Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier: Q/qNRLi0JNa5QsMApSN/Q6hNTsAukVUVNkuau1oZ5dg=
Subject key identifier: 4F:F5:9A:B4:C5:57:FE:70:0D:DA:90:68:D6:B5:40:02:B9:C0:55:6E
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 019F22106E92B69DDF4F91D88C7D648899A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number: 198E
Signing time: Thu 02 Jul 2026 09:02:09 +0000
Manifest this update: Thu 02 Jul 2026 09:02:09 +0000
Manifest next update: Fri 03 Jul 2026 09:02:09 +0000
Files and hashes: 1: 86kV-CBVfnQcJyHUwtgj6mE9ynY.roa (hash: HD7vMFw1ZLvs7IG1Ix80v+8FBmp78WtI8pixF8GnWyU=)
2: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: Sv3/YA3KNzVXN/uGekP5+3cyZ3bcjmahUJtujS8gBiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:6e:92:b6:9d:df:4f:91:d8:8c:7d:64:88:99:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Jul 2 09:02:09 2026 GMT
Not After : Jul 3 09:02:09 2026 GMT
Subject: CN=4ff59ab4c557fe700dda9068d6b54002b9c0556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:e8:f7:11:fc:d8:67:12:8b:21:64:de:7d:
95:0c:33:03:6f:01:f7:79:70:6d:ba:88:55:d9:be:
37:f0:08:2a:d4:99:5c:50:93:24:72:d2:3f:c8:ff:
d7:d4:a8:56:24:23:13:01:fb:d0:f5:dd:3f:5c:f5:
9f:b7:39:28:89:f4:0a:3b:06:79:1d:a3:08:9e:b7:
95:7e:73:04:2c:8a:8b:33:c0:7a:93:d9:b7:5e:1a:
18:7c:9e:d8:66:25:e0:80:85:62:84:23:d0:01:1b:
59:6b:3f:58:32:75:f6:6a:6c:9d:2a:13:cc:a6:28:
79:ba:e7:38:d0:74:11:35:3c:ee:aa:f4:8b:43:56:
1d:84:97:74:7f:8f:55:cd:15:6f:d2:65:7c:27:ab:
30:f9:c4:50:7d:6c:f1:45:0f:26:40:5d:51:ee:f7:
79:7c:a6:1e:de:12:50:f5:62:e1:e3:0b:52:98:cd:
bd:04:39:35:8d:b2:46:b3:58:e9:5e:61:25:8c:89:
be:36:53:6e:0f:5a:4a:76:fa:c4:ea:fa:f8:ec:45:
05:da:db:39:f0:a5:ba:be:34:24:99:d8:0d:cb:a2:
25:16:c1:42:60:e5:94:e2:1b:5f:8e:ed:f7:86:3a:
9c:2f:10:f8:51:ef:fd:53:42:2e:8f:17:91:e3:a5:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:9A:B4:C5:57:FE:70:0D:DA:90:68:D6:B5:40:02:B9:C0:55:6E
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:96:cf:27:9c:e0:11:e1:06:17:35:37:71:63:fe:c9:52:
29:06:d8:e6:42:38:27:83:a6:31:49:25:1d:c3:c0:13:44:40:
de:1a:54:28:e5:d9:0d:53:c1:5d:54:08:20:f2:af:7a:6c:c8:
0b:72:ba:14:9a:10:03:54:59:e7:61:ee:77:25:a4:9b:ec:48:
35:16:ef:20:42:87:ce:37:f5:dc:b8:14:4c:07:31:de:a0:21:
e9:9e:eb:a0:68:65:af:d1:07:72:89:81:87:c0:bf:f4:38:d9:
3e:7a:f0:66:04:2b:5e:a5:b9:62:f3:7b:ae:cb:58:b9:f9:1d:
ed:6f:67:d8:d5:6d:e3:72:66:11:2d:b9:e6:ed:c9:b1:64:ec:
92:6f:0e:a8:26:ee:be:d6:63:b8:6b:18:82:63:fb:d1:f4:03:
a1:44:6c:1d:2a:55:d3:0a:95:a8:12:36:ce:b8:8c:94:60:3f:
93:ed:59:72:0e:5e:fe:74:15:dd:05:5c:f3:89:c1:59:93:b4:
9c:72:64:a4:dd:c2:4c:48:62:80:5d:4e:a6:4f:c0:09:c2:37:
95:f9:4e:00:70:55:d5:b4:d7:4e:fe:40:f3:3d:e1:3c:af:72:
7b:f7:f3:7a:0f:26:d1:8a:69:0b:a7:70:e9:7a:65:55:b1:d6:
90:6b:42:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:09 2026 by rpki-client