Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
File: oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft (raw, json)
Hash identifier: OxRNPthSVZuH6055U835Uik7IwH1eKOnDozGT9UuURs=
Subject key identifier: 79:05:AD:9B:96:DB:E4:F8:46:21:90:2A:F1:8D:27:F4:CF:11:8E:1E
Authority key identifier: A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
Certificate issuer: /CN=a1208242656123c0c90b6168d09b2d8a67617bec
Certificate serial: 019BDF92BA5C5730BDDCBE8ACF7F1580DB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
Manifest number: 17DA
Signing time: Wed 21 Jan 2026 08:01:33 +0000
Manifest this update: Wed 21 Jan 2026 08:01:33 +0000
Manifest next update: Thu 22 Jan 2026 08:01:33 +0000
Files and hashes: 1: WQNJEIe-XhMVqV6qFTPIp4rVnqw.roa (hash: WRfBqWi80P8mQckPiPK68sMjih4KvX1rYIU1FaSMrvY=)
2: oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl (hash: n/FQ84sQaia9FUqUbm99Ad1lSvcVtllZdj7dkHBPL4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:df:92:ba:5c:57:30:bd:dc:be:8a:cf:7f:15:80:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1208242656123c0c90b6168d09b2d8a67617bec
Validity
Not Before: Jan 21 08:01:33 2026 GMT
Not After : Jan 22 08:01:33 2026 GMT
Subject: CN=7905ad9b96dbe4f84621902af18d27f4cf118e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:7b:0f:25:62:1f:f1:b4:05:cc:d4:14:e3:
8c:cc:17:7b:bf:f2:68:1e:26:f1:02:5c:56:f0:e2:
c3:d2:25:88:57:10:82:47:ce:e7:b5:c4:4a:a6:87:
70:10:8f:8b:72:20:2b:86:6e:36:e1:86:a8:38:b6:
18:ee:ad:d2:43:65:93:fe:75:2e:ad:05:00:71:4f:
a9:a3:5f:65:07:6b:d5:18:d0:33:5c:5d:0e:b9:33:
86:35:7d:c8:8f:83:1b:05:45:21:2d:b6:eb:02:56:
58:b5:47:f2:e0:a6:db:92:81:5f:23:4a:44:db:3c:
6f:49:ec:57:e7:eb:80:da:0c:61:a8:1f:7f:aa:94:
ce:87:46:63:61:29:5f:5e:c4:db:ee:5e:ef:22:68:
36:85:22:4e:ed:c8:cc:4e:06:82:31:2d:74:50:a8:
96:08:bb:ea:91:be:49:ae:d0:12:ad:f2:3f:98:66:
2a:27:8e:1b:bc:46:29:d8:e0:bf:44:e3:f0:a1:9f:
b0:4d:e0:22:ca:63:4b:b0:ed:dd:ce:d0:21:3f:14:
fa:cb:2e:95:c2:6b:38:bd:5a:b9:d3:5f:ba:6d:d7:
28:7b:68:95:0b:48:86:32:5c:da:8a:27:26:62:74:
b4:ac:11:82:2b:7f:2c:7e:51:32:7f:41:70:85:2e:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:05:AD:9B:96:DB:E4:F8:46:21:90:2A:F1:8D:27:F4:CF:11:8E:1E
X509v3 Authority Key Identifier:
keyid:A1:20:82:42:65:61:23:C0:C9:0B:61:68:D0:9B:2D:8A:67:61:7B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCCQmVhI8DJC2Fo0Jstimdhe-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/bafc4f-d64c-4404-922b-adafaad27aea/1/oSCCQmVhI8DJC2Fo0Jstimdhe-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ba:b4:29:bc:2e:86:a6:72:72:0b:b3:31:df:10:08:55:05:
6f:84:9d:25:d3:d5:0d:9c:f8:07:44:1e:e6:89:9c:a2:15:43:
78:d0:73:7d:5d:9d:ac:32:60:8b:c4:ee:99:4b:c1:45:a2:01:
97:c9:a0:82:48:d2:05:19:84:99:25:03:29:cd:db:19:73:62:
ff:0b:85:05:f2:b8:5a:ab:f6:fa:cc:78:7e:93:6b:3f:b9:56:
0f:9a:47:a2:0e:94:a8:47:f2:fc:c8:e9:de:38:99:47:8f:c7:
c5:9f:3b:1b:93:2f:c5:93:ea:69:c9:6b:ab:17:03:4a:5e:3d:
a1:24:a4:e3:2b:cd:9c:c3:df:f8:77:20:74:15:6b:d8:e4:4c:
9a:a5:5b:df:9a:d8:9e:18:f3:9e:d0:5b:c3:73:99:10:07:27:
c0:de:4a:af:91:9b:63:2d:83:db:06:bf:5b:a3:e5:d9:ea:9e:
de:d4:2e:74:0b:d1:23:37:5e:67:c7:20:cf:30:65:66:a4:35:
54:71:8f:8c:40:aa:76:48:b2:2b:59:79:f5:8c:a5:38:c3:e3:
47:48:aa:29:9a:f1:c4:71:43:c1:0f:9d:34:41:57:72:f5:7c:
02:b5:ee:2f:3c:6b:05:0a:67:5b:28:ba:72:32:18:00:12:a3:
a0:75:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:31 2026 by rpki-client