Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File: 02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier: CfXxIRXYJw4X/OzL7dElyUNSwwBJJW4ezlFygHPe5nY=
Subject key identifier: A5:53:CC:86:BD:80:12:A1:93:8F:D5:71:CA:D9:68:B7:DB:73:05:57
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 019F2369CA8F54A97781BE93750F08D2BB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number: 1990
Signing time: Thu 02 Jul 2026 15:19:23 +0000
Manifest this update: Thu 02 Jul 2026 15:19:23 +0000
Manifest next update: Fri 03 Jul 2026 15:19:23 +0000
Files and hashes: 1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: MmyJYhu8sPDjDiISrozESj1HKthLzPrpntdICBV119U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:ca:8f:54:a9:77:81:be:93:75:0f:08:d2:bb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Jul 2 15:19:23 2026 GMT
Not After : Jul 3 15:19:23 2026 GMT
Subject: CN=a553cc86bd8012a1938fd571cad968b7db730557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:7c:cc:c9:b8:4b:11:d7:b1:a1:64:be:db:
7e:64:e5:45:ba:06:f0:7f:49:6d:11:d3:c0:9e:7c:
fb:0e:ad:bb:f1:d1:3e:86:d0:1c:06:4d:de:38:22:
ed:35:58:66:b9:7a:e4:f3:e0:ba:64:06:90:bb:a7:
bc:6a:66:f4:bb:90:39:af:f3:9e:3e:fc:22:97:54:
62:dd:0f:d5:90:f8:8f:ce:09:5c:9b:c8:3f:5f:b8:
92:c6:ef:69:6e:d0:88:65:cd:e9:c2:7e:79:7d:29:
bc:a4:d6:c5:84:78:16:b8:59:4b:49:17:a6:2e:90:
47:e9:c5:03:05:f4:43:be:49:7b:d8:f4:e6:8e:ed:
b6:b5:0b:06:7d:28:53:72:d4:4e:29:bf:34:48:7a:
dd:65:d0:e0:16:4e:ab:71:c6:8f:28:58:6e:11:ae:
26:48:dc:f4:a9:41:b6:54:c8:da:8e:1c:3b:a6:b9:
b2:3b:cc:5b:e2:83:68:57:c2:13:0e:10:54:12:10:
69:41:0b:f1:70:5c:3b:8a:11:ac:6a:88:b9:ee:be:
98:d7:05:ba:b5:34:1d:45:04:86:c9:4f:92:c2:ce:
fa:a0:75:e6:00:d9:6e:1a:ab:a2:95:95:7c:24:b6:
10:f6:06:7b:9e:61:46:50:20:a4:fe:b2:68:6b:9b:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:CC:86:BD:80:12:A1:93:8F:D5:71:CA:D9:68:B7:DB:73:05:57
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:87:65:a9:94:e3:fe:cd:a7:3b:ce:9f:fb:d8:e5:22:9c:df:
9b:74:84:44:0d:68:21:3c:60:53:80:23:6a:7c:5a:c4:11:97:
98:ee:e2:7f:ef:34:3b:c9:68:1d:34:1d:80:d3:41:bb:60:45:
d2:55:a7:24:76:a8:2d:19:7e:f7:0c:5d:34:64:b2:c2:a8:7b:
cb:5e:e6:9d:a7:ac:e1:97:2e:ae:2c:2d:33:55:c8:95:ad:19:
cc:31:a3:12:01:19:08:dd:db:07:da:82:69:4f:e1:7c:65:79:
6e:7c:30:3c:87:62:9f:1c:f0:9b:8c:45:ab:0a:d9:81:c0:73:
32:3b:9e:55:cf:e2:7e:fa:aa:3a:4a:54:ae:ff:f7:13:1e:de:
cf:9e:37:ef:4c:b2:50:cc:91:86:c1:2c:33:28:bf:60:ce:86:
12:94:33:11:03:84:92:39:8e:94:94:db:ac:02:61:cf:4d:a3:
12:45:75:f0:6b:a4:ca:cb:26:c8:20:ec:d7:78:e9:2b:91:26:
d1:0c:31:a2:d0:8c:65:df:8d:83:d2:2f:7b:b1:13:b4:34:2e:
59:ac:37:66:f7:48:a1:64:2a:0c:ea:7c:9f:f0:a0:ec:1e:f7:
ce:82:7f:ac:be:a6:31:b0:cc:71:d4:23:cb:6c:26:50:16:3d:
1c:89:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:44 2026 by rpki-client