Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
File: IbnyqCas92elDlmynsH_CSz9PBw.mft (raw, json)
Hash identifier: KJcDvF7dgvad+UAEh8TBNjUN8Rwx6Ixyot8oekeCDYs=
Subject key identifier: DB:3B:5F:B9:99:AB:89:0C:A1:65:E2:39:5C:C3:63:3E:7B:3A:4E:52
Authority key identifier: 21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
Certificate issuer: /CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Certificate serial: 019CB0C898DB33625E2DC18451D1157D67D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
Manifest number: 0216
Signing time: Mon 02 Mar 2026 23:01:02 +0000
Manifest this update: Mon 02 Mar 2026 23:01:02 +0000
Manifest next update: Tue 03 Mar 2026 23:01:02 +0000
Files and hashes: 1: 4WrRqTDFyTm1szKwwV0Xhx_GeNY.roa (hash: UQqbqQfwwezREl+rf3IrXTGH3e9sOiVhZFDwlGOjLvE=)
2: IbnyqCas92elDlmynsH_CSz9PBw.crl (hash: 5SNwwSohdI3oAay09n+8HgyalDYmK9PIGmAqmFk8fGU=)
3: VirJ4FMMufMBPFGmLTdS7NiM954.asa (hash: HtijruVhowZabFYLDxbWBFjC7DIj4rAofcdBe14FyKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:98:db:33:62:5e:2d:c1:84:51:d1:15:7d:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b9f2a826acf767a50e59b29ec1ff092cfd3c1c
Validity
Not Before: Mar 2 23:01:02 2026 GMT
Not After : Mar 3 23:01:02 2026 GMT
Subject: CN=db3b5fb999ab890ca165e2395cc3633e7b3a4e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:e3:68:e2:29:5c:e3:03:2f:c9:18:c4:cf:
2c:ac:cf:1b:a5:e7:2b:97:ce:61:98:5f:01:cb:9c:
ef:28:ca:67:d0:26:54:ee:5b:d5:e5:c7:24:46:77:
ed:4f:38:af:6b:9e:76:ec:8c:3c:e7:58:e4:4c:2e:
a5:45:75:5f:4c:e9:98:4c:0d:b6:ec:80:89:39:36:
2e:62:a1:c9:13:5e:ec:ea:12:7e:75:72:3a:f6:c1:
86:d7:37:e9:ed:98:dc:c9:80:e5:24:7f:b1:1a:ae:
38:0b:4b:c3:c3:b7:3d:a5:86:7c:ad:92:29:53:ce:
f5:d2:fc:20:44:80:cd:56:44:aa:1a:ee:a3:45:13:
da:0f:45:f3:29:29:1e:50:25:76:73:b1:ad:f1:4c:
a8:17:df:ca:3e:87:03:5b:b9:70:df:84:7a:3a:11:
42:da:b8:6f:65:42:c8:69:9f:1e:92:f3:b7:34:70:
23:1b:9d:44:a5:7e:b1:e1:71:3e:40:2a:fe:44:bc:
f7:4c:44:46:da:bf:b6:75:82:28:13:54:c6:6e:ee:
e0:90:61:d6:ab:fd:44:f2:7c:36:00:aa:eb:a6:ae:
ae:c3:1e:7c:d7:ef:28:3a:72:1d:ac:6f:e1:68:56:
d2:c1:f6:30:f4:f1:53:d6:74:77:c3:7c:59:c8:16:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:5F:B9:99:AB:89:0C:A1:65:E2:39:5C:C3:63:3E:7B:3A:4E:52
X509v3 Authority Key Identifier:
keyid:21:B9:F2:A8:26:AC:F7:67:A5:0E:59:B2:9E:C1:FF:09:2C:FD:3C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbnyqCas92elDlmynsH_CSz9PBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d70f78-082e-4ec2-8100-7cdcb50ed0e4/1/IbnyqCas92elDlmynsH_CSz9PBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:80:a8:a4:14:a1:fc:bd:a2:67:3f:64:b3:07:50:0e:3b:89:
6e:12:84:c2:46:7b:12:2f:9e:c9:6c:2f:3c:ce:b3:67:81:8c:
b2:db:ad:52:df:3e:31:41:ff:78:fd:e4:b2:36:10:3b:f2:5f:
64:99:c0:6d:cf:ec:bf:b5:39:e5:01:6f:1e:70:0f:9b:79:f2:
a3:3c:9f:ef:3c:57:1d:3e:5d:c4:9e:ae:6c:ff:d3:f7:f8:56:
cd:ce:96:29:0b:d0:22:45:38:8b:0c:0b:cf:b8:82:ba:60:20:
2a:80:e6:75:ec:5c:24:96:4d:ff:c3:11:6d:35:e4:d7:59:77:
87:c1:9b:7d:42:b1:e7:11:33:f1:92:65:6a:18:0c:56:1d:51:
51:2d:38:5d:97:78:d4:13:82:17:1d:63:ab:48:13:48:38:9a:
1b:98:20:4b:02:81:f4:be:6f:e2:55:f3:0e:f5:c1:fa:a7:7d:
60:1c:08:02:a0:9e:75:48:c9:9c:67:be:b8:9b:15:37:91:18:
2d:87:64:8c:e1:8c:79:ba:ab:a8:1f:c2:2f:46:7d:49:8b:ca:
8a:c4:69:1d:8d:c9:57:f6:8b:23:e6:08:d0:bf:00:59:22:8e:
f0:02:66:60:f6:66:9b:e2:62:99:85:11:69:85:0f:b3:99:d2:
9b:a5:38:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywyJjbM2JeLcGEUdEVfWfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYjlmMmE4MjZhY2Y3NjdhNTBlNTliMjllYzFmZjA5MmNm
ZDNjMWMwHhcNMjYwMzAyMjMwMTAyWhcNMjYwMzAzMjMwMTAyWjAzMTEwLwYDVQQD
EyhkYjNiNWZiOTk5YWI4OTBjYTE2NWUyMzk1Y2MzNjMzZTdiM2E0ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj3jaOIpXOMDL8kYxM8srM8bpecr
l85hmF8By5zvKMpn0CZU7lvV5cckRnftTziva5527Iw851jkTC6lRXVfTOmYTA22
7ICJOTYuYqHJE17s6hJ+dXI69sGG1zfp7ZjcyYDlJH+xGq44C0vDw7c9pYZ8rZIp
U8710vwgRIDNVkSqGu6jRRPaD0XzKSkeUCV2c7Gt8UyoF9/KPocDW7lw34R6OhFC
2rhvZULIaZ8ekvO3NHAjG51EpX6x4XE+QCr+RLz3TERG2r+2dYIoE1TGbu7gkGHW
q/1E8nw2AKrrpq6uwx581+8oOnIdrG/haFbSwfYw9PFT1nR3w3xZyBaEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs7X7mZq4kMoWXiOVzDYz57Ok5SMB8GA1UdIwQY
MBaAFCG58qgmrPdnpQ5Zsp7B/wks/TwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAt
N2NkY2I1MGVkMGU0LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNzBmNzgtMDgyZS00ZWMyLTgxMDAtN2NkY2I1MGVkMGU0
LzEvSWJueXFDYXM5MmVsRGxteW5zSF9DU3o5UEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4CopBSh
/L2iZz9kswdQDjuJbhKEwkZ7Ei+eyWwvPM6zZ4GMstutUt8+MUH/eP3ksjYQO/Jf
ZJnAbc/sv7U55QFvHnAPm3nyozyf7zxXHT5dxJ6ubP/T9/hWzc6WKQvQIkU4iwwL
z7iCumAgKoDmdexcJJZN/8MRbTXk11l3h8GbfUKx5xEz8ZJlahgMVh1RUS04XZd4
1BOCFx1jq0gTSDiaG5ggSwKB9L5v4lXzDvXB+qd9YBwIAqCedUjJnGe+uJsVN5EY
LYdkjOGMebqrqB/CL0Z9SYvKisRpHY3JV/aLI+YI0L8AWSKO8AJmYPZmm+JimYUR
aYUPs5nSm6U4xw==
-----END CERTIFICATE-----
Generated at Sat Mar 7 03:31:31 2026 by rpki-client