Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/vXAHQTqF3OlJnxKz_vHGJWeqlXk.mft
File: vXAHQTqF3OlJnxKz_vHGJWeqlXk.mft (raw, json)
Hash identifier: WUBk5rzK52F4YEolnOuf0ok3Qy1sAiG8FQa150MRAOg=
Subject key identifier: 3F:72:A6:54:7A:1D:5C:F5:24:CD:C3:F4:7F:06:85:46:3D:02:1E:C8
Authority key identifier: BD:70:07:41:3A:85:DC:E9:49:9F:12:B3:FE:F1:C6:25:67:AA:95:79
Certificate issuer: /CN=bd7007413a85dce9499f12b3fef1c62567aa9579
Certificate serial: 019BFF8ABD06A982482E25B00B0A959F613C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXAHQTqF3OlJnxKz_vHGJWeqlXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/vXAHQTqF3OlJnxKz_vHGJWeqlXk.mft
Manifest number: 16
Signing time: Tue 27 Jan 2026 13:00:40 +0000
Manifest this update: Tue 27 Jan 2026 13:00:40 +0000
Manifest next update: Wed 28 Jan 2026 13:00:40 +0000
Files and hashes: 1: 8I31FojW8Q6lYyFRbAPtt8AT9ik.asa (hash: I+frfbGmi9nodMSG3EoxY9HT5b3sM7lavxGgHh6rQAY=)
2: vXAHQTqF3OlJnxKz_vHGJWeqlXk.crl (hash: vPRsmmK67VQlzDvrS+xZSTLSGQx21WHeB3nW346qIPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:8a:bd:06:a9:82:48:2e:25:b0:0b:0a:95:9f:61:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7007413a85dce9499f12b3fef1c62567aa9579
Validity
Not Before: Jan 27 13:00:40 2026 GMT
Not After : Jan 28 13:00:40 2026 GMT
Subject: CN=3f72a6547a1d5cf524cdc3f47f0685463d021ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:ff:ff:d0:4e:a0:44:c0:64:d1:9a:52:5c:
c4:a8:a3:1b:bc:6c:ca:32:37:e0:ee:19:90:e5:1b:
00:b1:4d:2d:42:bf:29:03:68:1c:1d:c8:46:cb:05:
d8:b1:f3:09:31:a4:57:85:e3:e0:0a:9e:3a:d9:b0:
d1:ec:f5:83:3d:4a:03:1b:de:53:12:69:08:51:a2:
a7:17:ab:b2:ff:09:c3:29:01:a4:43:6f:58:c0:3b:
06:d6:02:f4:dc:0b:7b:86:48:5a:f1:0d:5a:6f:6d:
24:7e:8c:56:99:b3:2d:a2:40:c3:58:b0:7e:e1:36:
53:4d:48:32:09:e3:bf:5b:35:02:1b:13:f5:dc:d4:
ea:0a:a5:85:70:25:ad:88:fa:c5:f1:20:ef:cd:85:
c2:7f:a2:d5:a5:6a:30:ce:0a:1b:13:d0:c4:96:ee:
95:92:d3:cf:08:03:a3:77:f8:4a:b0:89:c1:cb:3b:
48:5e:4f:65:53:14:39:c2:b4:a7:ad:2d:66:6a:8c:
68:88:c7:22:9a:77:ef:98:b9:63:09:7c:15:fd:19:
de:d2:ae:49:a3:f0:38:15:f3:7e:1b:70:e5:0e:c3:
73:f3:67:70:fc:9e:67:be:65:cb:70:4f:08:e1:94:
ee:58:a8:e7:15:b2:58:98:b0:cd:40:cb:56:e6:8e:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:A6:54:7A:1D:5C:F5:24:CD:C3:F4:7F:06:85:46:3D:02:1E:C8
X509v3 Authority Key Identifier:
keyid:BD:70:07:41:3A:85:DC:E9:49:9F:12:B3:FE:F1:C6:25:67:AA:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXAHQTqF3OlJnxKz_vHGJWeqlXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/vXAHQTqF3OlJnxKz_vHGJWeqlXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/vXAHQTqF3OlJnxKz_vHGJWeqlXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:91:ba:b0:78:b7:12:d8:4f:2b:ef:cf:1c:e0:ab:ba:70:
97:6f:7d:14:03:4b:f4:17:7c:f0:d9:ee:75:e4:0d:bb:57:60:
71:ad:2d:3a:fc:a6:b4:48:db:5e:99:b5:23:cd:b9:69:81:8d:
89:e6:98:2d:26:c8:b0:62:cb:a8:92:8c:93:48:f1:f0:28:60:
0d:6d:2d:56:58:c0:38:21:8c:53:57:b0:70:0c:0d:67:89:d8:
da:7b:a8:dc:f6:d0:22:c1:a7:31:a8:de:44:bb:04:90:b1:ad:
06:67:cc:9d:36:17:cb:9e:fa:b7:ee:83:fb:4a:8a:f1:8a:ef:
62:20:33:8d:30:16:b4:a5:e8:11:c0:8b:da:81:ad:b7:8f:ec:
12:13:9f:b8:9a:4c:16:40:5b:9c:ce:11:99:1e:94:db:00:8e:
9c:31:75:b2:92:d0:86:c7:da:a7:46:02:51:0a:7f:da:36:c3:
da:6f:fd:bc:df:49:8e:6a:03:66:89:e7:c5:c2:35:fd:91:69:
d5:45:7e:36:ad:96:0f:17:ac:89:54:cd:8c:a3:24:ba:c0:3e:
40:a5:d3:96:79:56:05:a1:23:52:a1:1c:58:38:26:40:39:51:
6b:2e:95:26:b7:27:29:64:88:ea:cd:ed:0d:dd:d4:b3:7f:5f:
68:da:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 10:12:46 2026 by rpki-client