Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
File: OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft (raw, json)
Hash identifier: QNruV5xAVOuBPpYhvOXWDiJB7IOlhhYQrCYC6mhYj3Y=
Subject key identifier: 28:B8:B9:B0:F9:B5:42:FD:A9:BC:2C:B4:FA:75:D9:6F:2F:BB:37:93
Authority key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Certificate issuer: /CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Certificate serial: 019C1DCD16BC2D09243C32A09DF104999E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
Manifest number: 082F
Signing time: Mon 02 Feb 2026 10:01:45 +0000
Manifest this update: Mon 02 Feb 2026 10:01:45 +0000
Manifest next update: Tue 03 Feb 2026 10:01:45 +0000
Files and hashes: 1: OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl (hash: 8d7eQ7aFRkfi3Q6lYNXTUhH7j0Z89E+dq4FLLrlEab8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:cd:16:bc:2d:09:24:3c:32:a0:9d:f1:04:99:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Validity
Not Before: Feb 2 10:01:45 2026 GMT
Not After : Feb 3 10:01:45 2026 GMT
Subject: CN=28b8b9b0f9b542fda9bc2cb4fa75d96f2fbb3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:96:e6:8f:84:e8:b4:3d:37:cf:1a:9f:22:
db:b8:8e:c9:f5:f4:a8:be:1f:7a:16:81:21:e6:81:
07:66:0c:88:49:ea:b2:39:ee:9c:22:f4:54:dd:24:
e7:6d:89:fd:09:67:ec:1a:e4:5b:1c:a7:28:08:73:
53:03:73:19:45:b7:31:0c:57:0e:4c:f0:fb:cf:b9:
35:6a:d6:55:68:23:9c:4a:c9:8d:ed:ed:3c:a4:cb:
ad:2a:4f:b1:0a:ad:3a:f8:d0:30:98:24:84:04:40:
58:a2:6b:f5:52:0a:a9:cf:aa:dd:97:92:25:73:45:
d7:4b:31:36:55:aa:1d:36:a8:4b:87:df:ec:8e:7a:
f3:51:e5:1e:5a:5d:2e:93:c8:cf:87:ba:31:62:ca:
8d:13:cc:73:85:6d:cb:f9:e8:f8:a8:4f:e3:66:02:
24:9a:63:58:fb:63:fa:cd:8b:f8:2b:3b:fc:02:c0:
5d:0a:83:1d:0c:41:62:74:cd:5d:be:30:e1:fb:09:
d3:6d:83:c4:b6:75:72:0f:92:fd:19:4a:7d:95:1d:
e2:3a:e0:e2:d5:1c:75:ee:3d:6e:bd:57:86:ff:69:
dc:cb:d9:89:f5:d1:1e:16:20:37:68:3d:c7:67:c5:
b5:46:23:1f:74:3c:d7:28:66:40:09:53:97:67:da:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:B9:B0:F9:B5:42:FD:A9:BC:2C:B4:FA:75:D9:6F:2F:BB:37:93
X509v3 Authority Key Identifier:
keyid:3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:88:ab:1a:30:e7:18:94:9e:f6:13:58:cd:c3:b5:d5:90:
d4:5f:bf:6f:35:d9:3b:cc:4c:27:07:a4:43:bc:6c:a0:ec:8b:
e4:90:df:14:21:76:1e:28:62:d1:19:31:83:44:f7:98:02:15:
42:10:ce:1f:ab:08:57:57:24:1d:24:50:f5:89:40:e3:e4:9b:
b3:0b:ed:86:fd:87:a5:74:51:ff:f7:d8:d0:54:b7:84:63:38:
a8:64:86:0d:46:ae:63:62:13:6b:30:4c:4d:47:4b:6e:0e:35:
3b:83:40:53:55:ed:fb:a1:d9:00:a6:61:ce:95:85:70:7f:a0:
a7:aa:fe:99:7e:4c:6e:f9:aa:e3:e9:4d:b0:d2:e0:e6:68:ac:
af:2c:8b:90:07:ff:34:0c:41:d3:05:a0:84:5e:e6:bb:e6:25:
74:db:61:f2:7f:be:67:da:ad:06:e4:4d:9b:42:fe:71:ea:3f:
3f:61:10:99:17:e7:48:b7:37:34:fe:e7:c8:48:b8:8a:35:9b:
89:da:f6:f5:7b:35:b5:c5:6f:b4:06:de:dc:41:03:8d:00:da:
76:cf:f0:b7:8d:23:05:0e:f2:83:06:27:b5:89:fe:94:b9:c6:
6a:3a:ef:a5:e1:4a:d4:5b:c9:7a:18:26:0d:63:52:56:a2:c2:
76:cb:fb:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwdzRa8LQkkPDKgnfEEmZ5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMmFhNzIwNTY4MTcxNjIwZTliYzliOTdkYWRjYzc0YjUx
MzM5NGYwHhcNMjYwMjAyMTAwMTQ1WhcNMjYwMjAzMTAwMTQ1WjAzMTEwLwYDVQQD
EygyOGI4YjliMGY5YjU0MmZkYTliYzJjYjRmYTc1ZDk2ZjJmYmIzNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvaW5o+E6LQ9N88anyLbuI7J9fSo
vh96FoEh5oEHZgyISeqyOe6cIvRU3STnbYn9CWfsGuRbHKcoCHNTA3MZRbcxDFcO
TPD7z7k1atZVaCOcSsmN7e08pMutKk+xCq06+NAwmCSEBEBYomv1Ugqpz6rdl5Il
c0XXSzE2VaodNqhLh9/sjnrzUeUeWl0uk8jPh7oxYsqNE8xzhW3L+ej4qE/jZgIk
mmNY+2P6zYv4Kzv8AsBdCoMdDEFidM1dvjDh+wnTbYPEtnVyD5L9GUp9lR3iOuDi
1Rx17j1uvVeG/2ncy9mJ9dEeFiA3aD3HZ8W1RiMfdDzXKGZACVOXZ9q2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCi4ubD5tUL9qbwstPp12W8vuzeTMB8GA1UdIwQY
MBaAFDsqpyBWgXFiDpvJuX2tzHS1EzlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lxbklGYUJjV0lPbThtNWZhM01kTFVUT1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNzc1ODktOGQ5YS00YjIyLTlhMTUt
NjA1ZGUwZWFhZWI2LzEvT3lxbklGYUJjV0lPbThtNWZhM01kTFVUT1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yNzc1ODktOGQ5YS00YjIyLTlhMTUtNjA1ZGUwZWFhZWI2
LzEvT3lxbklGYUJjV0lPbThtNWZhM01kTFVUT1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElqIqxow
5xiUnvYTWM3DtdWQ1F+/bzXZO8xMJwekQ7xsoOyL5JDfFCF2Hihi0Rkxg0T3mAIV
QhDOH6sIV1ckHSRQ9YlA4+Sbswvthv2HpXRR//fY0FS3hGM4qGSGDUauY2ITazBM
TUdLbg41O4NAU1Xt+6HZAKZhzpWFcH+gp6r+mX5Mbvmq4+lNsNLg5misryyLkAf/
NAxB0wWghF7mu+YldNth8n++Z9qtBuRNm0L+ceo/P2EQmRfnSLc3NP7nyEi4ijWb
idr29Xs1tcVvtAbe3EEDjQDads/wt40jBQ7ygwYntYn+lLnGajrvpeFK1FvJehgm
DWNSVqLCdsv7Jw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:26 2026 by rpki-client