
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: DURZ9xXk0PkjfiQLFUuWjqjg5T4XQBqn4ORUycFR994=
Subject key identifier: C5:AA:94:ED:B2:E9:33:4B:EA:C2:BC:A4:D5:E3:3C:08:6A:34:5D:56
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 019F227D0DCEA2F0CFAB8867092767C7A748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 1412
Signing time: Thu 02 Jul 2026 11:00:48 +0000
Manifest this update: Thu 02 Jul 2026 11:00:48 +0000
Manifest next update: Fri 03 Jul 2026 11:00:48 +0000
Files and hashes: 1: FOcXeSbiB998fKJzfW7g14YaovU.roa (hash: kT2Dwn2Z/11eQNgjBg89J4ih/DmaP3p13vgseMvAdsY=)
2: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: JWncj4SVnUN5I28n0AYPj9y5AvxxWtWSJx18Wrx1Cio=)
3: f7TRcxcu5eFFG3edJtWO5LjNKUc.roa (hash: RBZM0y5g0NU2rB7JA5FE3fTKLxia7y0PmMp6qlYV9vo=)
4: kaCQ02B6gGfO7Q-84pz4Ur-huUU.roa (hash: EdGjBuxGJOuKZYVXyp/XaU7JSLAitiAqjCSTwhWKNJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7d:0d:ce:a2:f0:cf:ab:88:67:09:27:67:c7:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Jul 2 11:00:48 2026 GMT
Not After : Jul 3 11:00:48 2026 GMT
Subject: CN=c5aa94edb2e9334beac2bca4d5e33c086a345d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:98:bd:f6:f1:36:5a:4f:3d:fc:75:47:9b:
21:37:b3:06:d3:f7:86:2e:cc:7f:aa:12:9a:5d:87:
dd:f9:6d:58:3b:08:2f:58:52:51:b9:93:88:8e:79:
92:d8:a1:6d:5d:bd:3f:a9:69:af:14:09:71:f5:12:
21:ef:c4:1d:92:92:1a:60:ac:73:38:d3:ea:71:97:
64:15:16:8c:7e:55:41:dd:a6:d1:d3:ca:4b:84:13:
df:84:63:7f:3f:6b:dd:9b:aa:c9:86:ff:36:70:ae:
eb:9c:58:b3:f6:f8:06:e0:7f:93:5d:4e:9f:78:7f:
a7:57:e6:95:4a:b8:27:1f:0f:e6:04:f5:63:d0:ed:
25:60:e0:79:2d:8b:be:a9:ef:9b:95:ed:ef:fa:40:
5d:3f:62:94:51:9c:4d:96:41:23:53:a4:40:df:4a:
0a:2f:09:cf:27:c5:56:09:93:6e:47:af:a2:16:d8:
5e:2c:a6:c7:9b:a0:a5:59:a8:09:96:5c:37:6f:e7:
c2:87:cb:3f:b9:0c:49:07:86:fd:43:bf:11:f1:ce:
d1:37:2a:11:c6:17:70:1c:17:8c:6f:da:06:22:6c:
a2:76:52:75:fc:73:ba:25:01:7e:f4:39:93:a4:02:
06:b1:d8:64:de:a8:06:b9:5a:f9:f1:b4:ab:ab:5f:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:94:ED:B2:E9:33:4B:EA:C2:BC:A4:D5:E3:3C:08:6A:34:5D:56
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:99:25:85:00:eb:e3:50:6b:bc:1a:a2:62:34:66:2d:c4:00:
15:b6:3e:cb:e9:cc:5d:34:dc:bc:f6:a4:91:04:24:a2:c3:3d:
65:f6:0e:b9:ed:37:56:4e:8f:09:d7:8a:d1:a9:c5:39:f1:64:
7d:02:a6:c8:4f:b7:d2:08:dd:ac:d7:80:3f:a0:b7:ad:47:8f:
f3:7b:3e:97:5d:bf:f7:72:6a:ae:e2:d3:50:a5:aa:d9:96:7b:
6e:de:ab:c8:44:00:23:1d:7e:c1:12:8f:01:d7:f3:2f:80:53:
3f:09:85:7a:3b:92:c5:f6:a4:22:5a:3f:6d:d8:9f:89:43:5e:
59:ef:1e:79:bc:33:3a:bc:b9:20:34:f5:0d:bb:d8:66:d0:ce:
ea:13:04:eb:53:87:8c:18:79:02:ff:d1:7d:dd:1c:26:91:85:
80:5e:e4:a8:d0:38:46:ae:cf:43:f0:3b:6d:2a:34:ba:3e:f1:
04:ff:81:24:36:67:77:0a:4a:fa:9b:a6:47:6e:d5:4e:c7:e1:
8e:c9:f2:2f:22:b4:80:6d:1e:43:4a:20:12:13:de:b3:f3:63:
9d:e4:b6:b7:42:22:e1:49:1f:13:14:97:8e:d0:47:5b:08:bc:
28:0f:74:31:a1:ad:4a:e8:53:0d:d5:0b:c4:1a:ab:ab:f9:10:
60:b2:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:56 2026 by rpki-client