Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
File: flNU4TNHCPGAASuyN6lfn6x6Tlw.mft (raw, json)
Hash identifier: utuR9QFFVn8XXT/db1kKzpXbkrIefAp0UL1+GlChPkE=
Subject key identifier: CD:64:C6:74:DD:A4:DA:5D:04:AC:B0:B2:21:64:F3:4D:D5:CF:F6:01
Authority key identifier: 7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
Certificate issuer: /CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Certificate serial: 019B8C50B4410755B0EE26DD3BC5DB80210F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
Manifest number: 0ABA
Signing time: Mon 05 Jan 2026 04:00:57 +0000
Manifest this update: Mon 05 Jan 2026 04:00:57 +0000
Manifest next update: Tue 06 Jan 2026 04:00:57 +0000
Files and hashes: 1: 9RoWTjSKZacFHu0IHqaQe2lp1XQ.roa (hash: bwo5scBTIQZnQ6wkP0kxp26aYUwL1dvI/e+7fM/hnSg=)
2: flNU4TNHCPGAASuyN6lfn6x6Tlw.crl (hash: cY09XN7E3imk1Nm+6rLoF8F3mYRtFO/KrZGeDK2/tLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8c:50:b4:41:07:55:b0:ee:26:dd:3b:c5:db:80:21:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5354e1334708f180012bb237a95f9fac7a4e5c
Validity
Not Before: Jan 5 04:00:57 2026 GMT
Not After : Jan 6 04:00:57 2026 GMT
Subject: CN=cd64c674dda4da5d04acb0b22164f34dd5cff601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:84:b4:09:b4:c1:56:9d:93:c2:75:6f:7f:
71:e3:d8:68:04:81:77:d6:ba:b2:a0:47:fc:d5:b0:
32:63:9d:a1:3c:1e:b1:87:e3:87:3d:8c:9c:1f:f3:
77:79:d2:09:41:ce:4b:65:79:02:3e:f8:bc:ec:6a:
04:7c:b3:73:d8:82:e2:a9:01:ae:05:b6:c6:16:df:
f6:fb:90:24:6a:41:89:d4:80:4c:5f:cd:a9:76:a6:
6e:31:f5:6a:7f:f5:34:f2:65:19:3d:d2:9d:fe:a7:
94:25:56:fc:c9:27:6b:a9:3c:11:d2:0c:14:7f:fe:
9d:b4:b8:a0:c6:eb:41:c2:52:db:d2:58:1b:6d:54:
c9:30:c5:ef:41:f4:64:48:8f:5a:23:0f:92:fd:2c:
0d:1a:fe:fb:f6:1e:2a:3d:8a:7d:9c:cb:c0:18:3f:
f0:1a:24:2e:42:07:1c:18:27:b7:2e:2a:fe:30:62:
4c:c0:49:2a:cf:34:fb:ba:28:92:02:00:9b:dd:e5:
3d:b7:e5:28:0a:4f:c3:04:54:e7:67:b6:b2:61:3e:
bb:0c:2d:9f:92:d4:13:43:f5:f6:f1:c5:85:82:27:
83:0e:85:0c:df:a9:f9:eb:1e:65:89:cf:34:d8:ee:
de:f3:41:2c:c3:75:41:ef:1a:89:95:01:93:54:5a:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:64:C6:74:DD:A4:DA:5D:04:AC:B0:B2:21:64:F3:4D:D5:CF:F6:01
X509v3 Authority Key Identifier:
keyid:7E:53:54:E1:33:47:08:F1:80:01:2B:B2:37:A9:5F:9F:AC:7A:4E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flNU4TNHCPGAASuyN6lfn6x6Tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/21443f-e68f-49e6-abc9-6083393cf46e/1/flNU4TNHCPGAASuyN6lfn6x6Tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:51:9e:95:48:b9:01:26:d3:ea:79:b3:23:e1:c4:00:2a:6d:
bd:ab:1e:10:ab:05:4e:e9:ce:13:91:f2:94:46:74:5d:2b:6e:
f3:e0:ed:35:38:ec:e8:83:38:06:61:e2:bf:08:a9:4f:b5:df:
16:0b:f8:56:0d:ea:39:8c:00:96:7d:5c:7c:22:0a:0d:7b:26:
15:84:2f:d9:73:04:e1:f5:f4:f1:1d:b3:63:4f:01:19:91:b8:
d1:af:eb:c0:b5:e6:cb:30:f8:56:3b:ae:c6:5a:3c:c1:75:24:
e1:2d:56:41:20:72:08:11:a9:05:30:41:3f:15:68:68:96:ae:
d7:d8:c3:3f:09:76:37:f3:a6:fe:f2:fe:ec:2f:b2:04:48:ad:
05:4b:41:e4:8a:8b:2b:d4:0a:1d:d9:0a:bb:9f:8f:3b:e7:7e:
62:82:b2:91:f5:c8:f6:36:8e:08:82:d7:7b:07:5f:2b:bf:65:
f7:64:73:c9:53:aa:5e:86:cb:1d:88:4f:8f:4a:52:ed:af:1f:
e8:35:d9:ce:0a:99:d7:4b:f3:cc:13:5c:90:8f:ca:d3:31:85:
1e:13:57:e3:74:39:60:2b:5f:8c:c4:b3:00:8b:b0:8e:c3:1a:
2e:53:75:3a:47:d3:58:c9:1c:ba:a6:64:3a:d4:39:e9:be:f0:
55:9c:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:15:04 2026 by rpki-client