Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
File: FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json)
Hash identifier: 6DY3zFbbDEdNvwIH2EJZrXUBbvIKQAWiRMOTmXgyqYA=
Subject key identifier: 9C:FF:9E:5D:B4:BF:0D:78:67:74:DB:CE:18:E8:F5:39:BA:77:53:CB
Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Certificate serial: 019C1CB9BF3D9FF2D6E1F4199E8F6CA8C584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
Manifest number: 1285
Signing time: Mon 02 Feb 2026 05:01:00 +0000
Manifest this update: Mon 02 Feb 2026 05:01:00 +0000
Manifest next update: Tue 03 Feb 2026 05:01:00 +0000
Files and hashes: 1: 8lFWGF465SI9EEUcZ0kFtOpHpXA.roa (hash: FNFJ1qLfScKFcn36nv9y/uZRLBnvhGvzp/XgDgxN1Ek=)
2: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: pJ0wYZoToWf17G1n5XGPosBKezg+3D6s68ulLMto79I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:b9:bf:3d:9f:f2:d6:e1:f4:19:9e:8f:6c:a8:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff
Validity
Not Before: Feb 2 05:01:00 2026 GMT
Not After : Feb 3 05:01:00 2026 GMT
Subject: CN=9cff9e5db4bf0d786774dbce18e8f539ba7753cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:98:ef:a5:dc:cd:a3:2c:39:b1:e2:47:f2:
92:4f:b1:c0:4c:08:13:ea:55:e3:0e:4c:a2:31:f5:
14:fa:d4:e3:9a:63:a9:2a:3d:98:18:3a:9f:4c:b3:
76:94:5f:63:41:9a:2a:74:ea:ad:47:3e:b6:1c:17:
12:16:51:4b:b4:0d:d3:b0:b6:1e:7e:c6:ea:b0:22:
e5:59:1f:cd:15:7b:bd:d4:43:7d:a7:65:2f:d7:82:
51:a3:02:26:4d:3b:61:e4:e1:2f:86:a9:35:99:16:
3f:a9:97:9f:d1:3d:28:71:a2:94:3d:af:f5:d1:11:
ce:7d:0d:4e:b1:74:be:f8:46:6a:27:10:2d:73:ce:
8d:2f:b6:fe:be:d7:52:53:d4:ee:93:a1:cf:a0:11:
be:fb:ad:9f:7d:f9:2d:fb:75:50:2b:70:5b:24:c1:
f8:50:da:eb:19:66:9d:8c:a3:c5:4d:de:4a:40:ed:
ca:c3:44:4b:6d:ff:85:62:b9:4c:e9:01:b0:4c:28:
7c:d1:d4:fa:58:e6:66:fc:82:c5:04:00:53:d8:28:
02:f7:94:0f:66:5b:13:2a:06:9e:05:88:c9:50:91:
1e:15:d4:30:7c:80:38:9f:8f:a3:89:b7:0e:97:90:
5c:73:71:b2:e7:fa:4f:da:65:f2:f9:a7:ea:b0:d5:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FF:9E:5D:B4:BF:0D:78:67:74:DB:CE:18:E8:F5:39:BA:77:53:CB
X509v3 Authority Key Identifier:
keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:5f:ec:01:0a:67:01:fb:28:8a:1b:cf:e6:03:ec:d9:bf:
6c:36:5c:ff:64:73:48:ea:da:e7:69:a7:29:9f:da:21:55:58:
0e:a9:75:1f:be:4d:ef:a8:06:6c:e3:e9:0e:45:34:cc:ff:30:
ac:56:7b:90:05:b9:92:2c:82:43:fc:70:41:19:e1:f5:ee:3f:
10:e9:66:cc:d5:98:1c:03:5c:fc:f1:a9:80:f1:e5:3d:3a:22:
ce:df:87:33:99:0f:51:7e:91:86:8d:e6:81:d5:6f:37:2d:75:
ac:bd:83:72:c7:c6:fd:81:10:06:05:d2:ad:a9:03:a1:b2:4a:
87:f1:08:85:41:0a:90:62:93:12:88:87:14:e7:6f:e6:7f:30:
93:f3:11:44:c2:74:a2:97:70:96:47:19:99:13:76:2c:5c:d5:
51:61:cc:33:d8:88:d6:98:51:96:86:b8:3e:66:b5:e5:9f:77:
85:35:ec:43:30:9e:6e:60:f6:9a:68:73:2e:1f:97:bd:a8:b5:
66:4a:84:ef:de:e9:69:b0:8e:60:d2:86:cd:54:98:1a:b6:d0:
60:1f:c5:5d:de:58:3f:87:7f:f0:c1:9a:26:c3:8e:b0:43:02:
65:d6:e2:3f:c7:80:bc:3b:42:cd:59:07:c3:8b:9e:9d:2b:06:
31:b5:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:20:28 2026 by rpki-client