Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: zl8avMxGyj9K0XLOV5D71Ao+G+9rI0Oq/blx4msGuek=
Subject key identifier: C2:5A:42:3F:59:A2:48:9F:28:E3:56:0A:15:B6:02:23:C6:64:1B:A5
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 019C52CC5C6CC823A4EE13CF35FAF6DE6379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 143F
Signing time: Thu 12 Feb 2026 17:00:50 +0000
Manifest this update: Thu 12 Feb 2026 17:00:50 +0000
Manifest next update: Fri 13 Feb 2026 17:00:50 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: lVaz+HEqR8WeTjj9pQABOkX8SUf5WOrsvgbV/lyX0Wc=)
2: mIYyTvexp96yx1uEcepE1haYD0M.roa (hash: ztPj0SKUR6Aodbe+4A8evaG8qpSR4Uk72LpJ31rdnmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:cc:5c:6c:c8:23:a4:ee:13:cf:35:fa:f6:de:63:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Feb 12 17:00:50 2026 GMT
Not After : Feb 13 17:00:50 2026 GMT
Subject: CN=c25a423f59a2489f28e3560a15b60223c6641ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:5c:10:54:e9:93:4f:77:7e:f0:70:06:b3:
7b:3e:04:5f:b4:6c:bf:45:54:81:57:6d:d3:d6:5c:
a1:91:f3:d3:f4:43:f0:09:f0:ff:40:3b:94:d4:b8:
6f:92:df:f4:ad:3f:73:a9:20:7e:56:d7:a1:2e:34:
56:95:41:e0:20:ac:1c:1a:37:a7:24:6d:f0:df:7b:
06:71:a7:66:c5:b9:3d:b7:f2:10:c5:be:47:f8:6c:
85:75:52:4b:b1:8c:a5:92:6e:fd:9e:5d:cd:eb:91:
69:79:4f:3c:dc:e2:70:44:0b:9c:cd:a7:84:54:fc:
6c:86:05:a2:51:ba:04:83:f8:0b:b7:9a:e3:34:19:
33:71:af:f5:4f:50:ce:e8:7b:51:f2:9e:25:5f:ba:
09:2f:c3:72:06:da:5b:5b:c3:af:2e:fe:e6:ea:4c:
c0:f8:0f:d2:8c:71:ba:92:ec:1e:fd:ed:d9:14:31:
b1:cf:e5:5f:3a:2b:e6:26:0e:40:b3:6c:11:46:d8:
ef:80:5b:b7:10:c5:0c:9d:39:f0:4e:09:c2:ae:a2:
ae:b4:a6:4b:cc:fc:38:0b:b5:0c:a9:0c:94:30:06:
bd:d3:8c:d7:e7:f5:17:c7:be:2c:bf:1f:b8:a4:c0:
50:26:a1:73:d8:b7:41:e1:b3:fa:b0:d3:b7:5a:3b:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5A:42:3F:59:A2:48:9F:28:E3:56:0A:15:B6:02:23:C6:64:1B:A5
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fb:ff:67:76:b5:c3:7f:27:4a:92:68:ca:69:d2:f8:4f:7b:
82:a9:1a:97:44:1a:96:42:8d:1c:e1:6b:6d:ab:34:42:f6:d0:
97:23:07:83:82:96:0b:3e:f1:cc:cd:dc:5e:ed:de:5e:45:d0:
d9:75:4a:00:6f:9b:38:f5:06:5b:3f:05:50:d5:4c:4e:b8:0c:
43:b4:79:31:dc:a9:3a:98:d5:50:90:1d:7a:f1:7f:7e:3a:d6:
69:ab:de:4b:64:29:74:45:ed:c4:34:0a:43:c7:ac:4a:c8:be:
a9:3b:54:9f:e9:9b:d3:db:9b:64:a4:bb:37:e1:71:61:ac:bb:
0c:b5:ce:88:6b:a1:e7:ad:d8:af:15:65:41:69:ce:34:29:69:
17:93:03:c6:f5:74:cb:74:57:6f:b7:4a:b9:f3:99:8c:df:9b:
01:2d:7a:bd:54:c6:9b:c1:a6:fd:65:b0:98:5c:b6:f2:28:eb:
e4:82:73:c8:82:57:cd:e3:de:20:9d:05:76:a9:a7:ae:85:3f:
60:a3:cc:e6:d6:02:d2:12:05:ee:74:e5:82:0b:6c:0d:e3:b2:
04:cc:38:8e:99:70:43:71:cf:7d:67:55:fe:1c:93:a0:ba:cd:
a4:4f:c6:dc:4a:07:25:32:96:6d:2a:bc:d4:37:5c:9a:39:06:
ec:49:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:07:50 2026 by rpki-client