Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier: Q92d9mMjeVOARVtUBUQmT11CGnynMDmQlmjoAPBV3uM=
Subject key identifier: 72:E3:F0:62:F6:34:0E:93:FB:14:36:6F:34:EC:A5:6A:20:16:B0:86
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 019F2369C0E1695EA72C16D043D68FDF812E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number: 1022
Signing time: Thu 02 Jul 2026 15:19:20 +0000
Manifest this update: Thu 02 Jul 2026 15:19:20 +0000
Manifest next update: Fri 03 Jul 2026 15:19:20 +0000
Files and hashes: 1: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: lwQNHiswjznAKaVj2V/F23XeRxVBO8XATKY54Q6yKLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:c0:e1:69:5e:a7:2c:16:d0:43:d6:8f:df:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Jul 2 15:19:20 2026 GMT
Not After : Jul 3 15:19:20 2026 GMT
Subject: CN=72e3f062f6340e93fb14366f34eca56a2016b086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:c2:99:29:b3:cb:09:6d:c7:3a:60:9f:56:
74:30:47:28:a5:ae:77:41:1f:78:d1:75:b6:ea:a6:
47:a5:b9:b5:e1:63:f7:15:fa:4a:29:32:a8:d4:fa:
ee:3e:9e:23:bb:7c:b2:c2:9c:67:60:c2:0c:f6:58:
dd:b9:84:a1:4f:f4:18:b7:81:01:d3:8d:50:18:f5:
71:85:c0:ce:c2:a1:be:81:7c:43:e6:9b:30:06:cc:
9e:dd:82:94:39:d5:78:9e:6a:66:ef:73:63:a4:ed:
60:79:a5:2d:d8:ac:a3:d7:00:ce:44:64:ba:b9:d1:
18:b9:be:2e:d3:97:5c:1a:c2:1b:fd:11:ed:54:13:
00:3d:f3:90:15:aa:b3:35:2e:79:77:01:d2:b0:1d:
dc:15:4d:c2:7f:f8:08:df:b4:04:a9:3b:5b:10:32:
cb:68:c2:61:be:2c:d7:d0:d9:65:92:ca:52:bd:ed:
b2:57:a9:94:5a:72:f7:d7:a5:2e:d3:33:1f:61:4a:
ea:29:d2:62:dd:4a:bc:23:5e:f6:be:0e:3a:e9:09:
0d:35:c3:a0:0b:b8:b3:76:a4:0e:b6:c4:b3:be:3b:
18:e4:88:3b:44:ae:b3:67:ca:32:17:68:66:cc:8d:
44:ce:c8:89:34:3d:61:cb:4d:1d:83:48:58:1b:9c:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:F0:62:F6:34:0E:93:FB:14:36:6F:34:EC:A5:6A:20:16:B0:86
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:00:f1:05:c6:ca:2c:6a:40:b1:32:e6:6a:67:6f:23:c9:
da:93:2e:25:b7:9d:d6:c4:3d:ed:40:e7:17:04:9c:de:d0:d5:
c3:98:3d:74:3d:13:5f:2b:0b:74:65:96:3f:d0:78:e7:34:fb:
33:e7:e1:7f:3a:ca:9a:e2:62:9b:6f:d8:61:5e:ca:70:4e:05:
9e:21:ae:27:85:31:95:d1:57:45:c7:f5:76:9f:24:1a:3e:36:
b9:32:6f:54:c9:4b:42:f0:dd:73:58:4c:5d:2c:ed:85:19:4f:
9b:7b:e6:40:78:49:d9:9e:f8:41:ff:f5:03:85:6e:a4:78:f9:
6b:fc:97:5c:41:dc:1d:63:a3:83:ce:78:43:b5:c6:07:19:a3:
6a:3f:1b:04:3a:a1:ac:14:03:54:1c:5c:0c:d0:66:0e:00:75:
c1:f2:42:a1:c2:c1:3b:a2:fe:b5:08:98:35:45:f6:68:39:7d:
a3:02:01:b8:61:59:7d:f9:a1:4e:e2:e8:4d:e1:03:97:42:48:
cc:d9:3b:f1:94:df:b9:1f:72:ab:2b:18:21:6a:9a:87:72:59:
32:71:e9:7d:d5:6b:f6:be:ca:13:47:df:fd:5c:f8:82:e4:28:
d3:44:63:d8:a8:aa:9b:27:cb:f8:4b:03:31:fe:cf:7f:41:7a:
24:f3:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:36 2026 by rpki-client