Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: N5CHclcRSZbTaPEAov+SvZrCL7Amn1QKShbD5K9DdU4=
Subject key identifier: F8:53:E1:81:F8:6F:0C:D1:A6:ED:A9:1B:0E:F3:4C:25:19:E6:F2:85
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 019C08201A3F60BBD22C030E80B71F8AE5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 08CB
Signing time: Thu 29 Jan 2026 05:00:47 +0000
Manifest this update: Thu 29 Jan 2026 05:00:47 +0000
Manifest next update: Fri 30 Jan 2026 05:00:47 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: HJD7OBLPblgpNgfxIOZG2Yo40BFFVFauSKsPnIGJFLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:20:1a:3f:60:bb:d2:2c:03:0e:80:b7:1f:8a:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Jan 29 05:00:47 2026 GMT
Not After : Jan 30 05:00:47 2026 GMT
Subject: CN=f853e181f86f0cd1a6eda91b0ef34c2519e6f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:fe:00:b6:c7:2b:0d:73:ee:2e:ce:97:d0:
d9:15:ab:5f:78:2e:1b:2f:50:fd:21:48:20:20:02:
22:00:39:01:5f:9d:54:3c:cc:5b:39:d9:6f:31:e4:
13:92:01:48:a1:4b:3a:e8:62:d2:a0:ae:9f:0c:e6:
49:7a:81:f9:02:22:39:22:bb:e4:fa:ef:96:2a:26:
2b:7a:cd:63:66:89:87:06:be:22:3b:39:56:ee:91:
f9:e0:ce:00:6c:f6:74:f6:3b:45:29:28:c0:83:27:
48:40:bf:c5:16:05:1b:b6:40:9d:f3:63:73:86:87:
ae:e0:65:e4:36:1b:0b:90:d6:1a:1e:7a:81:29:92:
e0:fd:25:ab:49:bc:f7:eb:f3:96:86:87:22:47:b5:
5f:9f:d0:9a:e6:9b:5d:07:85:98:50:23:eb:5e:bb:
40:ed:b9:c8:15:33:f8:c0:1c:86:44:72:09:42:90:
33:25:40:46:ce:e1:67:59:43:0d:96:ce:3c:11:ad:
67:a1:88:60:59:3c:83:dd:c0:a8:49:32:4f:ad:99:
f9:f6:ff:c6:b5:e7:d5:68:3d:c9:48:b9:92:9b:22:
f3:4f:06:84:14:14:80:86:d6:83:7c:95:e4:64:43:
bb:80:d7:d4:9b:68:21:0f:43:bb:27:1f:50:70:6f:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:E1:81:F8:6F:0C:D1:A6:ED:A9:1B:0E:F3:4C:25:19:E6:F2:85
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:90:c4:61:6a:da:04:d5:3a:e0:e0:48:66:2c:4e:09:dc:
df:75:cb:d1:8d:88:84:de:29:96:ce:0f:cb:1f:84:5a:13:92:
ec:55:27:8c:21:a5:47:08:c9:08:f6:9f:35:4c:ae:2c:50:da:
3f:d7:26:ac:4d:9e:37:6a:7e:46:df:c8:db:9b:b2:a6:62:48:
81:34:9f:c8:0b:6e:c2:44:64:f3:19:cf:3e:ab:e5:96:1d:ac:
ed:6d:9a:0e:19:a0:71:9d:3a:19:53:b2:a7:21:24:1a:dc:47:
f6:4c:b8:5e:cc:e9:81:9a:06:5a:d0:96:ba:28:ef:72:bc:2e:
f6:1e:32:5b:67:4d:5f:ef:03:60:8e:80:13:08:ea:72:b3:86:
13:08:77:ff:b0:eb:10:e5:4b:47:09:be:12:da:0a:26:97:c5:
f3:ac:b4:63:66:51:28:37:78:1e:52:62:a5:e6:ea:74:4f:4c:
48:af:d2:76:e0:5f:3d:bc:af:62:63:d4:a4:fd:02:82:65:0a:
69:f3:d6:d5:a2:06:d5:0c:43:6d:1a:f1:5c:a2:37:0f:e9:75:
cd:22:79:b6:77:3c:2c:c7:a0:8f:3e:a0:eb:f4:76:f5:4a:fa:
ac:da:ba:b5:f5:a3:ab:06:39:89:b3:d2:57:81:10:0c:d3:31:
87:2e:d3:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwIIBo/YLvSLAMOgLcfiuXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjgyNWNjMTBlNGMyMmIzODVjNGEzN2FmOTBmMzBiNjg4
MTQxMWEwHhcNMjYwMTI5MDUwMDQ3WhcNMjYwMTMwMDUwMDQ3WjAzMTEwLwYDVQQD
EyhmODUzZTE4MWY4NmYwY2QxYTZlZGE5MWIwZWYzNGMyNTE5ZTZmMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZD+ALbHKw1z7i7Ol9DZFatfeC4b
L1D9IUggIAIiADkBX51UPMxbOdlvMeQTkgFIoUs66GLSoK6fDOZJeoH5AiI5Irvk
+u+WKiYres1jZomHBr4iOzlW7pH54M4AbPZ09jtFKSjAgydIQL/FFgUbtkCd82Nz
hoeu4GXkNhsLkNYaHnqBKZLg/SWrSbz36/OWhociR7Vfn9Ca5ptdB4WYUCPrXrtA
7bnIFTP4wByGRHIJQpAzJUBGzuFnWUMNls48Ea1noYhgWTyD3cCoSTJPrZn59v/G
tefVaD3JSLmSmyLzTwaEFBSAhtaDfJXkZEO7gNfUm2ghD0O7Jx9QcG9CmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhT4YH4bwzRpu2pGw7zTCUZ5vKFMB8GA1UdIwQY
MBaAFMRoJcwQ5MIrOFxKN6+Q8wtogUEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUt
ZDU0OTY5NWU0MzNjLzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82YTE4MDgtNmZiOC00NWM4LTk1NGUtZDU0OTY5NWU0MzNj
LzEveEdnbHpCRGt3aXM0WEVvM3I1RHpDMmlCUVJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHOQxGFq
2gTVOuDgSGYsTgnc33XL0Y2IhN4pls4Pyx+EWhOS7FUnjCGlRwjJCPafNUyuLFDa
P9cmrE2eN2p+Rt/I25uypmJIgTSfyAtuwkRk8xnPPqvllh2s7W2aDhmgcZ06GVOy
pyEkGtxH9ky4XszpgZoGWtCWuijvcrwu9h4yW2dNX+8DYI6AEwjqcrOGEwh3/7Dr
EOVLRwm+EtoKJpfF86y0Y2ZRKDd4HlJipebqdE9MSK/SduBfPbyvYmPUpP0CgmUK
afPW1aIG1QxDbRrxXKI3D+l1zSJ5tnc8LMegjz6g6/R29Ur6rNq6tfWjqwY5ibPS
V4EQDNMxhy7TjQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:51 2026 by rpki-client