Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
File: 0PFLigjLX4BX1IsD5T9Fi44f7tY.mft (raw, json)
Hash identifier: N2dQso7pH/NHBrW56C6tHKinLntjhAIE4OZNLgiCshw=
Subject key identifier: 56:97:2B:2F:85:AE:7E:D8:53:86:89:9D:02:DC:DB:AD:38:E5:A3:E8
Authority key identifier: D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
Certificate issuer: /CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Certificate serial: 019F22105B26C6DEB9D8861F5D40CDACCF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
Manifest number: 05DC
Signing time: Thu 02 Jul 2026 09:02:04 +0000
Manifest this update: Thu 02 Jul 2026 09:02:04 +0000
Manifest next update: Fri 03 Jul 2026 09:02:04 +0000
Files and hashes: 1: 0PFLigjLX4BX1IsD5T9Fi44f7tY.crl (hash: YUqTLOosYwyrs5LVcXNlgKjILLTZUDvhGUZMDh7i72k=)
2: d47T8ORHHk4caoplxkWo9jdbvBo.roa (hash: O+AW/XVQJP2vo9oGn03UxDaB3BH61OdIhMeMe+ELWp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:5b:26:c6:de:b9:d8:86:1f:5d:40:cd:ac:cf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f14b8a08cb5f8057d48b03e53f458b8e1feed6
Validity
Not Before: Jul 2 09:02:04 2026 GMT
Not After : Jul 3 09:02:04 2026 GMT
Subject: CN=56972b2f85ae7ed85386899d02dcdbad38e5a3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:f7:fa:49:ea:1a:da:f2:ed:fb:dd:a5:52:
0f:56:99:97:ae:e5:ce:99:81:df:29:fa:57:8b:f2:
f0:8b:dd:52:ab:87:7c:fc:ca:fa:33:da:56:24:99:
ab:82:71:3a:4f:a0:19:c4:6a:6a:8f:d6:2f:97:f8:
f8:90:33:cd:df:09:b0:3e:c6:f4:69:c2:63:9c:9b:
c0:82:57:56:db:9e:c1:2a:ca:d9:9b:20:9d:a1:7f:
c0:80:1f:89:e4:2c:00:1a:f0:c4:c5:1f:04:e4:e3:
dc:5e:bd:fe:06:af:e2:10:b2:22:dd:08:28:1d:a2:
b9:44:03:9a:4f:54:1e:e1:72:64:be:2f:0e:d1:6f:
58:fe:c5:c2:81:5f:6d:08:06:3b:15:20:b6:24:b8:
0a:d6:0b:e9:1e:57:c2:61:24:b7:c2:f2:3b:a5:1a:
43:8a:ee:84:d0:d4:5c:79:96:a0:69:2b:56:a3:c6:
a0:f7:28:7a:4f:14:30:e5:62:d1:b8:b2:7b:c4:54:
97:cc:cb:02:4a:df:7f:b0:9e:2a:da:e2:ef:14:75:
ae:e2:41:1a:f8:ea:6f:fe:09:e9:b6:76:9f:41:d2:
a9:bd:19:fb:d3:a0:09:f0:48:06:1a:48:0d:bb:8b:
95:24:48:37:42:2d:aa:2e:43:02:d9:ff:02:cf:0f:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:2B:2F:85:AE:7E:D8:53:86:89:9D:02:DC:DB:AD:38:E5:A3:E8
X509v3 Authority Key Identifier:
keyid:D0:F1:4B:8A:08:CB:5F:80:57:D4:8B:03:E5:3F:45:8B:8E:1F:EE:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PFLigjLX4BX1IsD5T9Fi44f7tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/0PFLigjLX4BX1IsD5T9Fi44f7tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:cf:96:75:2b:b2:fb:d6:38:4a:e8:30:69:86:0d:23:f3:
4b:b4:c7:ce:b1:a4:02:d7:bd:c4:b4:c5:07:ce:1f:de:d4:fb:
6b:b4:54:0e:3c:d7:53:ec:ba:c8:bb:1b:df:ba:2f:7c:52:b8:
65:fc:45:95:88:e7:fb:9c:52:f4:57:7c:d2:73:7c:84:cb:a4:
24:de:b7:75:17:28:42:c4:16:5f:cb:5b:15:1b:60:d6:80:b2:
38:c9:d5:fe:f5:a5:52:f4:5e:62:67:98:ff:e0:a7:8e:02:cd:
ae:9f:fa:a6:88:bf:8f:6b:dc:c0:fa:96:8c:20:5b:fe:64:47:
9a:da:1f:8e:35:ea:53:32:fd:6a:42:e3:fa:f4:df:f7:29:f0:
2d:48:89:19:9a:48:d4:13:63:c0:5a:04:3d:98:87:e7:16:73:
f8:bf:a1:ad:c6:1a:0d:e7:3e:03:02:cc:aa:25:a9:cb:4a:0b:
47:b5:40:01:46:dc:fe:b5:04:ca:13:45:fc:62:0d:63:bc:66:
b2:a8:87:15:bf:5e:19:a0:20:b1:0b:92:d4:32:6a:b3:94:9a:
28:83:50:56:9d:ab:41:c0:cf:ad:1a:c6:22:8a:25:29:c7:33:
ed:dd:6a:2a:24:dd:f3:0d:15:4b:6b:46:9e:d2:89:2f:eb:18:
39:52:21:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:53 2026 by rpki-client