Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
File: n43ba5j65Xcxmbx0zEVyCClPrJ8.mft (raw, json)
Hash identifier: PHNq/MNTQ4yOETOwr/wP4PgCZEtAyB0MW2JSCB5a4y8=
Subject key identifier: AE:A2:A1:FF:7E:43:65:FD:8C:D0:52:3D:FF:67:B9:E7:60:32:85:2C
Authority key identifier: 9F:8D:DB:6B:98:FA:E5:77:31:99:BC:74:CC:45:72:08:29:4F:AC:9F
Certificate issuer: /CN=9f8ddb6b98fae5773199bc74cc457208294fac9f
Certificate serial: 019CD0F7D3B37E77371C67DF9FDED55C99CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n43ba5j65Xcxmbx0zEVyCClPrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
Manifest number: 78
Signing time: Mon 09 Mar 2026 05:00:28 +0000
Manifest this update: Mon 09 Mar 2026 05:00:28 +0000
Manifest next update: Tue 10 Mar 2026 05:00:28 +0000
Files and hashes: 1: KYdro_-TYjUYOYn2jmTsWTjiNQE.asa (hash: hrVQ2S7yh+jiK5CKVHCZO/hAag7/f3dpnVjjDvyd46s=)
2: n43ba5j65Xcxmbx0zEVyCClPrJ8.crl (hash: Od5fKvLT7Ru4ks34UO4YN88yCI/Sd+9Hx3++ZY+yjis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d0:f7:d3:b3:7e:77:37:1c:67:df:9f:de:d5:5c:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8ddb6b98fae5773199bc74cc457208294fac9f
Validity
Not Before: Mar 9 05:00:28 2026 GMT
Not After : Mar 10 05:00:28 2026 GMT
Subject: CN=aea2a1ff7e4365fd8cd0523dff67b9e76032852c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:34:7b:f5:ee:78:81:a0:a3:58:0a:e6:d5:
3c:55:fe:c7:43:42:f8:16:e2:96:c6:9c:8e:e6:b0:
7b:c4:6a:93:4e:03:4d:77:09:ff:5a:8b:aa:e2:31:
9d:ca:c4:c3:1f:9a:e2:81:be:af:49:01:1d:b8:3e:
7e:b5:aa:1f:57:08:c0:e5:81:11:da:4a:a3:ab:d8:
89:7e:8a:50:ca:a7:ff:1b:c2:a6:e4:cb:29:c9:72:
40:96:2e:9d:7b:30:b5:b4:47:2d:aa:b6:40:6f:a4:
82:44:4c:d8:ed:e8:91:ce:21:b3:f2:1a:60:20:72:
d4:98:57:77:22:fc:82:3e:5f:01:b0:a2:63:c6:14:
c8:64:7b:87:e1:82:bf:c7:46:b9:60:af:ae:41:0c:
c5:c6:d9:0a:eb:b5:51:c9:ef:b9:e7:ae:a9:31:86:
b2:f4:df:11:a1:90:dc:e2:7c:46:96:7f:b9:80:36:
d7:47:92:17:33:41:04:0a:1b:7b:82:e3:e5:e3:19:
9e:07:82:01:ef:f5:d5:75:d6:45:fb:b2:9d:ae:dd:
b0:c7:55:f2:0e:2a:47:26:e9:4d:73:13:87:c2:23:
de:58:75:e6:c5:81:aa:da:0d:fe:98:3a:d0:37:3f:
a0:e8:ba:d3:9a:13:29:69:46:ea:11:d6:82:57:c5:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:A1:FF:7E:43:65:FD:8C:D0:52:3D:FF:67:B9:E7:60:32:85:2C
X509v3 Authority Key Identifier:
keyid:9F:8D:DB:6B:98:FA:E5:77:31:99:BC:74:CC:45:72:08:29:4F:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n43ba5j65Xcxmbx0zEVyCClPrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c5:dd:58:78:48:d0:c7:72:09:ec:c2:3e:ac:71:44:3b:14:
c0:b6:a9:2a:d0:a5:90:5b:0b:0a:1f:a2:08:78:bf:fa:ac:d8:
0c:c3:10:1b:90:fc:1e:b3:a6:d5:92:97:c6:73:9d:1a:75:94:
b9:2a:66:fd:5e:8c:92:17:4d:e8:b5:0b:54:61:81:8f:c4:33:
e3:96:9d:23:5e:51:9a:db:60:77:9e:ec:bc:62:87:ba:dc:56:
c0:a9:f5:0c:3d:64:db:f6:a7:82:4a:59:ad:df:3d:59:6c:4d:
b5:f0:4c:b4:8f:86:67:ca:40:10:40:4e:e7:75:80:9e:a8:54:
28:5e:f3:f9:12:91:58:6f:60:18:08:0f:a5:45:33:35:87:f7:
58:c4:e8:d6:0a:d2:b0:b7:0e:73:b9:62:23:36:e8:84:af:05:
a2:cf:80:71:6f:15:46:4e:dd:1f:08:0f:d0:d6:aa:11:97:ac:
e5:75:cb:d5:98:40:ee:84:cf:fc:36:d1:45:64:c5:43:8a:c0:
bb:ad:6c:d8:94:db:ec:b3:cc:71:09:e2:35:04:63:7c:54:5f:
49:3a:d0:25:0a:09:d3:28:1a:1e:bb:ab:98:75:be:dc:11:ef:
55:5d:a9:12:21:1e:d9:b4:bb:ce:c4:07:1f:ec:70:b8:f0:06:
51:44:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 01:09:46 2026 by rpki-client