlwnKrMZJLy9+6kJ8h+NiFRUTaHyzGFgLRL22g1S7YlI9eY/I
u1w6jgnqAvaaYp1OBDoqg+LGKF1H40gvoknFHA4OiCLcoRgL7TdF/Y0/yFPIYiL2
yavGU5kDOl9+tpqaZtc9GUFlfO8TIsAsWwcK4J11h9+T594uzGY86JDCZqkptZQ6
GKDVkLEeL4JjUvLS7aBRqYoS4yIeB6RnfE+ZwOYp+WoWrAEY626aZO0F3rqdyVcl
f89I2Md5Bv+xnU269ap0lFX1tv8lTBj+if/ptGn1yJM8EvMGd3XN2/0rLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH87B9Dr/OZ4qA3D+axtYOqOwsAhMB8GA1UdIwQY
MBaAFALCwYfZi0YDgE7RFlrbRQm2MKg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMt
N2ZlYjE4YjlmNTUyLzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83MjllYTQtNmE2OC00ODM4LThmZWMtN2ZlYjE4YjlmNTUy
LzEvQXNMQmg5bUxSZ09BVHRFV1d0dEZDYll3cURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfg6apari
I1p1onPZKltl3uryzhafjneBKV3UgS0B0gGfpZM9ouB/fHXW0hGcsC5ETNhXHPHP
lHFVzpr0AoVCV3FeXA7rsjsve5d9WYS3haN+F9fOa9xoj2GP0CB5sUQyttG6zfvp
4dgR7ab+htgktMvL/a5Si203xKtq56HxBuHQP/Z0J46zhTIHQE6WZSELdxJFFu7W
MeFEX1Qf4BYhUzmHDichE4qsUTFWZ58qYX1EoHd2WngSXel+c4IhCoNf+f/ao1up
3dRqFIFxB0XXAL9MMO0wNHPuZRsrTjklBNoW+0j0THgOGTZ4J2IJf8tL3cxfvDyy
nZrlqGF18pNgWg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:12 2026 by rpki-client