Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: LH4HbgzBdl5vB2p73O75D43DB8ht80n9XjZjXyODIGM=
Subject key identifier: 2F:9E:65:3D:B2:C0:00:DE:10:66:A4:C3:D0:02:04:CD:45:27:8D:CC
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 019B7C38E2A3E60C30A0E6B32D0892C1C5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 049A
Signing time: Fri 02 Jan 2026 01:01:01 +0000
Manifest this update: Fri 02 Jan 2026 01:01:01 +0000
Manifest next update: Sat 03 Jan 2026 01:01:01 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: 8X6ghzKLHhw2qPzXsPhJU7X5XWSj3zFDheeuPdQfTuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:38:e2:a3:e6:0c:30:a0:e6:b3:2d:08:92:c1:c5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Jan 2 01:01:01 2026 GMT
Not After : Jan 3 01:01:01 2026 GMT
Subject: CN=2f9e653db2c000de1066a4c3d00204cd45278dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:57:49:f3:b3:b2:8c:dd:cd:6a:d7:87:6d:
c0:7f:b8:d4:44:82:fe:31:cb:44:53:99:31:c1:c5:
7f:9f:06:62:e9:57:ad:c2:35:73:69:02:20:0d:d8:
51:26:c5:bd:93:5d:f0:52:4e:0c:38:3f:95:11:4f:
33:02:b1:2d:3c:e0:4c:73:6b:f3:fb:01:4a:67:de:
7a:7a:00:fe:e4:21:d8:ef:ec:a3:d8:ca:5f:2b:b9:
2f:95:e2:70:d2:a4:de:38:df:81:4c:2c:23:f7:4e:
6e:f9:15:72:c5:90:f7:2d:99:fe:39:94:25:c1:92:
45:02:ae:c9:24:62:29:47:fe:e9:9a:61:34:86:a4:
e7:7b:10:61:f3:fa:b6:e6:63:26:cc:27:53:13:05:
4a:9e:58:94:b0:6b:c6:4e:86:a6:b1:21:aa:ee:df:
2f:ab:7e:00:c9:ed:7f:0b:67:84:54:42:12:51:45:
97:f7:58:0e:30:41:cf:86:77:a7:f2:90:9d:c0:c5:
54:03:e4:cf:13:5d:a9:e7:1f:df:2c:95:ca:95:1b:
52:9b:a4:7a:79:f3:e8:e7:1b:ff:24:72:03:c2:ad:
23:8c:d1:1b:7b:98:c2:36:98:87:71:c9:6e:4d:21:
64:e6:37:e9:06:4a:9e:fd:ae:0a:4b:ca:28:0b:d9:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:65:3D:B2:C0:00:DE:10:66:A4:C3:D0:02:04:CD:45:27:8D:CC
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c8:39:da:42:fc:ee:89:c4:f9:cc:cd:7a:77:7a:e7:80:3d:
57:9a:86:af:9f:86:7b:6f:40:a1:c9:d0:5e:df:69:49:d1:c5:
84:64:c4:a8:05:6d:d2:96:54:6a:ea:bb:24:81:03:a2:09:db:
bc:b7:82:7c:48:6a:95:45:22:ce:c4:b1:dc:4f:e2:61:11:ed:
ef:b0:fb:d8:d4:37:5f:80:e6:a9:28:52:24:ed:85:c7:65:ed:
79:0e:ca:8e:49:2f:10:6f:fb:03:ee:47:f9:7c:5a:4e:fa:5a:
a4:06:9e:fb:14:7a:49:ba:3a:fb:c0:3e:18:e8:c0:8d:8e:f0:
06:78:df:4b:c2:94:d8:bf:a5:49:be:89:7d:e4:dd:c0:fc:bb:
a4:08:af:1a:09:9c:ff:11:8f:4e:e3:c2:a2:d9:a3:fe:ba:25:
ba:32:c2:c0:54:e5:87:93:0c:d2:c9:d4:48:08:24:e5:b7:af:
98:81:8b:21:c8:7a:77:9f:0d:da:eb:df:1d:fb:a0:f8:68:af:
b8:57:f7:65:9d:73:59:76:f4:b7:0a:09:ec:c5:1f:eb:ed:60:
19:54:1e:1f:47:bf:ef:04:98:f5:04:7a:03:0a:59:ae:54:68:
05:ee:c5:9f:d1:1a:6f:27:37:5e:1b:fb:65:e6:0a:6e:fe:b0:
cd:fd:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:07 2026 by rpki-client