Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
File: CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft (raw, json)
Hash identifier: VJck1/rw4gV8dHSd1eC+SDXiptq18TVn02+802qchAI=
Subject key identifier: 19:A1:99:A1:16:8A:CE:CE:FD:EE:FE:19:6E:B6:C3:78:DF:0D:4C:D7
Authority key identifier: 0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
Certificate issuer: /CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Certificate serial: 019F227DA4116D249C98FBF73D73CE3D9031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
Manifest number: 198F
Signing time: Thu 02 Jul 2026 11:01:27 +0000
Manifest this update: Thu 02 Jul 2026 11:01:27 +0000
Manifest next update: Fri 03 Jul 2026 11:01:27 +0000
Files and hashes: 1: CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl (hash: 71T2xQcMQvXtgTDVXL/YMIhBAaqxcpFhkjcfmGTDDtM=)
2: LfBxCi_T6d0bglwaFaNfqmxOUo8.roa (hash: nCJqjZS1Ks0JHWJEQU7QcXEZQwSVxL2fqIOkUlaTeGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:a4:11:6d:24:9c:98:fb:f7:3d:73:ce:3d:90:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a925f8d6684c86107d2756b4aa93881f02ae
Validity
Not Before: Jul 2 11:01:27 2026 GMT
Not After : Jul 3 11:01:27 2026 GMT
Subject: CN=19a199a1168acecefdeefe196eb6c378df0d4cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:2f:5e:36:40:cd:04:0b:e8:ae:91:3d:24:
a8:44:43:38:ad:59:7d:cc:54:3b:00:2e:30:5b:a5:
1a:56:45:3f:49:4f:13:07:4f:fb:4c:5b:bc:26:94:
21:18:06:a2:3f:94:c7:cd:0a:59:1a:25:22:4b:b4:
7f:0e:51:63:9f:fa:d1:e9:5a:c7:2f:b6:5e:b0:7d:
32:75:e4:c4:b8:2b:94:6f:94:d6:33:8e:9a:51:fd:
a3:6e:93:c0:7b:2e:92:c0:56:fb:96:7c:1f:55:b9:
15:0e:74:63:be:7f:2d:1c:1b:5c:bf:5e:ba:3f:21:
59:d4:a7:03:a8:1d:5f:5e:3e:9f:4a:5d:56:34:5a:
57:c5:7f:ed:e7:0c:63:55:d6:c3:7b:9e:8b:df:0b:
e8:a6:71:c3:7d:aa:5e:cf:25:ed:45:a3:55:65:7f:
74:0b:a5:f3:6b:76:0a:da:bb:12:89:6b:50:e6:df:
d8:9b:31:cc:f8:c2:96:cf:e2:a9:b0:1e:0c:c9:ba:
c0:b9:4e:53:70:30:a4:2a:98:d3:a1:db:1d:01:9d:
82:be:18:90:2d:c0:c5:bd:98:12:e5:4a:62:4a:8f:
b8:67:9f:d4:2d:74:cb:12:ad:6a:4b:3c:c5:19:fd:
c6:b2:e5:10:df:ac:37:50:89:5b:e4:8a:d3:14:b2:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A1:99:A1:16:8A:CE:CE:FD:EE:FE:19:6E:B6:C3:78:DF:0D:4C:D7
X509v3 Authority Key Identifier:
keyid:0A:41:A9:25:F8:D6:68:4C:86:10:7D:27:56:B4:AA:93:88:1F:02:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGpJfjWaEyGEH0nVrSqk4gfAq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/CkGpJfjWaEyGEH0nVrSqk4gfAq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:e1:7e:5a:8c:53:51:02:7c:d0:63:4c:f7:aa:8a:7d:cb:
fe:6c:37:c9:60:c6:ac:39:ca:bd:8d:bb:e1:85:15:8c:18:af:
c8:6f:a4:c0:d0:c7:30:6d:88:39:cd:89:97:89:72:e9:3e:13:
86:73:24:b4:98:3b:34:15:75:f2:08:8c:a1:d8:b9:fe:83:aa:
72:d6:c6:c1:98:31:e8:d2:63:f6:76:2a:1d:77:7b:fe:d9:53:
7d:dc:14:05:5a:d3:46:86:da:09:16:75:16:8a:d5:80:43:6f:
84:f5:48:74:4c:97:e6:69:e9:df:22:99:6d:9a:50:22:50:db:
cb:08:c0:6b:75:1d:d9:bd:1f:ce:99:4f:9b:ff:8e:9a:d5:15:
48:5d:e2:3d:2d:6e:c6:8d:4a:ca:af:92:94:89:8e:3f:1c:de:
ea:f9:61:e6:0f:52:48:62:61:da:11:90:97:c0:d8:1b:52:b2:
b9:7f:79:da:f8:aa:57:d6:02:49:a4:ad:fa:43:11:10:d5:ed:
cc:83:43:62:3b:35:49:85:08:3e:d1:05:d4:61:79:4a:75:61:
f2:7e:b5:fa:ea:15:d1:ee:07:aa:64:43:b8:f8:b0:f8:67:90:
f2:a3:ae:95:3f:c6:55:df:95:bb:73:a8:c5:a4:fe:5f:56:94:
dc:bc:8d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:03 2026 by rpki-client