Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File: 8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier: mQ4n4HpbIZMjaFiZE+PylQ0Z8oLeO08XoriPpa9jNFo=
Subject key identifier: 20:66:EA:33:4B:D6:D7:D2:1A:EB:4D:7E:68:3C:E6:CE:70:7E:B6:3D
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer: /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial: 019BBAE0CCA0A51808BB1C8E314FBFB85D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number: 0BB5
Signing time: Wed 14 Jan 2026 05:00:53 +0000
Manifest this update: Wed 14 Jan 2026 05:00:53 +0000
Manifest next update: Thu 15 Jan 2026 05:00:53 +0000
Files and hashes: 1: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: 4ny4fEm/fhKsY3BQnqVnAkM1ffBmrw8VjrXzmZTt4fg=)
2: z9AOZSMjvyDQ2OTsot3gKnm5c0M.roa (hash: gg7BZeONjKJjmAC+VXvsGVNlf+PfATjtwt/JfvTDFL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ba:e0:cc:a0:a5:18:08:bb:1c:8e:31:4f:bf:b8:5d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Validity
Not Before: Jan 14 05:00:53 2026 GMT
Not After : Jan 15 05:00:53 2026 GMT
Subject: CN=2066ea334bd6d7d21aeb4d7e683ce6ce707eb63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:2f:77:e3:d5:92:16:40:af:80:e6:4f:6f:
ce:d2:23:d0:37:42:2d:ac:f8:32:82:97:fa:f2:91:
65:f5:97:6c:7c:5e:21:6c:d4:16:79:f0:2c:cb:3b:
6e:f8:2a:a9:ca:93:1e:05:4e:23:41:71:e8:79:2c:
8a:1c:ef:bd:b7:09:57:04:e2:73:a7:a4:27:6e:11:
7a:cc:03:fa:eb:9b:ed:a2:ab:a3:d2:f5:17:b9:79:
de:05:ef:63:d6:84:12:e1:ab:be:e0:0e:d8:ed:02:
ab:2d:91:89:2d:cd:7f:f5:ab:a3:c6:17:17:86:b2:
fd:ad:1c:66:e7:3e:dc:3c:21:33:50:12:7f:39:26:
82:4b:bf:e9:fa:47:70:b2:b2:52:61:a3:ca:e1:6b:
76:c5:c4:a9:a0:41:ec:c2:e0:0b:be:b7:33:89:63:
81:0d:d0:67:19:3f:00:70:b4:07:53:ef:dc:20:03:
dc:75:c7:ab:af:5d:fa:3c:a8:9c:39:4b:ed:3e:a9:
2f:51:4b:8b:db:17:0a:a6:e1:3b:58:c1:8f:d1:cc:
6e:a3:41:23:9d:2a:5b:f7:f3:8c:2a:de:a7:6b:1b:
ee:31:e3:48:96:a3:79:5a:57:f7:df:32:c0:63:fb:
7b:c8:d8:95:b3:be:27:5e:8f:ff:63:f6:10:25:3a:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:EA:33:4B:D6:D7:D2:1A:EB:4D:7E:68:3C:E6:CE:70:7E:B6:3D
X509v3 Authority Key Identifier:
keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:94:67:a0:10:aa:a3:51:92:87:c3:4c:73:74:01:f3:82:
a0:70:a8:ab:8f:e1:4c:db:14:08:15:b3:60:4f:56:1a:94:66:
c6:96:bf:54:ad:7c:c3:a8:3f:3f:46:6f:32:d5:33:33:e2:2b:
c2:d3:b5:c2:66:7f:19:4c:ee:92:9b:21:51:94:c9:d8:4e:70:
a9:39:cb:7a:42:75:3e:63:1b:80:03:f1:78:51:16:93:58:29:
76:9b:ab:39:21:ee:4c:41:f9:72:c3:7c:07:1b:fe:fe:f5:b6:
5f:06:31:a8:10:52:4f:fb:51:e2:2b:89:2f:fa:ae:cc:cf:fb:
45:ac:5c:18:8f:b0:0d:eb:8b:d8:eb:43:9e:0e:0f:b9:2d:4c:
ea:d1:db:a0:b1:52:90:f5:2f:24:25:e6:5c:39:4e:02:72:a7:
22:57:03:81:b3:49:5a:92:64:98:05:ae:0d:20:a6:f0:c3:db:
c6:c3:fc:c0:ac:d3:36:4e:ef:55:be:75:e4:50:f5:83:a8:7c:
bf:c1:2f:c0:0e:70:81:de:50:48:a6:f7:46:8a:15:5f:8f:b0:
52:e3:22:2d:19:83:fc:4d:58:58:6f:c8:92:9c:28:9e:f6:8c:
d3:ae:0b:8c:ce:7a:dc:66:e7:2a:04:a2:c1:ca:f2:c3:63:7c:
8c:8f:e0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 12:46:30 2026 by rpki-client