Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier: r751Y0ujBcFgkiral/YH4jqgeps3G3EsdI8LjEEbO0g=
Subject key identifier: 0D:B7:98:DC:C3:E8:EE:AB:FF:84:E0:CA:BC:88:41:42:49:E9:64:DF
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial: 019F21D9BFB73A1CC21762220224557A6957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number: 0C5B
Signing time: Thu 02 Jul 2026 08:02:26 +0000
Manifest this update: Thu 02 Jul 2026 08:02:26 +0000
Manifest next update: Fri 03 Jul 2026 08:02:26 +0000
Files and hashes: 1: m86oxA_k3vw-M6KhPPiDUZnBVgA.roa (hash: 1GePjxZamSe3/wMfx0CTdKkbwHo9MTWnsxySOK90U8k=)
2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: Nm3ykDRwHgBp/R/YZViEeaM454dSh8mCInjBADnYHBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:bf:b7:3a:1c:c2:17:62:22:02:24:55:7a:69:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
Validity
Not Before: Jul 2 08:02:26 2026 GMT
Not After : Jul 3 08:02:26 2026 GMT
Subject: CN=0db798dcc3e8eeabff84e0cabc88414249e964df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:9c:7b:cd:84:6a:e1:3d:39:3d:5d:9a:a7:
6d:f3:a4:1c:97:fa:1d:ff:c9:f3:5a:4e:f2:b4:01:
91:3c:ce:c9:49:8f:23:83:d2:4b:08:79:81:30:b0:
9d:18:73:28:27:6a:5c:4f:64:5f:6c:bd:c7:da:01:
cf:df:19:e9:b0:0c:c4:9f:a3:b4:ed:f8:cf:14:ff:
ec:19:8e:ba:14:94:32:83:18:5a:79:ef:b8:14:da:
32:6a:a5:3f:8a:25:62:26:23:16:46:9a:5a:ae:8e:
02:61:82:c2:21:0c:bc:58:5d:c0:de:87:de:4b:fb:
b5:d8:a8:18:76:c6:a6:ec:23:35:76:62:b0:c4:c2:
b7:69:92:c3:f5:43:f5:ed:ae:0c:35:b1:f4:c1:42:
73:93:d5:29:3e:7f:e8:54:14:b5:33:ac:d9:67:4c:
d8:c9:71:4c:11:b3:88:f5:11:74:3b:d9:6b:07:86:
38:c4:d7:5c:79:ec:5f:35:2a:26:95:5c:72:99:b4:
15:70:1f:93:e5:77:48:c2:7c:07:0b:f5:e6:3c:18:
6b:02:4f:27:fa:8f:5b:e1:9f:fc:c5:54:e5:25:a0:
94:f2:2e:c2:14:fd:ad:b9:dd:ab:74:93:27:3c:bd:
11:0f:f4:3d:94:bb:8a:fd:61:ad:c9:eb:ee:60:ae:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:98:DC:C3:E8:EE:AB:FF:84:E0:CA:BC:88:41:42:49:E9:64:DF
X509v3 Authority Key Identifier:
keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4f:a1:60:6b:0d:d4:95:7b:93:bf:6e:c1:9d:68:e1:a1:23:
e4:4b:c6:89:76:16:18:82:c6:a9:bd:9b:a1:07:4c:98:76:15:
09:90:f0:9b:03:7e:5f:f9:cf:f0:e1:86:6b:55:46:72:cb:d2:
b5:5e:a1:54:7a:a2:64:97:0e:d0:e2:55:8e:35:84:cd:8e:77:
1f:0a:cc:d9:b3:25:bb:b7:2e:db:fe:c4:c3:4c:1c:e0:58:85:
ad:2f:ae:2e:4c:ff:7c:7a:95:b1:e0:d8:00:f3:3c:04:4f:29:
6f:4d:cf:5b:b3:56:da:26:55:59:e9:21:76:51:e7:d4:cd:ec:
92:3c:7b:14:8a:40:e6:f6:92:1d:74:c9:d7:71:d7:71:8a:d5:
86:bb:7f:b4:03:81:4c:39:de:f9:0e:45:c2:d4:af:a6:23:4f:
6b:73:ec:ae:cf:a6:8f:b7:1d:05:18:2c:41:79:78:02:85:55:
f1:79:1d:e1:0e:55:8b:1c:72:20:04:15:02:0c:12:e6:22:76:
90:e6:be:cd:29:c0:1c:bb:9a:99:b9:10:4b:67:5f:53:2d:99:
88:ba:01:d5:b7:e6:75:d0:08:c1:80:a5:1b:e2:c3:ef:fe:fb:
3f:b1:63:ce:9f:06:8a:72:81:be:ae:d5:03:28:6b:c3:fb:dd:
76:1e:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:57 2026 by rpki-client