Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: 4KdRv0GLgIz34BvGLGBcDTVQZmlqsuRlwGUqDDCtZfY=
Subject key identifier: A9:3E:68:88:5B:4A:F1:B4:45:67:E9:31:5D:6F:12:52:F7:4F:E5:88
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019F227DAAAB2B9B3944501F3C1BC140BBB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 1991
Signing time: Thu 02 Jul 2026 11:01:28 +0000
Manifest this update: Thu 02 Jul 2026 11:01:28 +0000
Manifest next update: Fri 03 Jul 2026 11:01:28 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: inD+93RyL798oEPh4vV5/1OI7Bk5nRDZdoH/AqbZ7O4=)
2: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (hash: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao=)
3: ToZEV5JGyeFOLj8ty2PbNgby5sE.roa (hash: DsdlMKnutBPPcHsH+/R1jP5sFhln6SW7LBjUC07NiYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:aa:ab:2b:9b:39:44:50:1f:3c:1b:c1:40:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jul 2 11:01:28 2026 GMT
Not After : Jul 3 11:01:28 2026 GMT
Subject: CN=a93e68885b4af1b44567e9315d6f1252f74fe588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:40:aa:b9:d1:1c:a3:3e:2c:b8:62:02:f0:
9f:1e:39:7c:1b:51:57:18:7d:d3:09:21:8b:d4:66:
06:68:f3:9d:8b:9e:37:09:2a:7d:3a:ac:69:f1:b6:
4c:3f:4f:0f:35:06:e3:48:ef:34:7d:1f:a2:d6:a3:
f3:f7:2a:53:94:bc:6a:2c:8c:09:c4:9c:1d:86:42:
3b:3b:60:ab:b2:a3:b7:18:d8:6c:e2:49:69:a5:c3:
8c:0d:05:c4:29:96:d5:86:ba:1c:46:a4:79:3a:94:
63:e0:d8:8f:98:79:b8:9f:a0:74:6c:8e:14:fd:d4:
8b:e5:0f:b2:d6:ea:c7:b0:b4:80:e6:ef:10:52:65:
fe:43:71:30:56:16:86:60:18:a6:2f:4b:76:21:93:
82:34:26:64:f5:ce:d9:aa:54:5f:e6:1d:07:38:a2:
2b:54:ed:37:19:b4:23:9d:74:b7:cb:fc:b3:bb:61:
af:5b:60:1f:b4:41:59:82:56:d0:9b:6f:bd:31:05:
fd:85:19:60:46:22:59:e5:a0:d3:6b:af:a4:4f:ca:
47:f1:e1:1b:13:d1:5e:73:f5:6f:0f:1e:f9:89:19:
e7:bb:98:fd:93:43:42:d8:1a:d2:63:7d:b4:c3:fd:
c7:be:f0:4c:c1:8a:82:28:6d:bc:ef:7d:ba:47:66:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:68:88:5B:4A:F1:B4:45:67:E9:31:5D:6F:12:52:F7:4F:E5:88
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:b2:ce:d7:b5:55:34:e1:cd:76:93:76:da:99:e3:0f:a1:
dc:dd:67:28:02:a7:6d:2e:ad:01:b7:d8:12:a0:29:b9:7f:6d:
f0:55:bf:45:7c:73:38:b6:01:05:39:2c:16:8e:ee:75:19:25:
2c:dc:ff:ee:d3:4b:dc:d9:6d:4f:5c:4d:09:b2:20:42:05:17:
90:03:12:b1:ea:27:e7:9f:90:24:75:bf:82:ca:74:28:6d:ad:
df:e2:2b:bb:51:d4:6b:8f:97:54:be:44:d7:c5:be:15:e8:5a:
38:5e:11:31:1f:ab:15:8a:56:54:b1:f6:1b:18:9a:4b:cf:a9:
7a:18:c2:23:b6:20:cd:28:f4:ce:cf:ae:db:6e:3d:cd:6c:9b:
8d:1c:12:2d:46:da:33:7a:37:aa:79:67:96:1b:37:86:7e:d9:
43:24:25:c5:a0:6d:d1:0d:50:5d:f2:5e:7e:3f:96:19:59:74:
a1:d0:a9:89:de:b7:6d:ff:20:af:39:29:67:09:a5:2f:fc:bf:
83:ab:d1:eb:bd:50:f6:d1:c2:8c:58:43:10:56:b2:5e:e9:fa:
c2:b0:66:db:5d:49:56:b2:80:53:03:3a:ca:f7:e0:07:13:20:
71:a8:86:45:a6:9a:c2:64:5a:e9:a4:27:f6:35:d9:58:93:22:
56:fd:6a:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8ifaqrK5s5RFAfPBvBQLuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk
YTExMjYwHhcNMjYwNzAyMTEwMTI4WhcNMjYwNzAzMTEwMTI4WjAzMTEwLwYDVQQD
EyhhOTNlNjg4ODViNGFmMWI0NDU2N2U5MzE1ZDZmMTI1MmY3NGZlNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutNAqrnRHKM+LLhiAvCfHjl8G1FX
GH3TCSGL1GYGaPOdi543CSp9Oqxp8bZMP08PNQbjSO80fR+i1qPz9ypTlLxqLIwJ
xJwdhkI7O2CrsqO3GNhs4klppcOMDQXEKZbVhrocRqR5OpRj4NiPmHm4n6B0bI4U
/dSL5Q+y1urHsLSA5u8QUmX+Q3EwVhaGYBimL0t2IZOCNCZk9c7ZqlRf5h0HOKIr
VO03GbQjnXS3y/yzu2GvW2AftEFZglbQm2+9MQX9hRlgRiJZ5aDTa6+kT8pH8eEb
E9Fec/VvDx75iRnnu5j9k0NC2BrSY320w/3HvvBMwYqCKG287326R2YUOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKk+aIhbSvG0RWfpMV1vElL3T+WIMB8GA1UdIwQY
MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw
LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4
OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx2y
zte1VTThzXaTdtqZ4w+h3N1nKAKnbS6tAbfYEqApuX9t8FW/RXxzOLYBBTksFo7u
dRklLNz/7tNL3NltT1xNCbIgQgUXkAMSseon55+QJHW/gsp0KG2t3+Iru1HUa4+X
VL5E18W+FehaOF4RMR+rFYpWVLH2GxiaS8+pehjCI7YgzSj0zs+u2249zWybjRwS
LUbaM3o3qnlnlhs3hn7ZQyQlxaBt0Q1QXfJefj+WGVl0odCpid63bf8grzkpZwml
L/y/g6vR671Q9tHCjFhDEFayXun6wrBm211JVrKAUwM6yvfgBxMgcaiGRaaawmRa
6aQn9jXZWJMiVv1qSw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:04 2026 by rpki-client