Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.mft (raw, json)
Hash identifier: ildaSkuQdwZQ0CyrONHlzk+3Ib8OZ2jNI7SA2haAuwk=
Subject key identifier: E6:F7:FB:70:7D:4E:DA:EF:0A:E0:8D:3B:25:4E:EE:F2:4A:EF:10:08
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 019CF6F2C9E755255266F1E7CF551083ADBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
Manifest number: 081D
Signing time: Mon 16 Mar 2026 14:00:32 +0000
Manifest this update: Mon 16 Mar 2026 14:00:32 +0000
Manifest next update: Tue 17 Mar 2026 14:00:32 +0000
Files and hashes: 1: 2SuKXtRqwwRtRQFHI6C5L6zypJs.crl (hash: CSGcK7SqjMGWV5dClAqPAhJ/RkfjC/dCr2gdKkZLgEU=)
2: JMIJQhP4HZphvAIczGqMf-4b0GY.roa (hash: bSPME27sDmqT8/QTvC3vIfM712sVJorPb7PuEfyYFok=)
3: we65FAHz96Kjv-B0SOBwjFcgYI4.roa (hash: Z/2iPO0uDI/9rfq0Um58YUfAjkVFGyZz8ChSmquKSlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:f2:c9:e7:55:25:52:66:f1:e7:cf:55:10:83:ad:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Mar 16 14:00:32 2026 GMT
Not After : Mar 17 14:00:32 2026 GMT
Subject: CN=e6f7fb707d4edaef0ae08d3b254eeef24aef1008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:f3:e9:cf:67:8c:24:74:f9:d3:96:83:05:
e0:13:43:e7:e7:b5:27:22:23:db:83:de:e3:78:35:
a6:7e:40:00:a2:8b:bf:f6:d6:a7:27:c8:e4:49:e5:
c6:16:06:10:64:b9:31:57:e4:3e:2a:0a:4c:2d:b0:
37:25:2f:dd:b9:6f:ce:6c:ce:f4:33:93:0d:53:96:
04:7d:52:b1:5f:d4:8b:f5:a3:f6:31:78:b4:69:70:
b8:d6:34:08:48:42:fd:a0:3d:61:8a:f8:fa:17:e6:
54:f2:10:a4:6b:08:4a:07:86:e1:19:3c:ef:6a:0f:
0e:66:e5:26:74:dd:3d:50:dc:b5:ee:82:6f:fd:67:
27:66:4d:72:5a:29:a5:0a:27:ab:1f:df:72:f4:44:
9b:ed:58:e5:59:13:75:6b:f6:0b:39:fa:47:c3:d2:
fb:12:05:ea:d1:f2:f7:14:26:84:5a:17:53:ff:49:
2f:45:8f:b6:f3:d1:97:2b:dc:b4:13:06:e0:0e:e3:
77:91:aa:64:8f:24:46:9b:38:70:9a:43:48:5e:3c:
ca:c6:66:f9:b6:aa:57:9f:dc:91:d9:bd:8c:87:51:
72:11:39:12:1a:41:fa:3d:c8:51:c7:ea:36:cf:72:
3d:3e:0a:24:4e:b3:47:e6:62:37:e8:76:79:a7:d3:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:FB:70:7D:4E:DA:EF:0A:E0:8D:3B:25:4E:EE:F2:4A:EF:10:08
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:58:95:77:02:03:c5:3e:c1:22:52:db:e1:ad:b8:c3:3a:
64:a5:9a:5b:3d:6c:d2:24:52:23:ce:c6:3a:62:73:26:37:06:
c1:2c:d7:47:a2:a8:f3:e9:fe:fe:71:33:22:1d:ee:f0:6f:9d:
82:77:01:12:7e:ed:23:f0:09:0c:ff:d4:d5:25:e7:db:cd:2a:
2e:d9:fe:d5:33:fc:0a:0f:72:0a:46:af:71:a0:43:98:e2:09:
0d:fe:b2:15:ee:d1:d8:ea:77:49:15:ca:4a:8f:41:ea:f9:c6:
94:c4:69:ae:79:4a:01:06:05:47:18:fa:59:7e:18:8a:45:1c:
c2:51:6d:4f:fb:14:ee:df:5d:17:51:02:90:7f:82:9a:9d:59:
84:c1:b0:24:76:7f:ef:a4:0c:14:d1:24:e2:c7:e4:f5:de:0c:
7c:97:9b:5e:ce:93:5b:33:6b:4b:3f:6a:df:1f:10:61:05:54:
5b:a1:ca:b7:ab:2f:88:43:6e:b2:d2:a5:07:58:d8:51:99:3d:
7f:d1:4e:ad:ff:51:5c:3d:6e:d0:d8:0b:fc:10:9f:3d:73:91:
5d:95:57:44:0b:1f:81:dc:fb:d2:a9:7d:3d:ab:e7:85:ce:58:
75:d9:5f:ab:1b:8a:f3:95:a7:f7:6c:ca:21:9c:e8:00:d8:e6:
2a:dc:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:25 2026 by rpki-client