Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json)
Hash identifier: cdYOZckWr5ff4beNghRBZs2vYd2LTHzluydq4KX6nyc=
Subject key identifier: 94:06:12:F0:E3:41:BD:3B:14:D2:53:8A:02:57:A6:33:50:CF:68:AF
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 019F236A0D01E79843B706C9777C409C4146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
Manifest number: 1997
Signing time: Thu 02 Jul 2026 15:19:40 +0000
Manifest this update: Thu 02 Jul 2026 15:19:40 +0000
Manifest next update: Fri 03 Jul 2026 15:19:40 +0000
Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: KYnxyUiwGR2R5WL7ANkMTI89UO36Kyt+QihSjcjIYLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:0d:01:e7:98:43:b7:06:c9:77:7c:40:9c:41:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jul 2 15:19:40 2026 GMT
Not After : Jul 3 15:19:40 2026 GMT
Subject: CN=940612f0e341bd3b14d2538a0257a63350cf68af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:50:d3:0a:f7:6f:3e:c1:24:e5:2c:fa:5d:
25:eb:57:41:bf:ad:49:db:37:82:88:3a:ee:4a:d6:
09:00:87:3b:e9:b6:f7:c4:42:09:b2:1f:4d:bf:68:
70:28:e9:87:13:5a:e1:ed:67:ca:c0:8b:a8:95:e8:
5d:73:0f:76:c1:7a:bb:5f:1b:ea:35:a5:32:c5:ca:
70:35:61:66:25:2c:d8:50:dd:36:79:0c:ee:32:17:
46:5a:23:9a:93:2f:50:9c:9d:c5:b4:14:a4:64:17:
0b:7f:69:70:31:d3:d6:e0:a6:79:12:e4:2f:55:9a:
39:04:30:0a:a4:e6:42:e1:21:db:7f:21:f8:2c:d5:
71:8e:3c:33:b5:82:e1:ea:7f:30:e5:e9:f7:d6:54:
c9:a3:60:44:b0:14:f8:65:06:79:6a:df:ba:f7:66:
12:27:f2:84:80:57:fa:00:70:a2:81:ce:88:a5:90:
b5:7e:96:f9:30:bc:f4:f0:19:08:5d:a2:b1:51:eb:
ce:db:37:94:16:f0:e9:85:bb:74:29:3f:ba:81:a6:
85:10:d6:dc:2a:28:7c:29:bd:46:cb:89:04:57:36:
3b:50:52:08:5b:06:82:e7:1e:e7:45:70:02:33:04:
7c:9f:65:9b:b4:26:3e:22:7e:59:17:85:02:fb:97:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:06:12:F0:E3:41:BD:3B:14:D2:53:8A:02:57:A6:33:50:CF:68:AF
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:b1:4b:69:f4:95:d4:83:7f:a5:27:53:9f:c2:fc:15:a9:
91:3d:1c:f4:1c:c5:35:5b:b0:f3:ee:b2:d1:7c:c0:8d:cb:e1:
7e:dd:50:2f:86:61:7b:c5:a9:7b:28:8b:05:28:b3:93:38:90:
84:b4:c7:9b:8e:95:15:70:ea:52:2e:84:94:87:b0:73:af:b0:
c6:d4:6c:db:e2:c3:53:68:e3:4c:d1:d2:b8:b2:27:76:31:ff:
6a:e7:39:9c:54:f8:78:8e:bb:03:5a:7b:1c:56:c7:91:a7:0d:
5e:48:89:f0:e6:27:81:ba:62:e4:1f:58:59:b7:d6:a6:39:c3:
b9:70:b0:f1:c4:96:e6:c5:2f:cf:0d:4d:4d:4f:16:5f:3c:d0:
24:33:be:24:96:d4:a2:d4:4e:84:e5:ff:73:31:45:e9:59:1f:
1f:05:77:55:97:03:79:47:63:b1:99:d1:d7:a6:d5:b9:98:53:
0f:a3:16:82:c2:2b:5a:10:b1:8d:46:25:3a:6d:05:07:ce:11:
a4:b1:8c:67:30:aa:50:aa:90:6a:be:aa:84:77:ab:e6:69:cc:
f2:8a:60:32:23:62:4c:45:d2:cf:ff:6d:49:46:2f:56:04:9d:
c4:aa:34:a4:b2:77:92:be:72:9e:a3:e1:5d:82:7f:ea:ae:fb:
85:bd:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:38:00 2026 by rpki-client