Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: oKzlgiqSKAbdkx9y2DBpPDtcmN9Xrdi3whAZX7EKRSM=
Subject key identifier: C3:A2:B4:98:5C:8A:42:25:76:47:80:89:F8:89:F2:BA:4F:DC:D9:0A
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 019E66F2F691FFFB57A9C7E662BB8CCF18E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 0862
Signing time: Wed 27 May 2026 01:00:59 +0000
Manifest this update: Wed 27 May 2026 01:00:59 +0000
Manifest next update: Thu 28 May 2026 01:00:59 +0000
Files and hashes: 1: Z-WbSmra_G1kvyx-Bej3vkhtQis.roa (hash: gk+4vFFmmxKEtInMkLHpcbUkvzWIfqwHSMm2pJIJXSU=)
2: lCTE0e6511lXYUV4jzoQANe1D0c.roa (hash: duBHYLft9CmJTD9gy5FmFbBDQw9Rjhhhi+M/Mn6KU3Y=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: akf8ky3csd1WlZCaULixtgU+THCvWhONTHv+zu/qd1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:66:f2:f6:91:ff:fb:57:a9:c7:e6:62:bb:8c:cf:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: May 27 01:00:59 2026 GMT
Not After : May 28 01:00:59 2026 GMT
Subject: CN=c3a2b4985c8a422576478089f889f2ba4fdcd90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:63:5d:ed:a5:68:83:fd:e7:44:d6:b5:f3:
ad:10:aa:3b:2a:2c:a6:e7:89:7b:e2:5d:c5:b1:88:
b9:2f:e7:95:d8:82:5a:4c:06:7e:2c:79:95:7c:02:
6b:4d:82:0e:bc:7c:46:39:9d:39:15:ab:e9:fd:9c:
da:9d:13:e1:34:e5:37:df:99:45:d2:19:a9:77:48:
4c:7e:b8:8d:77:fc:71:3a:51:be:7d:f6:e0:9e:08:
a5:01:cf:39:26:f0:bd:4b:3f:7d:46:fd:e6:30:0d:
ba:be:98:af:ea:0b:10:cb:63:9d:e7:60:ca:02:a3:
db:89:16:f8:d5:02:6e:8c:7a:ff:f8:62:9d:6b:8d:
4e:de:49:af:cb:af:32:bc:cc:5b:fc:c2:be:2f:5e:
e8:c5:35:ac:06:08:77:bc:20:92:61:46:75:26:42:
f9:fc:c2:bc:fc:c9:8f:8e:df:88:c8:86:09:d1:cd:
14:91:59:06:fb:b9:87:0e:eb:e6:33:98:09:9e:58:
f9:00:80:d1:c0:41:15:a4:46:fb:d5:8c:dd:85:d6:
04:cf:9d:9e:da:6b:f0:42:21:81:41:cd:4d:d3:fb:
1d:3a:46:df:fa:40:90:56:c8:c3:f1:78:b9:50:d4:
ca:85:5c:f9:a7:46:53:c6:a5:09:1c:d8:58:6d:34:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:B4:98:5C:8A:42:25:76:47:80:89:F8:89:F2:BA:4F:DC:D9:0A
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:16:1e:f5:4a:b4:53:88:a3:15:ca:86:14:8f:30:cd:ce:58:
aa:a4:b8:b0:41:30:c2:3d:44:64:b4:21:cc:98:6e:8c:85:bd:
f3:b1:12:cc:d0:99:2b:1e:19:97:ab:de:d6:92:32:56:cb:59:
0c:18:c0:20:35:ed:fa:5e:94:7e:fd:9e:50:c6:47:ff:b9:cc:
5b:13:97:69:af:71:30:24:d2:54:9b:75:8f:13:41:19:5b:6a:
a4:47:b2:95:eb:ed:b2:67:c9:56:b6:e0:5e:41:57:84:62:04:
e1:3e:af:6f:4e:19:21:e9:e2:97:ee:e5:71:c5:e2:92:85:6f:
fd:95:21:6f:f5:ff:fa:36:e7:d8:e9:88:af:ec:17:92:a0:50:
f2:e5:75:95:d7:d7:1a:40:24:6a:3c:66:a5:c8:92:89:0f:7c:
58:2c:8d:6a:3a:95:bc:e2:70:8e:85:51:23:7f:7e:d2:db:3b:
18:ef:89:9a:2f:d3:66:e8:0e:66:19:37:64:71:3e:f4:47:0b:
65:42:02:c5:0c:55:ac:e7:a9:3c:08:4f:85:bd:2d:f0:80:be:
30:38:3c:c6:90:7b:63:84:b5:f2:0f:a8:3b:38:bc:43:a9:dc:
22:4a:8c:b1:bd:ae:ff:80:d5:f3:d7:0f:0a:4d:6c:73:e9:09:
89:6c:90:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:50 2026 by rpki-client