Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: fXDGzY+mGVsmJbxvo6srGlF9E2wVPwWkaVXFA1MwDJM=
Subject key identifier: F6:EA:09:AE:CC:3B:E3:EA:77:DF:8F:90:8D:94:71:17:A0:F4:39:3F
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 019F22473C18262BE4D758BC6CB74C372CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0E7B
Signing time: Thu 02 Jul 2026 10:02:01 +0000
Manifest this update: Thu 02 Jul 2026 10:02:01 +0000
Manifest next update: Fri 03 Jul 2026 10:02:01 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: 9Z1BY+O7W7E8Up3lstiExX1jf/2oByQ3O9bzPimqxi4=)
2: LeeGxV3aui0l0n7ETElrzjtkaBM.roa (hash: x9kGMWMqzmAXuxI1yI2+L97xSU+hOS0N8TvmEpk9p+8=)
3: PnPWJPaN1J8VHCmd-cuKDdUlk-8.roa (hash: CY12XUm+AEqiMLUbPWTD3nb0Oh/ZFdT0y2oAmQ6wgqo=)
4: juGRjVgVnqyn2IfNNBQ4TSNQu6E.roa (hash: VIgqhWO0oKBC7QCsJgCWGXtpzD429zt0KWfdntl4lZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:3c:18:26:2b:e4:d7:58:bc:6c:b7:4c:37:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jul 2 10:02:01 2026 GMT
Not After : Jul 3 10:02:01 2026 GMT
Subject: CN=f6ea09aecc3be3ea77df8f908d947117a0f4393f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:5a:a4:11:29:90:23:b1:09:71:5a:2c:b9:
6c:55:98:78:84:9d:0e:86:6c:98:1f:8f:fc:72:ef:
c7:a4:30:14:9b:a2:3b:17:9d:1f:fb:aa:75:de:9e:
cd:df:d9:ec:58:2c:64:62:ff:8d:96:b6:37:09:db:
43:d6:da:33:0f:1d:7e:2d:f3:5c:f5:f7:aa:8e:dd:
9e:b3:0f:31:89:de:2d:16:ce:3a:9f:9f:11:69:9d:
05:66:ec:15:1d:b4:c9:22:8a:98:1b:c4:a4:c4:d0:
18:fe:70:42:98:17:eb:47:38:5a:f3:96:7c:f7:ac:
a4:17:b1:1c:46:70:34:87:f5:49:c6:e0:b9:9a:74:
84:95:49:02:65:f0:e1:5c:ba:0c:99:59:3a:c5:db:
77:15:18:69:d0:85:5d:e6:a7:65:48:c6:46:07:24:
93:2f:41:b1:4c:8c:71:af:88:4a:60:88:85:f8:65:
07:db:5e:10:7a:e5:b9:6e:d6:5d:4b:cb:18:ca:04:
d8:e8:1c:a4:29:13:af:af:4c:42:70:62:09:db:81:
6b:10:8e:48:4f:08:e6:1b:fb:af:64:4f:98:71:e6:
30:e0:94:07:b9:76:9e:42:3c:50:16:55:94:17:9e:
37:11:4c:5f:21:a2:33:b2:0c:a7:91:ca:f9:72:31:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EA:09:AE:CC:3B:E3:EA:77:DF:8F:90:8D:94:71:17:A0:F4:39:3F
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:4b:8a:58:7c:6f:17:23:ed:1a:ce:21:aa:98:e3:9e:b3:
03:59:bc:50:47:2c:a5:dd:55:68:5c:c5:68:af:ee:21:7c:b5:
59:dc:a0:80:62:10:78:9f:b4:85:25:71:8f:f1:9d:d1:2e:51:
ef:81:da:dc:8c:96:7b:94:18:9f:1d:87:da:99:17:87:ae:95:
53:48:e6:ae:90:b3:ae:e1:9a:aa:ed:6e:98:6a:0b:10:7b:18:
9d:00:03:c9:ef:7b:20:be:40:55:da:cc:30:2b:de:18:8c:43:
4f:a4:06:69:13:2d:00:43:94:e3:41:07:d4:dd:27:7e:42:e6:
6d:25:d5:81:2e:69:ac:95:95:c3:08:3f:0c:28:ef:e3:87:0b:
fa:8b:8e:ff:ac:e1:8e:23:6c:6b:2f:1d:73:65:5e:dd:51:e8:
ec:0b:8d:2c:8e:00:ca:53:19:27:c4:89:d7:d6:f3:5f:a2:d9:
60:24:37:85:b9:08:8e:29:2e:0b:80:fb:e6:f9:bf:52:d0:d7:
e7:eb:c1:d6:86:90:1b:11:ca:34:13:a8:8c:20:65:44:08:cb:
80:ba:81:d0:83:f8:32:0a:1c:78:31:1f:1d:27:af:ed:91:09:
88:b0:c9:cb:49:e9:8d:dd:98:e9:ee:af:1d:0b:bf:93:8d:f5:
fc:94:7e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:01 2026 by rpki-client