Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: C0N6zYF5h3Eh9g4DTwme1REdeHQTa7Yag+8XY2bBBYk=
Subject key identifier: B6:A0:73:2D:D6:D4:15:EF:6D:29:78:15:01:4A:07:F2:78:8A:8F:4F
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019F22EBF477BEFBE3FA986CE3830ED974CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 1989
Signing time: Thu 02 Jul 2026 13:01:56 +0000
Manifest this update: Thu 02 Jul 2026 13:01:56 +0000
Manifest next update: Fri 03 Jul 2026 13:01:56 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: /vbtwBGWC68MtCnJI/HoYUZM/SZIhq6mWfnn/pVzlNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:eb:f4:77:be:fb:e3:fa:98:6c:e3:83:0e:d9:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Jul 2 13:01:56 2026 GMT
Not After : Jul 3 13:01:56 2026 GMT
Subject: CN=b6a0732dd6d415ef6d297815014a07f2788a8f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:f2:d3:5f:ec:0f:74:54:c1:fa:9d:c4:9e:
40:e5:ac:0c:62:b3:fa:24:3b:9d:2e:a4:26:2b:78:
b7:d5:1b:2b:9d:55:0c:4d:cf:76:86:97:7c:59:ed:
8f:6b:27:72:37:09:03:ee:52:48:25:77:a8:cf:3e:
b6:cb:aa:35:78:7f:89:ca:14:da:a9:c5:2d:70:b4:
a0:1d:ea:84:fd:8e:f3:3b:71:7d:da:f3:2e:a8:85:
4c:05:6d:c7:05:25:d3:52:29:99:14:0f:aa:27:ab:
b2:d1:a1:b1:97:72:17:cc:f1:a2:fd:34:85:39:0e:
db:48:4f:36:cb:bb:33:67:82:30:24:4e:30:45:f7:
d8:da:51:f2:04:8d:bd:47:30:c0:b1:1e:85:6c:38:
4f:c1:9a:fc:87:16:da:e8:7b:ee:ea:91:ba:ce:04:
c4:65:5c:5a:7c:a7:39:91:ca:a2:3e:76:60:da:4c:
a8:29:cc:1c:f8:d6:49:9b:b4:23:f6:a2:78:01:b7:
39:87:9f:a0:a3:63:c8:a4:a0:d3:45:d8:33:ad:f6:
d8:c3:f3:f2:43:4e:65:36:9a:79:70:e0:3d:30:31:
bc:08:ef:78:d8:46:91:c7:70:9e:9a:5c:57:9d:bb:
a5:71:40:4f:76:7d:e3:a8:2f:d4:2d:8c:e0:58:79:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:73:2D:D6:D4:15:EF:6D:29:78:15:01:4A:07:F2:78:8A:8F:4F
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:79:5f:89:5f:27:d0:f5:97:a9:64:fe:69:fe:2c:73:4c:2e:
6f:33:24:8a:03:cb:d1:05:a1:59:59:44:da:44:5c:46:71:62:
3d:92:b2:03:12:3b:67:49:86:f7:f4:c8:96:e6:5a:fa:11:0f:
41:97:3b:40:ac:b2:92:fd:d4:35:c3:f8:28:9f:29:6f:ea:75:
55:fc:10:9b:96:7f:eb:65:5c:64:4b:39:ed:3b:5d:ca:d1:e6:
70:41:0c:c7:4a:1d:fb:17:b2:7d:ec:ba:54:8c:8d:b1:68:9e:
41:e8:e9:b6:41:9a:be:66:6c:9d:5c:8f:57:bf:66:cb:a9:4a:
25:20:07:f1:55:63:96:9e:2e:bc:46:a4:ee:e8:44:31:7f:d5:
de:12:6e:ee:93:c1:5b:b4:9b:22:52:68:c6:0f:11:78:8a:49:
ab:64:f9:14:8d:60:fe:6a:9a:99:03:31:8a:4e:b8:1d:45:f7:
37:45:c2:63:5a:8b:b3:8d:01:5c:e6:ed:2c:3c:5f:1c:44:ce:
d2:c9:c4:85:ca:a6:d6:4b:a6:fc:d4:eb:e8:2c:e2:3b:df:7b:
01:ff:7d:78:61:8f:d7:37:35:b4:e6:b5:86:ed:a8:2f:2c:d4:
53:9c:2e:c0:9a:30:cf:13:ae:6b:77:33:b6:e8:82:c7:98:5a:
08:4d:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:34 2026 by rpki-client