Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: fZvp7eTou/RPXWhreCW62zKNubNZ7MjHwOnIEkcgKjg=
Subject key identifier: C2:11:F5:8D:02:B1:D5:08:05:33:EA:A5:33:42:AC:F7:E4:3F:3D:A6
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019F21D9A5BAEFFB95F13E600FA6B1675350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 198E
Signing time: Thu 02 Jul 2026 08:02:19 +0000
Manifest this update: Thu 02 Jul 2026 08:02:19 +0000
Manifest next update: Fri 03 Jul 2026 08:02:19 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: dEnPoLlohfiKRUG//e19o2EoXBM7/cOrOO5zNJQiFy0=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:d9:a5:ba:ef:fb:95:f1:3e:60:0f:a6:b1:67:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Jul 2 08:02:19 2026 GMT
Not After : Jul 3 08:02:19 2026 GMT
Subject: CN=c211f58d02b1d5080533eaa53342acf7e43f3da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:71:e6:a4:9f:57:69:a1:86:a7:77:00:1f:
a6:d4:cc:a2:58:b5:bf:ad:ae:fb:37:4b:6d:bd:39:
b5:17:3e:35:a6:c1:9d:ff:9b:c9:84:31:40:21:1a:
d2:dc:a6:ef:7a:a5:2f:3c:35:5f:74:ca:a0:3f:24:
93:c7:18:4e:e4:0d:db:fa:f9:30:8c:6f:bd:21:f8:
dc:b7:32:2c:50:9e:14:38:b4:6a:f7:7d:d2:85:a1:
66:a0:ee:c8:63:50:92:d8:20:d3:bb:a9:36:5e:93:
1d:8b:c7:e1:d7:76:04:8c:ce:68:e6:5f:7e:19:d3:
d6:7d:e8:d7:20:c3:c6:cc:72:4d:65:5c:61:09:a6:
5a:03:f1:7b:14:c0:31:23:84:90:fc:99:db:e9:ab:
08:16:ef:7f:cc:32:a8:d7:db:01:1a:bd:78:d1:61:
63:83:bc:79:3b:6b:93:38:6a:11:b1:d0:31:8e:54:
39:ec:fa:3b:d7:56:5c:48:8a:11:5e:0b:76:56:04:
f2:5f:a3:94:3a:e8:6e:50:56:2e:4e:17:18:c7:eb:
a8:4f:b1:1c:7b:56:53:ff:43:62:68:7c:7a:54:e7:
8b:e4:1c:af:10:60:92:f2:a7:4d:78:c6:4c:98:b1:
d9:d3:ee:83:0a:93:37:64:b0:c1:be:53:28:2c:d6:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:F5:8D:02:B1:D5:08:05:33:EA:A5:33:42:AC:F7:E4:3F:3D:A6
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:f3:85:0b:ca:a3:24:01:28:79:55:ae:66:1f:35:ef:c0:
5c:ec:9f:2a:95:f9:bd:f1:9f:3c:42:dc:63:5f:fd:f6:9f:e0:
bb:00:67:53:c4:f4:a2:22:74:cb:bf:5a:a9:33:3a:8a:7d:6e:
6d:27:fd:15:36:3e:90:6d:5f:ad:f3:00:28:90:6e:d3:c4:36:
6a:70:1b:9f:6d:80:0e:a9:6f:04:01:23:dc:69:59:fe:00:65:
6c:1a:7b:d0:a9:39:ce:24:5b:ea:90:02:3c:65:a2:07:26:85:
55:22:9f:5f:c9:b3:74:fb:43:b4:92:c3:88:05:c7:00:8e:b3:
3a:42:8f:72:c0:20:e1:b9:87:3b:17:94:b1:ff:4a:90:e2:e2:
ef:aa:03:2d:f7:35:b5:0f:b0:d0:c8:98:0c:04:7f:9a:1d:70:
8d:ae:66:aa:01:37:82:7a:9b:d8:13:78:6a:0a:83:13:1e:71:
8a:19:4a:c3:64:f2:f2:22:1a:33:d2:63:d8:9c:3a:f8:fe:ec:
c6:52:1d:72:b4:28:d0:fc:d4:df:f4:23:ea:ae:31:fe:c6:dc:
ba:a6:bb:ec:86:52:69:1f:52:f0:18:1d:fb:08:af:ec:b7:c1:
f1:56:37:03:b6:96:ef:d7:3d:f4:6a:3d:7c:4b:7a:12:15:e8:
85:71:5f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8h2aW67/uV8T5gD6axZ1NQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1
YzcxNGMwHhcNMjYwNzAyMDgwMjE5WhcNMjYwNzAzMDgwMjE5WjAzMTEwLwYDVQQD
EyhjMjExZjU4ZDAyYjFkNTA4MDUzM2VhYTUzMzQyYWNmN2U0M2YzZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8dx5qSfV2mhhqd3AB+m1MyiWLW/
ra77N0ttvTm1Fz41psGd/5vJhDFAIRrS3KbveqUvPDVfdMqgPySTxxhO5A3b+vkw
jG+9IfjctzIsUJ4UOLRq933ShaFmoO7IY1CS2CDTu6k2XpMdi8fh13YEjM5o5l9+
GdPWfejXIMPGzHJNZVxhCaZaA/F7FMAxI4SQ/Jnb6asIFu9/zDKo19sBGr140WFj
g7x5O2uTOGoRsdAxjlQ57Po711ZcSIoRXgt2VgTyX6OUOuhuUFYuThcYx+uoT7Ec
e1ZT/0NiaHx6VOeL5ByvEGCS8qdNeMZMmLHZ0+6DCpM3ZLDBvlMoLNbkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIR9Y0CsdUIBTPqpTNCrPfkPz2mMB8GA1UdIwQY
MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt
ZmU0NDc3MmQ1YWUxLzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx
LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwzzhQvK
oyQBKHlVrmYfNe/AXOyfKpX5vfGfPELcY1/99p/guwBnU8T0oiJ0y79aqTM6in1u
bSf9FTY+kG1frfMAKJBu08Q2anAbn22ADqlvBAEj3GlZ/gBlbBp70Kk5ziRb6pAC
PGWiByaFVSKfX8mzdPtDtJLDiAXHAI6zOkKPcsAg4bmHOxeUsf9KkOLi76oDLfc1
tQ+w0MiYDAR/mh1wja5mqgE3gnqb2BN4agqDEx5xihlKw2Ty8iIaM9Jj2Jw6+P7s
xlIdcrQo0PzU3/Qj6q4x/sbcuqa77IZSaR9S8Bgd+wiv7LfB8VY3A7aW79c99Go9
fEt6EhXohXFf8A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:54 2026 by rpki-client