Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json)
Hash identifier: 5HycvdDKpPQUat3QKaw0iIAcIPSyTrGMk3qh9Lr7VIc=
Subject key identifier: 3D:E2:6E:2A:44:95:88:26:7C:10:53:55:90:20:73:C5:C3:EC:68:56
Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a
Certificate serial: 019CB0FF43852174887FD8274D94E8A85DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
Manifest number: 081D
Signing time: Tue 03 Mar 2026 00:00:44 +0000
Manifest this update: Tue 03 Mar 2026 00:00:44 +0000
Manifest next update: Wed 04 Mar 2026 00:00:44 +0000
Files and hashes: 1: oXTYdClCAvrbQ-B5AY02ud7SwGM.roa (hash: Kl9/UDkXKYx9xJjJkDuIAR+3wCrxIZ3u8NbLrdRq+lY=)
2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: rnHDu8xRTJVtHIG0TXPo8UTvhL5ofxQRzQvNeTEvC3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:43:85:21:74:88:7f:d8:27:4d:94:e8:a8:5d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Validity
Not Before: Mar 3 00:00:44 2026 GMT
Not After : Mar 4 00:00:44 2026 GMT
Subject: CN=3de26e2a449588267c105355902073c5c3ec6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:66:a9:79:7f:c2:c7:b7:50:ae:f9:b3:24:
c3:44:e1:14:84:b3:a8:b8:43:44:d4:d9:b9:0e:4a:
2f:34:74:7f:23:ce:2a:43:df:ad:fa:ea:d7:d1:68:
27:87:64:53:d5:ff:38:d1:fb:a2:32:a7:f6:24:83:
d3:79:cf:37:f6:73:11:6d:a1:90:1f:ed:5e:6e:6e:
d4:a3:da:85:38:7f:f2:d1:29:f0:46:60:0d:5d:c7:
52:7e:52:3e:21:b8:06:db:8c:08:a3:5b:b5:5c:2f:
40:ea:61:01:10:fe:bc:43:2e:4b:73:a5:9c:eb:85:
31:90:a1:d6:87:6c:35:d9:79:90:58:75:a3:d8:6a:
0e:2d:fd:f6:9a:b5:c8:0d:b7:38:73:49:15:3f:69:
71:07:a5:5e:c4:e6:0d:d0:f3:d0:a2:9e:7c:f3:fd:
b0:fd:a8:3b:0d:c1:f2:cf:d5:d0:c7:49:d2:86:15:
f9:dc:5d:c0:34:7a:78:9d:34:dd:75:26:cd:63:18:
a6:3a:01:70:0b:8c:76:ee:24:39:e3:6d:6f:76:85:
65:98:52:22:39:0c:4b:c0:bb:32:11:e5:f6:ba:19:
8b:b6:04:4c:2e:8b:70:ef:78:6f:6f:c7:2b:91:6c:
92:4d:4f:ad:df:48:00:a6:da:5f:fb:79:e0:fc:7e:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:6E:2A:44:95:88:26:7C:10:53:55:90:20:73:C5:C3:EC:68:56
X509v3 Authority Key Identifier:
keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:12:3f:9c:9c:40:10:99:c7:8e:a3:11:ff:98:12:45:8c:
b8:1b:cc:3d:e9:9f:ff:7c:6f:e2:0b:a1:ff:d2:87:db:e3:0f:
08:c5:66:bd:5b:d4:ae:a4:db:36:de:15:15:e1:dc:93:34:ba:
97:84:d8:42:36:37:60:e0:01:0d:dc:40:cf:75:c0:4c:4c:52:
eb:33:fa:3d:9f:a3:0f:c1:c1:df:e2:c2:3e:ad:ec:3c:d0:59:
4e:9f:f4:c2:3f:ff:1b:e8:41:54:d7:3c:2a:4c:8e:30:11:5c:
49:05:d7:89:09:ac:76:e1:f3:c3:f3:a3:59:2f:45:2f:18:29:
95:74:a3:e6:56:60:9a:f4:b5:54:84:a7:7c:2d:90:15:99:52:
29:c3:b3:0e:6b:9b:c8:2b:61:c1:65:32:cd:88:44:90:6c:1c:
b0:4b:ad:55:99:fe:b3:b0:cf:a8:95:0c:94:4e:58:39:00:8d:
38:7a:21:4d:92:2b:c3:f7:c0:e3:22:54:73:93:c1:a8:bb:30:
30:42:9d:3a:88:bf:46:b5:75:f1:59:70:c8:9a:f1:fe:c0:5b:
a0:1d:2f:4d:d5:53:36:fb:72:d0:85:dd:ec:d9:34:15:8b:96:
c4:50:e3:0c:49:d2:63:eb:60:a5:0f:24:ab:17:18:26:c5:8b:
91:ad:28:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyw/0OFIXSIf9gnTZToqF3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZDZiZTk3YmNmZTEyYmVjYmU4MmI3ODQxMDQ3ZjU3OTcy
YTkzNWEwHhcNMjYwMzAzMDAwMDQ0WhcNMjYwMzA0MDAwMDQ0WjAzMTEwLwYDVQQD
EygzZGUyNmUyYTQ0OTU4ODI2N2MxMDUzNTU5MDIwNzNjNWMzZWM2ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjRmqXl/wse3UK75syTDROEUhLOo
uENE1Nm5DkovNHR/I84qQ9+t+urX0Wgnh2RT1f840fuiMqf2JIPTec839nMRbaGQ
H+1ebm7Uo9qFOH/y0SnwRmANXcdSflI+IbgG24wIo1u1XC9A6mEBEP68Qy5Lc6Wc
64UxkKHWh2w12XmQWHWj2GoOLf32mrXIDbc4c0kVP2lxB6VexOYN0PPQop588/2w
/ag7DcHyz9XQx0nShhX53F3ANHp4nTTddSbNYximOgFwC4x27iQ5421vdoVlmFIi
OQxLwLsyEeX2uhmLtgRMLotw73hvb8crkWySTU+t30gAptpf+3ng/H7k9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3ibipElYgmfBBTVZAgc8XD7GhWMB8GA1UdIwQY
MBaAFKzWvpe8/hK+y+greEEEf1eXKpNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQt
MmE4NGFjYmUwN2VlLzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQtMmE4NGFjYmUwN2Vl
LzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVQSP5yc
QBCZx46jEf+YEkWMuBvMPemf/3xv4guh/9KH2+MPCMVmvVvUrqTbNt4VFeHckzS6
l4TYQjY3YOABDdxAz3XATExS6zP6PZ+jD8HB3+LCPq3sPNBZTp/0wj//G+hBVNc8
KkyOMBFcSQXXiQmsduHzw/OjWS9FLxgplXSj5lZgmvS1VISnfC2QFZlSKcOzDmub
yCthwWUyzYhEkGwcsEutVZn+s7DPqJUMlE5YOQCNOHohTZIrw/fA4yJUc5PBqLsw
MEKdOoi/RrV18VlwyJrx/sBboB0vTdVTNvty0IXd7Nk0FYuWxFDjDEnSY+tgpQ8k
qxcYJsWLka0opg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:31 2026 by rpki-client