Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
File: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft (raw, json)
Hash identifier: CJOdQaKX/msEOCGR/u6XQVDu2142wAGGobURGYQSVwg=
Subject key identifier: 0C:30:94:B8:C6:85:17:0D:C0:23:91:64:10:86:5F:22:AE:CA:85:D4
Authority key identifier: 22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
Certificate issuer: /CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Certificate serial: 019C420F66B86DB748D3E95277F9D4A3579D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
Manifest number: 0DE0
Signing time: Mon 09 Feb 2026 11:00:31 +0000
Manifest this update: Mon 09 Feb 2026 11:00:31 +0000
Manifest next update: Tue 10 Feb 2026 11:00:31 +0000
Files and hashes: 1: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl (hash: P2LRhYacekIaiorr+ZRIJLkaKxIsrl9QEJdLhQ1hujU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:66:b8:6d:b7:48:d3:e9:52:77:f9:d4:a3:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Validity
Not Before: Feb 9 11:00:31 2026 GMT
Not After : Feb 10 11:00:31 2026 GMT
Subject: CN=0c3094b8c685170dc023916410865f22aeca85d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:dd:59:f3:a5:49:33:43:45:af:c3:93:4c:
20:c9:13:40:81:77:d9:94:1f:f2:1e:af:2b:c6:94:
7c:5a:45:3b:bb:86:42:53:7d:fc:f7:c5:86:ca:47:
da:44:15:ef:96:db:95:80:52:a9:5e:36:a3:64:8c:
7a:a2:b9:68:b0:c0:62:ac:82:7c:fe:20:d0:7a:85:
a5:34:d3:f2:06:30:2f:71:57:61:aa:f2:b0:b3:0f:
2b:3f:33:d2:42:f5:28:d5:38:c4:d5:98:1f:69:cc:
85:fe:fc:86:8a:96:2d:02:f7:b4:d3:6e:e4:6d:c9:
ee:1d:45:fe:3d:c7:5a:e8:37:a9:da:4c:30:a7:d5:
ae:22:ba:ff:56:a1:c5:ad:03:22:c7:0c:e1:7a:fd:
32:c2:fe:6a:f3:0e:c8:f2:af:c4:dc:11:f4:47:71:
57:11:4a:8f:12:ca:f7:81:b1:25:9a:ef:af:f4:56:
ff:c9:e8:cd:e7:7c:5e:65:8e:da:9a:b6:5d:91:0d:
4f:be:ec:cd:67:c6:22:a3:b8:10:de:76:80:64:8c:
8b:61:55:10:6f:13:78:86:b7:f3:44:99:ea:cf:82:
51:15:29:e8:08:93:11:ba:6f:76:d3:8f:cf:70:d7:
55:76:89:9a:22:47:ae:a1:85:29:60:11:44:37:61:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:30:94:B8:C6:85:17:0D:C0:23:91:64:10:86:5F:22:AE:CA:85:D4
X509v3 Authority Key Identifier:
keyid:22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b5:86:ab:35:ba:e9:c8:b3:79:b7:04:fb:cb:2e:1f:4e:bc:
f0:34:e4:24:1f:4b:c4:67:09:df:6a:48:8f:dc:06:2c:f8:7a:
d3:66:9c:40:d0:a6:b7:c6:01:e5:60:cd:13:b4:b4:33:f7:42:
e8:f1:ba:de:67:73:86:4e:6c:b5:d3:3a:5d:c0:5d:c6:fe:be:
bf:c2:1d:99:bb:63:f3:76:de:37:d6:3f:e8:50:71:f2:d0:c9:
e6:78:09:10:9d:a6:15:16:97:27:94:23:67:23:c3:18:7a:c8:
7b:7a:08:6e:d4:a2:70:14:7e:84:5b:36:7f:fd:2a:e8:78:82:
42:55:9c:24:bb:ee:cb:db:9d:85:a3:93:7d:41:7e:de:38:9c:
bb:fb:03:be:f9:26:5d:d5:86:ad:6b:be:12:a2:95:2c:f5:79:
8c:6b:4b:41:ab:75:90:d9:d6:4f:2e:57:7b:49:92:32:38:81:
69:d7:71:08:c4:f5:f5:e0:e3:7f:d0:a6:6d:86:68:25:25:dc:
f5:1d:57:b4:3f:3e:c3:28:36:dd:6b:92:cf:6e:5b:f7:a7:19:
08:63:71:1e:f9:08:83:10:13:7c:37:28:86:1c:2d:5c:91:1d:
60:b2:31:4b:96:3f:4e:19:1d:39:b8:51:2d:37:2d:fa:a8:fd:
0c:f2:3f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD2a4bbdI0+lSd/nUo1edMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmJlZjY5NWZhOTVkMGM5NTkwOWU1MWFhMWZhYjk0ZmM0
MDI2N2QwHhcNMjYwMjA5MTEwMDMxWhcNMjYwMjEwMTEwMDMxWjAzMTEwLwYDVQQD
EygwYzMwOTRiOGM2ODUxNzBkYzAyMzkxNjQxMDg2NWYyMmFlY2E4NWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr/dWfOlSTNDRa/Dk0wgyRNAgXfZ
lB/yHq8rxpR8WkU7u4ZCU33898WGykfaRBXvltuVgFKpXjajZIx6orlosMBirIJ8
/iDQeoWlNNPyBjAvcVdhqvKwsw8rPzPSQvUo1TjE1ZgfacyF/vyGipYtAve0027k
bcnuHUX+Pcda6Dep2kwwp9WuIrr/VqHFrQMixwzhev0ywv5q8w7I8q/E3BH0R3FX
EUqPEsr3gbElmu+v9Fb/yejN53xeZY7amrZdkQ1PvuzNZ8Yio7gQ3naAZIyLYVUQ
bxN4hrfzRJnqz4JRFSnoCJMRum9204/PcNdVdomaIkeuoYUpYBFEN2GD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwwlLjGhRcNwCORZBCGXyKuyoXUMB8GA1UdIwQY
MBaAFCL772lfqV0MlZCeUaofq5T8QCZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZ2dmFWLXBYUXlWa0o1UnFoLXJsUHhBSm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84N2FhMjAtMjIyYy00YWNiLWIyOTEt
ZjYyOTUwOGMwNzJkLzEvSXZ2dmFWLXBYUXlWa0o1UnFoLXJsUHhBSm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84N2FhMjAtMjIyYy00YWNiLWIyOTEtZjYyOTUwOGMwNzJk
LzEvSXZ2dmFWLXBYUXlWa0o1UnFoLXJsUHhBSm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULWGqzW6
6cizebcE+8suH0688DTkJB9LxGcJ32pIj9wGLPh602acQNCmt8YB5WDNE7S0M/dC
6PG63mdzhk5stdM6XcBdxv6+v8Idmbtj83beN9Y/6FBx8tDJ5ngJEJ2mFRaXJ5Qj
ZyPDGHrIe3oIbtSicBR+hFs2f/0q6HiCQlWcJLvuy9udhaOTfUF+3jicu/sDvvkm
XdWGrWu+EqKVLPV5jGtLQat1kNnWTy5Xe0mSMjiBaddxCMT19eDjf9CmbYZoJSXc
9R1XtD8+wyg23WuSz25b96cZCGNxHvkIgxATfDcohhwtXJEdYLIxS5Y/ThkdObhR
LTct+qj9DPI/3Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:37:25 2026 by rpki-client