Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: sIgN6LT7K/NgztRcfDZrxUTTHr4iFIe1AxGnZqQp2vE=
Subject key identifier: 4A:7E:CC:E8:4A:69:AB:C8:60:C4:A0:32:C0:7D:5C:03:89:62:67:C2
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019F22474314B49612D80259C5831633F8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 1993
Signing time: Thu 02 Jul 2026 10:02:03 +0000
Manifest this update: Thu 02 Jul 2026 10:02:03 +0000
Manifest next update: Fri 03 Jul 2026 10:02:03 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: YvuMv5PoR1T5UxN0i5jbwHgPArbvWEVFoXund8bR09s=)
2: DVP_0l7-8-BzmTOEfb03crpQz3g.roa (hash: k1kJ0Q7wGodPAMbk3ewT0wyHEIGv0VSXLBiDpwYkrPw=)
3: H7Xngt8uDaQXLqhk29afH0VWFcw.roa (hash: CThtSzNbfgXJz5IyFmqQ4qYlcRz/LI/HyRGPDPbi4Pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:43:14:b4:96:12:d8:02:59:c5:83:16:33:f8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jul 2 10:02:03 2026 GMT
Not After : Jul 3 10:02:03 2026 GMT
Subject: CN=4a7ecce84a69abc860c4a032c07d5c03896267c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:6d:5c:39:0c:65:e0:3b:44:35:b0:19:5f:
51:58:e0:b5:ee:46:25:b4:86:b0:37:9f:1c:12:52:
d1:60:20:82:1e:b1:82:a9:09:9b:3b:af:c3:01:8c:
32:0c:32:50:e5:33:97:aa:3d:16:80:e1:b9:60:74:
1b:34:77:7d:21:17:71:6b:b1:97:20:56:9f:ac:4f:
fa:78:84:9d:30:25:f7:47:f2:8c:bc:4c:89:ed:ee:
de:a8:45:1e:f7:de:71:ee:1b:74:18:6d:0b:04:0d:
49:0b:c4:10:06:50:bf:09:ad:9e:db:6e:3e:21:0f:
c9:76:65:13:c9:4e:af:fa:c8:a3:9f:e4:a8:5a:ef:
37:3f:e4:59:32:04:82:7c:20:82:31:45:aa:d9:90:
19:34:04:ae:e3:47:a6:07:08:12:60:cf:d9:1f:e6:
60:61:8c:f8:6a:f6:9b:e3:c4:72:7e:9a:26:ee:f5:
21:9a:ab:1e:53:57:6b:2a:93:51:31:2d:53:94:fa:
d7:8d:2a:05:a7:db:db:ba:ae:29:e9:30:f6:15:72:
02:12:34:3b:60:5d:cd:f6:13:64:e4:84:a1:b1:fc:
b4:5b:a8:b0:26:e5:7c:eb:46:7c:7f:d5:e6:b9:f0:
38:1a:a2:fb:04:94:8f:e2:e3:00:0a:3a:82:86:87:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7E:CC:E8:4A:69:AB:C8:60:C4:A0:32:C0:7D:5C:03:89:62:67:C2
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9a:ed:f8:ac:4e:59:7f:62:e9:ed:a2:42:d8:37:7c:96:49:
b9:3d:61:6c:0b:e1:af:9f:70:07:aa:86:58:01:ec:97:62:62:
26:10:e8:b5:17:4c:00:8b:29:66:ac:03:2a:e2:95:28:82:41:
d6:0e:58:8f:3e:f4:a4:c8:9c:8d:2f:f5:99:23:d2:d9:39:91:
e1:fc:07:aa:be:41:88:44:5a:73:7b:73:a2:db:a4:dd:3f:c9:
cd:e8:53:28:5e:16:c2:8d:66:53:ee:cb:15:5e:21:df:9d:4e:
5b:d5:45:5c:7a:6d:b8:73:1a:ed:0f:fa:fb:15:19:f9:ff:38:
80:31:c4:cd:7b:c3:7b:7e:92:71:5d:64:9b:e3:a7:a2:71:41:
80:60:18:53:e9:13:34:07:65:3c:bd:1b:c6:49:c0:2d:ab:b6:
42:ad:7d:8e:d5:94:05:19:5a:70:bd:4d:f8:fc:84:8a:0c:52:
69:52:d9:6f:b3:23:f5:a2:7a:f2:ff:64:68:6c:e9:30:b3:b5:
fb:da:69:e6:e9:cb:3d:b5:b4:76:0c:67:5e:90:24:6f:a6:80:
d2:9c:a5:96:a9:bc:13:24:0e:75:0d:5d:2c:58:8b:be:09:3a:
d6:17:6b:13:50:db:5d:b0:9d:3d:90:f2:8c:c0:31:b7:3e:56:
51:8c:cd:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iR0MUtJYS2AJZxYMWM/jMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjYwNzAyMTAwMjAzWhcNMjYwNzAzMTAwMjAzWjAzMTEwLwYDVQQD
Eyg0YTdlY2NlODRhNjlhYmM4NjBjNGEwMzJjMDdkNWMwMzg5NjI2N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXttXDkMZeA7RDWwGV9RWOC17kYl
tIawN58cElLRYCCCHrGCqQmbO6/DAYwyDDJQ5TOXqj0WgOG5YHQbNHd9IRdxa7GX
IFafrE/6eISdMCX3R/KMvEyJ7e7eqEUe995x7ht0GG0LBA1JC8QQBlC/Ca2e224+
IQ/JdmUTyU6v+sijn+SoWu83P+RZMgSCfCCCMUWq2ZAZNASu40emBwgSYM/ZH+Zg
YYz4avab48Ryfpom7vUhmqseU1drKpNRMS1TlPrXjSoFp9vbuq4p6TD2FXICEjQ7
YF3N9hNk5IShsfy0W6iwJuV860Z8f9XmufA4GqL7BJSP4uMACjqChodNRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp+zOhKaavIYMSgMsB9XAOJYmfCMB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJrt+KxO
WX9i6e2iQtg3fJZJuT1hbAvhr59wB6qGWAHsl2JiJhDotRdMAIspZqwDKuKVKIJB
1g5Yjz70pMicjS/1mSPS2TmR4fwHqr5BiERac3tzotuk3T/JzehTKF4Wwo1mU+7L
FV4h351OW9VFXHptuHMa7Q/6+xUZ+f84gDHEzXvDe36ScV1km+OnonFBgGAYU+kT
NAdlPL0bxknALau2Qq19jtWUBRlacL1N+PyEigxSaVLZb7Mj9aJ68v9kaGzpMLO1
+9pp5unLPbW0dgxnXpAkb6aA0pyllqm8EyQOdQ1dLFiLvgk61hdrE1DbXbCdPZDy
jMAxtz5WUYzNvA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:20 2026 by rpki-client