Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: njybtzn5ypdENTS5tUBUwilZu1z1A6AuY31D3Ye6raQ=
Subject key identifier: 1F:28:15:FA:1F:F9:03:53:AA:D3:6A:FD:B1:3E:31:9D:AD:B2:B2:BC
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 019D1A242ECEBCA4F2FE6C595F9292C2C4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 07F5
Signing time: Mon 23 Mar 2026 10:01:11 +0000
Manifest this update: Mon 23 Mar 2026 10:01:11 +0000
Manifest next update: Tue 24 Mar 2026 10:01:11 +0000
Files and hashes: 1: JDHzfbODeF1jb87zzN4sAP4jAbo.roa (hash: BaHlrmbp9zG7hiRU2oGvQZ90gALPXRm/y+4P+IkdsMI=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: 29K8G08pH+DcpTbu3fE3fpa8AArR8KakX0vcOI0SvM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:24:2e:ce:bc:a4:f2:fe:6c:59:5f:92:92:c2:c4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Mar 23 10:01:11 2026 GMT
Not After : Mar 24 10:01:11 2026 GMT
Subject: CN=1f2815fa1ff90353aad36afdb13e319dadb2b2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:45:f6:ed:bc:0a:cf:53:e0:54:d3:b4:8b:
62:77:a6:eb:cc:17:bc:b8:32:14:38:5f:e8:5d:d9:
ec:a9:48:db:09:f9:8a:17:9f:8a:b8:c0:66:ea:c4:
bd:85:a8:96:ef:83:66:78:67:eb:1c:d2:56:a8:5f:
a3:2b:3b:38:e3:ac:af:ab:5a:ec:1e:c0:d1:60:21:
88:56:c9:22:2f:b7:2f:1b:8a:b5:fa:b2:9d:ce:32:
9e:0a:6c:56:a3:c3:88:99:3c:55:c2:c1:47:be:0c:
44:8e:86:dd:b3:54:f4:a9:4c:13:6b:65:2a:4c:f4:
ee:1d:6c:ff:9a:71:97:8e:e8:40:c8:71:ba:46:00:
c7:9a:d8:c0:38:b9:86:dd:4e:4e:9b:00:04:79:82:
71:2a:d4:2e:12:11:bf:0d:4b:73:c6:9c:e4:1b:04:
36:e1:2b:8a:3d:b9:72:9a:db:3d:e6:4d:c2:19:dc:
5a:26:47:29:dc:25:f2:2a:b1:dd:1d:41:6d:5d:65:
aa:6b:d5:b8:56:3e:76:eb:1e:64:87:56:ac:1d:ab:
8a:67:ff:b1:5e:d3:18:ec:37:58:63:7f:23:c2:59:
91:7a:a7:f6:a3:89:10:2b:52:7a:72:51:e5:56:88:
49:37:68:b8:bb:a1:8c:67:dd:be:49:25:fb:37:fc:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:15:FA:1F:F9:03:53:AA:D3:6A:FD:B1:3E:31:9D:AD:B2:B2:BC
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:4a:4f:cb:4f:2f:a5:81:91:bd:e5:c4:2d:d1:a7:d0:bb:
6b:e8:bd:2c:7e:1d:98:8a:1f:62:33:64:64:cc:8b:c0:ef:66:
4d:4a:f8:35:92:bb:31:ac:01:54:fb:78:a6:13:48:0c:9b:07:
15:e0:e1:57:81:4d:8f:f9:9a:85:2c:27:f1:e4:0b:c5:51:1a:
64:de:9f:15:8d:08:39:60:e8:9d:3c:58:0a:d6:01:52:ca:c5:
a8:b4:e9:20:c9:d1:72:b6:d4:dc:e1:b4:e6:b2:df:30:32:ff:
da:94:3d:ab:6b:7d:20:cb:f2:4b:72:bd:f6:62:19:3c:2d:08:
2d:7d:fa:81:0c:1f:39:46:f1:ec:f9:78:46:23:ed:77:12:af:
a2:6b:0c:42:72:b7:f1:c3:02:ba:33:c8:87:ca:3d:ce:bb:29:
54:b1:a2:d8:cb:65:3c:36:ec:f2:6c:df:54:e9:97:ca:c7:d7:
27:42:5f:84:4d:44:19:9e:1a:8b:4f:6f:32:02:19:6f:fb:b8:
25:33:e3:63:1c:e4:55:7d:30:98:77:9d:82:80:5a:64:00:a4:
d9:c0:65:fa:7c:32:12:67:77:79:b6:ba:7e:b8:49:4f:95:5f:
6b:17:27:bf:e5:6c:0e:c3:10:f7:07:80:25:c4:d7:86:0c:7f:
f8:84:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:03:30 2026 by rpki-client