Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: BSX+P7YLj9h/m+PSGYVkjqQpZzUcE0fx+itXwHbL26c=
Subject key identifier: CD:F7:A7:A0:DF:BD:B4:BB:F8:2B:5B:D3:C6:98:7B:3E:A8:3E:3A:91
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 019F12D320EEF45A21950C2DE3FE03E39B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 10:00:54 +0000
Manifest this update: Mon 29 Jun 2026 10:00:54 +0000
Manifest next update: Tue 30 Jun 2026 10:00:54 +0000
Files and hashes: 1: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: 4Y3+8WeHzW/Nv70D7Pu5HdCPp5TTptGRC7criDLa5D0=)
2: urEdR1rkKC37QLchd2Eu3Uvae7w.roa (hash: kKj8ZOJ0MJkO16pSik4xWptNoglu7DaHV1OVMMkcbVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:20:ee:f4:5a:21:95:0c:2d:e3:fe:03:e3:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Jun 29 10:00:54 2026 GMT
Not After : Jun 30 10:00:54 2026 GMT
Subject: CN=cdf7a7a0dfbdb4bbf82b5bd3c6987b3ea83e3a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:8c:f1:d1:6d:f6:eb:bf:c6:b1:d0:19:24:
48:b5:5c:f0:e9:e5:4a:57:77:c7:49:dd:75:5d:de:
10:8b:ee:93:92:fc:d3:aa:12:be:4f:52:86:2c:f4:
0f:02:2f:78:d0:7d:39:b0:2c:bd:ed:56:e0:c4:89:
50:84:92:fe:04:33:45:d2:2b:2f:0c:c3:63:c4:d8:
94:ef:ff:60:a5:3b:df:fe:e9:13:da:a9:2d:3c:9c:
9f:aa:af:67:57:48:f6:ed:02:51:ae:1b:f8:7b:19:
21:73:92:4f:20:73:2f:ef:0c:ae:5f:ab:74:8f:4c:
db:97:02:57:e1:d0:e3:82:6a:6b:10:54:d6:52:a9:
52:f5:68:92:03:b4:25:9f:9d:b4:f3:aa:8b:16:e5:
5d:5e:f8:c4:6f:e9:77:21:fc:5d:82:ed:10:34:d0:
4f:a9:c9:7d:4e:fb:20:dd:2c:66:1b:81:d7:37:de:
5e:90:4a:d4:ea:4e:21:8e:ff:32:60:93:0c:e2:4b:
d7:9e:df:80:ae:30:73:db:57:b8:ad:38:7f:32:0a:
82:32:9c:31:3e:68:31:85:e1:24:9e:b1:83:c6:fe:
c5:86:5c:b3:5a:dc:38:99:a3:4f:95:86:ce:2c:43:
4c:46:b8:d6:11:14:74:eb:3e:75:93:32:f2:c5:8c:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:A7:A0:DF:BD:B4:BB:F8:2B:5B:D3:C6:98:7B:3E:A8:3E:3A:91
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7e:1b:c6:0c:ae:7d:21:00:d2:29:6b:b3:6d:c9:76:c2:9a:
e8:5e:d0:6b:5d:d0:f4:d1:3a:ae:9b:81:10:c6:1b:61:a9:9e:
08:93:e3:d2:14:14:38:63:99:bf:eb:59:f2:ac:b1:2f:86:0d:
46:7b:e9:95:aa:61:51:f0:81:62:b3:3a:3d:5b:e8:cf:18:c6:
d0:d6:80:9b:3a:c7:57:78:46:94:96:4d:be:0b:02:3c:1c:33:
72:d5:88:6d:5c:5d:69:29:1e:93:4d:e7:f9:71:8b:23:e3:a4:
99:9d:13:6b:d0:31:34:3f:b7:cc:b9:14:5f:12:50:79:19:3f:
6a:e3:5e:01:2e:a7:41:bc:56:a9:14:04:f8:e7:e8:19:a7:94:
38:db:6c:a1:26:29:9c:3f:05:93:03:8a:a6:eb:a7:13:4d:c0:
bf:71:34:a0:fd:d1:6b:5a:58:21:6a:1c:77:1c:ad:f0:37:f4:
6a:71:b6:f6:14:eb:61:b6:fd:7e:e8:5c:8d:32:4b:c6:de:b0:
dd:3c:f2:be:82:9c:8e:37:f8:9e:53:8c:b6:d9:84:5d:d2:d2:
10:a5:89:94:b1:29:b2:00:6c:6c:3b:f9:22:31:a1:48:3b:82:
8c:82:00:f5:94:86:5e:67:55:99:e0:7b:5b:e2:02:e6:5f:84:
56:75:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:48:13 2026 by rpki-client