Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json)
Hash identifier: y4fxGunPqFKO4gx4T/t24LNF5jbsJgNxuX/A8uoNC5c=
Subject key identifier: 60:46:1B:81:92:19:40:C7:FD:E6:85:8C:CE:CA:8F:9E:8F:82:7B:9B
Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0
Certificate serial: 019C266174ABBE50D39DF2F021A019D6F425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
Manifest number: 0CB0
Signing time: Wed 04 Feb 2026 02:00:46 +0000
Manifest this update: Wed 04 Feb 2026 02:00:46 +0000
Manifest next update: Thu 05 Feb 2026 02:00:46 +0000
Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: H8sOq8kfYAeTstjDpyI3gTpLXFgbjOAc+1qHe3vI1cg=)
2: SuJF_zKqOH6utGO_CwDg4y2x8CY.roa (hash: OlH1mVu2xiWsNc8O/T/NHNLN4CMeUIS1AHaz1gsgLDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:26:61:74:ab:be:50:d3:9d:f2:f0:21:a0:19:d6:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1740132e505f78bad0112f91b55986879535cac0
Validity
Not Before: Feb 4 02:00:46 2026 GMT
Not After : Feb 5 02:00:46 2026 GMT
Subject: CN=60461b81921940c7fde6858cceca8f9e8f827b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:9f:ae:b9:ca:f9:5a:18:2f:66:ad:4c:42:
22:10:ef:0b:c2:3c:5a:91:2b:fb:90:7e:de:be:6c:
e3:cb:6e:94:98:80:f9:b7:e3:43:1d:7b:a8:86:70:
26:59:32:76:b0:00:65:a2:92:f7:04:b7:ac:14:c8:
9a:27:af:cf:e6:d9:f2:fb:3d:59:04:dd:a0:a2:51:
ac:cb:e1:cf:db:3c:5c:b3:79:ce:03:d1:be:2b:23:
87:bc:3c:58:82:ab:63:b9:f6:20:62:bd:2f:31:12:
76:ca:20:8f:97:07:8d:2b:3d:7f:32:c5:32:09:5d:
60:05:cf:47:ca:71:79:41:25:c9:90:e2:0e:cd:89:
f2:93:49:a3:9d:6c:df:97:38:49:f5:a1:72:2f:cd:
22:95:b0:97:11:e6:38:ba:a4:9b:5b:7f:58:79:d6:
74:2c:5b:7f:3e:0c:14:c7:a7:2f:05:59:53:e5:f2:
4a:db:5e:47:54:b4:fc:65:cb:e7:54:7b:dd:08:d2:
0f:79:9f:99:34:cf:e3:ae:e8:cd:95:05:36:f4:f2:
fc:98:90:07:bc:f9:64:f3:72:ef:6a:98:b0:c5:08:
c4:9b:b4:49:03:96:1f:6c:2e:0f:13:bb:3a:28:26:
12:dd:b2:3b:3f:7a:1a:3b:36:e5:20:ae:5d:66:06:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:1B:81:92:19:40:C7:FD:E6:85:8C:CE:CA:8F:9E:8F:82:7B:9B
X509v3 Authority Key Identifier:
keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:33:ba:98:46:f7:9f:52:3e:fd:1e:dd:73:6f:e5:76:85:d3:
83:a1:a5:8e:65:ea:df:1b:d1:67:b6:a0:d6:42:05:80:6d:09:
9b:2f:8d:a1:f9:d3:65:0a:e0:ae:0f:21:2a:80:87:4f:c6:57:
d7:73:52:d0:76:23:e6:df:3f:07:87:0e:d6:d1:87:70:8e:30:
25:57:32:b5:fc:e5:58:e4:74:8e:66:1e:de:73:86:49:02:a5:
21:15:4f:84:b9:ec:41:8d:ba:d7:f6:6e:04:8c:f8:36:44:a5:
70:24:fe:a6:44:59:98:7f:6e:2b:9c:c5:9d:8d:36:6e:2c:b0:
a1:30:78:64:78:8f:59:fd:c4:59:b4:88:9c:a3:c3:e6:b9:3f:
68:87:ce:2c:16:be:a6:03:43:02:21:d7:89:4a:8f:5a:d2:77:
0f:a8:9a:5e:54:e1:c5:bb:bc:59:48:75:e5:97:75:9e:84:bf:
9c:5d:a7:5e:b0:b2:73:65:08:6d:77:db:28:7c:b6:b7:c0:b5:
3e:6d:dc:ff:d5:54:0e:db:3e:de:32:d1:f8:f6:71:7b:9e:f8:
3f:12:51:a0:1a:aa:e7:ae:22:3a:7b:fe:b1:14:28:61:cc:1e:
08:99:d6:06:51:82:4c:1e:05:45:df:3a:eb:4c:f3:9a:98:8c:
7e:e4:ba:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:55:04 2026 by rpki-client