Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: R6BG0q2oioA+kIsL30UI/tcU/9q/lxbDWA4qFKlzw54=
Subject key identifier: 48:08:D8:EF:00:A4:94:E3:AA:3C:8F:56:55:CC:17:8C:55:42:66:A5
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 019B7C6F5ADEC57CC300E029DF6F1D5321F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 17AD
Signing time: Fri 02 Jan 2026 02:00:31 +0000
Manifest this update: Fri 02 Jan 2026 02:00:31 +0000
Manifest next update: Sat 03 Jan 2026 02:00:31 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: zYDChgB+bGEEhM1ZRmXdqhDkDXYJ1KlrcQ6s6QUgJmo=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:6f:5a:de:c5:7c:c3:00:e0:29:df:6f:1d:53:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 2 02:00:31 2026 GMT
Not After : Jan 3 02:00:31 2026 GMT
Subject: CN=4808d8ef00a494e3aa3c8f5655cc178c554266a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:63:d8:25:b3:b6:00:e6:d3:8f:ef:cd:eb:
5f:87:49:87:35:5f:7b:67:e1:6c:d5:5c:bd:39:c5:
3d:cc:2b:93:29:4e:72:f7:70:a8:72:f0:07:92:80:
dc:8e:70:e9:01:c8:92:33:40:06:45:1c:9f:8f:d4:
d1:3a:f6:b9:f1:28:df:3b:73:ff:ce:09:86:33:00:
97:45:93:85:15:90:4c:39:64:74:b5:59:88:e6:5a:
fa:96:c0:82:46:71:4a:42:16:1f:74:1d:f9:ac:cb:
36:06:aa:63:dc:a6:0e:f6:55:4a:a8:0b:f3:d7:18:
60:1c:13:d7:dc:53:16:88:6e:c5:56:96:ab:12:15:
b5:cb:c9:5e:c6:5e:ab:e1:2c:de:68:8c:6a:25:c7:
3f:61:df:62:f3:2a:78:44:71:be:22:50:06:ad:b7:
af:13:25:36:f9:95:e3:90:07:ef:e9:59:dd:2b:90:
89:90:3c:1c:ac:2e:ad:e9:f7:0d:61:a9:79:1e:3a:
74:6f:b0:af:3c:51:9e:8d:55:7e:f3:22:9b:d3:5c:
b8:7b:b5:d0:d0:99:09:71:f9:42:44:ac:71:e0:f3:
d8:a3:c7:08:0e:88:eb:e7:40:29:f0:ec:36:27:6f:
c6:f5:bf:3b:fc:c0:84:53:5a:2d:d2:b0:0a:b1:05:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:D8:EF:00:A4:94:E3:AA:3C:8F:56:55:CC:17:8C:55:42:66:A5
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:85:eb:c4:69:82:b5:31:02:e2:e4:8d:80:39:cb:b4:cd:
a3:49:d8:44:88:1d:49:f7:b7:b7:5a:96:a2:46:3e:e0:f3:d7:
8c:de:f0:ba:5f:a6:22:83:e9:70:b3:f1:a6:fe:d7:8a:db:e6:
0b:8a:50:7a:d9:32:ba:0e:d9:bc:75:a7:0b:fd:52:5d:f5:e8:
b2:34:d7:5c:d0:a9:6e:79:ae:24:dd:b7:0c:c1:aa:d5:4a:31:
a8:b7:58:1b:20:9a:5a:27:53:55:c1:9b:82:0e:0a:d7:ca:c6:
78:14:87:59:5a:8f:97:8f:fa:15:38:0f:7c:f4:94:1e:8f:41:
74:ad:58:89:e6:81:9c:f9:6f:db:60:a5:9b:db:dd:a4:ec:b4:
f5:40:7d:1f:67:ab:02:ae:be:52:ca:89:ed:58:59:8d:73:d3:
89:65:27:7b:09:c6:87:85:82:5c:a4:2f:c3:0a:bf:e1:43:c9:
75:f4:0f:d1:92:3f:14:cc:b6:7c:0e:00:eb:5b:ac:d4:a2:d5:
42:7b:79:8c:94:3e:f0:df:67:6e:eb:51:2e:e5:f1:24:b4:bd:
06:34:71:87:6a:26:df:47:11:2c:d9:16:fb:e1:7b:91:0b:f6:
c3:c1:ee:21:cb:1f:fd:60:94:36:45:eb:bc:d4:c1:26:a2:7c:
70:3a:dd:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt8b1rexXzDAOAp328dUyHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTAyNGEwYmRmYmFkOTVmMDEwNjRkNTE4Y2Y2ZWE5NjZi
NDQ4OGEwHhcNMjYwMTAyMDIwMDMxWhcNMjYwMTAzMDIwMDMxWjAzMTEwLwYDVQQD
Eyg0ODA4ZDhlZjAwYTQ5NGUzYWEzYzhmNTY1NWNjMTc4YzU1NDI2NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8tj2CWztgDm04/vzetfh0mHNV97
Z+Fs1Vy9OcU9zCuTKU5y93CocvAHkoDcjnDpAciSM0AGRRyfj9TROva58SjfO3P/
zgmGMwCXRZOFFZBMOWR0tVmI5lr6lsCCRnFKQhYfdB35rMs2Bqpj3KYO9lVKqAvz
1xhgHBPX3FMWiG7FVparEhW1y8lexl6r4SzeaIxqJcc/Yd9i8yp4RHG+IlAGrbev
EyU2+ZXjkAfv6VndK5CJkDwcrC6t6fcNYal5Hjp0b7CvPFGejVV+8yKb01y4e7XQ
0JkJcflCRKxx4PPYo8cIDojr50Ap8Ow2J2/G9b87/MCEU1ot0rAKsQV0VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgI2O8ApJTjqjyPVlXMF4xVQmalMB8GA1UdIwQY
MBaAFGwQJKC9+62V8BBk1RjPbqlmtEiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2Ut
MjgzYmIwOTIzODE3LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZDU4YjUtNGYxMy00N2IyLWE1N2UtMjgzYmIwOTIzODE3
LzEvYkJBa29MMzdyWlh3RUdUVkdNOXVxV2EwU0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyaF68Rp
grUxAuLkjYA5y7TNo0nYRIgdSfe3t1qWokY+4PPXjN7wul+mIoPpcLPxpv7Xitvm
C4pQetkyug7ZvHWnC/1SXfXosjTXXNCpbnmuJN23DMGq1UoxqLdYGyCaWidTVcGb
gg4K18rGeBSHWVqPl4/6FTgPfPSUHo9BdK1YieaBnPlv22Clm9vdpOy09UB9H2er
Aq6+UsqJ7VhZjXPTiWUnewnGh4WCXKQvwwq/4UPJdfQP0ZI/FMy2fA4A61us1KLV
Qnt5jJQ+8N9nbutRLuXxJLS9BjRxh2om30cRLNkW++F7kQv2w8HuIcsf/WCUNkXr
vNTBJqJ8cDrdvw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 21:59:54 2026 by rpki-client