Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json)
Hash identifier: t/XOYIyPdIHZq75Ki4qr90UEf7WkvySTLD6o3O7i+l4=
Subject key identifier: 4C:2C:EB:67:1F:4B:2B:4E:9F:5A:74:C1:D0:73:97:F3:05:E5:0D:29
Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Certificate serial: 019F2247F5A505BC3012604498058219D25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
Manifest number: 1989
Signing time: Thu 02 Jul 2026 10:02:48 +0000
Manifest this update: Thu 02 Jul 2026 10:02:48 +0000
Manifest next update: Fri 03 Jul 2026 10:02:48 +0000
Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: 72JYQ+l/jBnW1T1x9MnJMuxt3kLYa1MxBxmgrGFn+zM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:f5:a5:05:bc:30:12:60:44:98:05:82:19:d2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad
Validity
Not Before: Jul 2 10:02:48 2026 GMT
Not After : Jul 3 10:02:48 2026 GMT
Subject: CN=4c2ceb671f4b2b4e9f5a74c1d07397f305e50d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:02:33:16:2a:ca:89:a5:4a:58:48:f7:d7:
07:dd:6d:78:f1:ba:b7:83:08:33:72:dc:76:d3:eb:
ee:3b:24:5c:d9:58:2f:06:97:0f:f5:84:10:15:77:
7e:de:d6:f6:ab:8c:60:45:14:ff:7c:35:46:02:da:
97:01:98:12:51:78:f0:72:f0:4e:42:5b:5e:6b:bd:
52:f0:3d:4b:6d:57:1c:82:d0:60:44:79:d7:d9:01:
c8:19:b1:d1:85:a5:97:8a:28:eb:6d:22:2d:27:5c:
f6:c3:4e:f7:bd:37:e2:57:e4:a1:0e:6e:88:95:2d:
6d:86:2a:1f:11:33:66:37:92:67:16:dd:2f:ce:fa:
0a:39:aa:be:68:84:7c:95:eb:88:7e:2e:7b:41:b2:
ea:65:00:e4:d3:27:1a:e2:6c:69:32:30:46:19:e5:
2b:b4:0e:58:ef:f8:a4:b1:8e:bb:82:0a:42:c4:6f:
cd:5e:21:8b:09:42:90:ab:25:55:0c:9e:49:1c:fe:
ba:8f:09:37:35:6d:5e:60:28:7b:e7:19:fa:e8:34:
c6:d0:61:62:e6:ac:49:08:03:06:da:64:a9:f6:91:
5c:b5:7f:d3:c4:70:2e:93:60:92:41:27:18:57:6a:
48:f8:d6:1a:7b:36:be:1e:59:0d:2c:5a:5d:b7:ef:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:EB:67:1F:4B:2B:4E:9F:5A:74:C1:D0:73:97:F3:05:E5:0D:29
X509v3 Authority Key Identifier:
keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:e4:99:da:9d:2c:d2:23:32:df:5c:0e:b7:cd:57:da:13:
44:6a:e5:59:8d:e6:7e:ca:ca:dc:ce:86:45:c8:c8:e8:da:4e:
67:7e:9f:ce:d8:0b:ca:8a:6a:6c:a7:35:e1:a2:d5:e1:dc:94:
f3:f1:dc:c3:56:aa:e7:c8:a0:e4:d2:e5:95:f6:83:1f:b6:fc:
e1:0a:8a:a8:67:67:54:b5:d5:6b:96:73:c9:d5:cc:7a:56:6e:
66:ca:0b:61:bc:ae:bc:ee:bc:a6:83:31:ea:88:63:b5:a2:04:
06:22:99:88:19:bb:69:33:b6:19:49:14:3e:d9:41:6b:b5:1a:
14:5e:0b:3d:92:e8:8a:47:6d:2b:83:aa:c0:59:ca:e7:40:66:
b9:fe:e9:9e:a1:14:15:bf:62:cf:06:bb:6c:41:ec:0d:ff:9b:
60:22:6f:83:3a:b2:0b:9a:ba:d2:75:d0:e2:fa:7c:2d:dc:28:
23:74:e9:6d:a7:17:b3:0c:a8:2e:11:e5:ba:b5:25:2d:12:2d:
5c:57:e1:d8:48:42:f7:2d:b0:a3:5c:b3:cd:8a:ee:5c:dd:a8:
30:ab:46:2f:f8:7a:fc:d3:41:29:88:d4:87:1e:aa:53:fd:21:
90:a3:af:23:ce:8c:82:5e:65:ca:02:8e:19:93:6a:64:02:8b:
7f:15:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:16 2026 by rpki-client