Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: tr+G0FE1AR6t+xNrONgWEf35KLkB9TZkBxliF16jcoQ=
Subject key identifier: 6C:7B:5C:5B:01:94:F8:6D:E4:EC:14:7D:25:86:86:42:3B:04:71:56
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019F2369ABC4DA5662D9DC4E2371BF7A4CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 155B
Signing time: Thu 02 Jul 2026 15:19:15 +0000
Manifest this update: Thu 02 Jul 2026 15:19:15 +0000
Manifest next update: Fri 03 Jul 2026 15:19:15 +0000
Files and hashes: 1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: q1/EK1CJXOBeBrsRDjAoXCcMI9p9theXnCDuhT7Nn2w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:ab:c4:da:56:62:d9:dc:4e:23:71:bf:7a:4c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jul 2 15:19:15 2026 GMT
Not After : Jul 3 15:19:15 2026 GMT
Subject: CN=6c7b5c5b0194f86de4ec147d258686423b047156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:52:97:a0:cc:f0:fe:c7:bd:f5:28:c5:c2:
a5:8e:58:45:24:a4:45:3a:dc:ba:d1:9d:f0:b9:aa:
b0:1e:8c:23:ee:41:e3:0a:c1:4b:63:63:af:23:de:
61:35:56:5c:26:0f:d6:80:db:d1:17:db:df:0d:d7:
c7:ea:0f:f8:c1:1c:4e:17:b8:ed:ce:09:14:5d:f7:
b4:f1:42:32:cf:05:41:53:8b:a2:24:e4:95:73:28:
59:37:d0:0e:be:22:c9:79:e1:6e:ad:29:7b:1e:69:
26:06:a3:22:bf:71:87:d9:e9:69:b9:e7:42:2a:a5:
2a:7a:27:cc:bd:0a:4a:a8:6a:2c:8d:16:f3:a7:23:
32:af:cf:a6:e0:ce:4a:fc:09:ba:79:c7:3f:11:06:
b2:e1:52:28:ef:2f:b1:66:77:65:ed:e3:a6:bc:5f:
b2:a5:fc:e6:a4:62:50:b1:7e:88:e0:95:a3:dd:e3:
7b:3d:2a:2e:fd:38:1a:45:17:b0:dc:ba:c3:18:16:
f4:21:cf:af:e9:30:e7:a7:ff:b1:d1:d9:41:9e:11:
37:ad:e5:0a:fb:2d:f9:29:a2:4e:23:a5:46:cc:e3:
6d:fc:a9:65:15:31:d3:9d:01:be:cd:bb:7b:5e:50:
3e:98:3c:a4:74:0a:af:3d:7a:b4:fc:28:32:7f:77:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:5C:5B:01:94:F8:6D:E4:EC:14:7D:25:86:86:42:3B:04:71:56
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:03:4a:c9:ed:2a:2c:e6:7b:d9:6a:65:e8:b5:ff:b5:05:f8:
ed:e9:9b:a2:ed:54:ac:0c:17:c2:08:7d:51:eb:fb:06:a0:0c:
06:c9:0f:f1:30:1d:0c:9b:dd:39:cf:45:90:ad:05:2f:f5:3e:
39:2a:2c:96:8a:d8:27:9b:8a:8d:1d:ce:10:2c:86:1b:90:b8:
47:ea:77:3e:39:e6:f1:cc:b2:62:a8:a9:fe:0f:5f:3f:b6:d2:
94:43:23:e2:51:54:ed:1d:9c:35:a8:af:f6:2b:1d:dc:2e:ae:
8b:30:40:27:7e:14:dc:fa:9a:09:e9:56:1f:8b:60:45:7b:7b:
d4:08:66:db:e6:10:74:2c:27:45:ec:d0:36:4a:1f:8f:84:d4:
ba:e5:96:1b:db:65:67:f2:4b:b7:dc:c9:82:00:27:e3:19:d4:
76:07:cb:93:d0:84:7c:b5:77:02:cc:ce:6e:f6:50:a3:45:53:
d1:16:f7:51:77:44:56:18:1e:76:3e:25:32:16:14:30:80:fc:
a0:3f:12:c0:34:6c:23:8f:55:b1:53:d1:21:d7:76:38:77:69:
3d:bf:7a:79:fb:f4:b3:fd:90:a2:cb:43:ba:90:f3:3e:88:7c:
f3:68:6a:ae:cf:4e:a9:49:b9:4b:16:19:37:7d:a8:fa:53:b3:
64:fb:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:42 2026 by rpki-client