Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: rOM8HO+18xWTgGY5nK+ossAeGQf+JjFsKhHmXkg/2iA=
Subject key identifier: 79:A3:C8:AD:88:17:17:A7:78:48:82:9D:8C:D1:57:07:B2:EB:EE:E1
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 019F236A872C7CDE624BCFE6C0B01D13AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 1081
Signing time: Thu 02 Jul 2026 15:20:11 +0000
Manifest this update: Thu 02 Jul 2026 15:20:11 +0000
Manifest next update: Fri 03 Jul 2026 15:20:11 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: /9PpJNeulpRiNed43JAG7+/3sjL1vh9QXE1TxXQwSjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:87:2c:7c:de:62:4b:cf:e6:c0:b0:1d:13:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Jul 2 15:20:11 2026 GMT
Not After : Jul 3 15:20:11 2026 GMT
Subject: CN=79a3c8ad881717a77848829d8cd15707b2ebeee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:57:7e:ef:db:8c:e3:bf:af:c8:78:ca:b3:
f4:c1:27:ac:5b:bb:0d:89:c4:02:a1:fd:a3:72:6f:
25:0f:50:9e:78:4b:07:6a:4a:77:04:e1:e8:c1:af:
d8:74:e1:2c:81:c8:66:78:d9:09:85:62:ff:be:a3:
5c:b7:d6:c5:f9:ee:d9:6c:db:87:9d:41:e7:49:a3:
9d:4e:ac:69:59:49:e2:08:23:26:be:06:f9:59:a5:
72:f6:fb:3d:9e:cf:b5:2d:da:41:ff:a3:05:76:be:
5c:e1:88:c5:ec:a9:75:3b:e1:14:47:6d:52:3f:13:
0f:0b:b8:c2:d0:ba:d2:4d:2f:d3:d0:78:d1:a2:19:
09:9b:ec:26:08:f3:d0:0d:44:89:5b:6b:41:e2:c6:
3e:91:c4:f1:bc:a8:b4:a0:77:95:29:44:ec:c2:f8:
d0:32:59:3e:15:85:e4:c9:df:3a:0f:d0:06:62:38:
ca:91:f8:49:57:eb:5a:9d:74:87:44:0c:e5:b2:0e:
2b:c7:30:ad:54:ec:9e:cf:a0:35:d3:e9:2e:0c:39:
0f:a1:66:3b:11:e8:ab:08:ca:2c:0a:6c:a9:87:da:
96:f3:3e:44:ec:be:96:bd:a3:6b:b1:9c:3a:32:4d:
c1:fd:c6:e5:f2:0d:c6:c7:c2:16:bc:36:7c:fb:0f:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:C8:AD:88:17:17:A7:78:48:82:9D:8C:D1:57:07:B2:EB:EE:E1
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:35:ac:8f:51:e0:59:ad:4b:8d:b7:3d:4e:ee:29:b5:c3:e4:
32:2c:3c:e0:92:04:8b:35:00:ed:db:3b:d0:41:de:f9:54:7f:
3b:78:f5:ba:91:47:12:be:11:d6:56:51:23:06:96:21:58:9b:
8a:dc:b3:95:67:89:f9:42:6f:53:e3:80:47:0f:4d:61:6a:06:
c6:6c:11:0c:2f:5e:a9:50:cf:6c:1b:84:57:00:8d:b3:b7:20:
c6:8f:5c:ae:7c:be:1b:eb:c9:60:84:0c:9b:ec:1c:98:6e:8a:
a1:8e:8d:17:27:ff:81:17:67:b6:5f:80:b5:82:20:51:5b:43:
d4:d1:50:26:a8:86:7e:1c:33:e4:5a:09:6a:59:41:a8:bd:0e:
03:cd:fe:40:83:6b:db:34:66:ff:d6:24:2c:87:24:14:84:40:
cb:de:36:db:e4:b5:dd:f2:9e:5c:04:df:c6:6f:21:07:e6:e1:
0b:48:64:60:ff:c4:85:c9:d1:f4:bd:4d:6b:ce:fa:05:3a:01:
03:38:51:72:c6:c5:02:64:ae:18:1a:97:72:7a:c5:e6:76:21:
99:5d:d7:f9:82:65:16:55:30:6f:38:46:7c:68:c5:32:32:8e:
bd:e1:d4:cd:d9:2a:ae:2a:cd:e7:79:c5:c5:ae:2d:aa:0a:16:
61:ff:de:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:16 2026 by rpki-client