Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: ihZ/ObIq5Z6RPn9VytDzwhtj6ot2EhrwjFYZKiTO9+s=
Subject key identifier: 62:F9:81:BE:B8:F0:23:A7:F8:64:A4:FF:E0:B8:19:8B:11:17:4F:3B
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 019F2210500972640171C8745D91066EB295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 198F
Signing time: Thu 02 Jul 2026 09:02:01 +0000
Manifest this update: Thu 02 Jul 2026 09:02:01 +0000
Manifest next update: Fri 03 Jul 2026 09:02:01 +0000
Files and hashes: 1: AyjB4EHPCDq9p7LZ4QxN-ryxrkM.roa (hash: TjTKp2DaLx4thRMtFk13G01LVFaqUeVARGlNcCmXfhM=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: 5NQWGZui9NRYhxc7zGhPUuMiTyi4N4xY+LB6/T7WfDg=)
3: NjX_-QFT-KYIQb8IhhsWdmtYmIs.roa (hash: alZ0M56XHk3ZVrQNYJTxZZ2onR/AK2JyEOwbu/Z8qYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:10:50:09:72:64:01:71:c8:74:5d:91:06:6e:b2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Jul 2 09:02:01 2026 GMT
Not After : Jul 3 09:02:01 2026 GMT
Subject: CN=62f981beb8f023a7f864a4ffe0b8198b11174f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:9a:d6:ff:70:8d:f6:d5:3e:60:2e:d5:75:
e8:d1:eb:22:f5:15:e0:4c:3d:ca:e7:b9:15:78:c0:
ac:01:10:d2:6f:12:e4:67:bb:5d:ea:d3:a4:83:c5:
81:36:b6:35:c5:65:69:61:b6:b2:17:86:2d:ed:60:
49:e4:ac:e8:31:98:49:71:29:18:66:07:31:2f:74:
7a:38:91:1b:f8:e6:10:2b:db:9e:c8:96:5c:e5:80:
78:1b:7f:1a:d4:77:98:30:58:96:98:3a:ea:24:6f:
48:73:d8:23:97:5d:e6:67:75:50:c9:65:e6:9a:ae:
07:54:b7:49:d0:b7:40:80:68:5a:5f:b2:1c:18:84:
a5:b4:89:2b:d8:73:5b:30:ea:24:6e:f5:79:12:d4:
56:98:38:dd:c1:34:74:d6:d5:a5:7e:82:bb:2f:35:
42:cf:9f:48:72:b1:25:87:18:0a:00:eb:91:44:c3:
4b:dc:4d:40:ee:b1:a4:33:21:0e:89:12:7a:4c:96:
89:0d:6c:94:22:95:3e:50:b0:33:d6:90:23:42:b9:
7a:50:02:11:ba:0a:43:11:38:4e:d8:bc:cb:a5:07:
e6:52:7a:20:9e:1f:79:d8:8c:49:e7:ed:86:a4:23:
20:f4:5f:24:21:9d:b4:96:ea:0e:69:1f:2e:87:46:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:81:BE:B8:F0:23:A7:F8:64:A4:FF:E0:B8:19:8B:11:17:4F:3B
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:99:f9:ca:3e:99:bb:a3:6c:69:87:31:a2:a1:98:e5:5d:c0:
f4:70:f9:82:35:75:cf:12:04:8b:95:4a:5c:79:a1:11:2d:bc:
e0:b0:2e:30:09:92:4b:ca:0a:49:ab:fa:39:a6:92:5e:ae:f5:
db:93:c7:7a:30:e9:19:16:0f:f3:55:70:ba:9f:2c:8f:55:34:
35:ce:09:ec:62:a6:72:27:8a:61:eb:e1:07:d6:cf:6e:b4:7a:
c6:02:7a:ad:e4:2f:0e:70:c7:d6:39:b0:3f:c2:ed:aa:c8:df:
50:b5:56:ab:c5:cf:13:6b:89:2a:7c:bb:53:bb:a0:bb:fa:8b:
60:6d:d0:42:55:51:a7:c4:29:5d:fb:9f:08:50:65:38:bf:41:
16:d4:fa:b9:b7:11:aa:04:ae:92:48:04:06:22:76:d6:8b:46:
09:eb:13:ea:21:f6:13:63:22:0e:dc:e7:b5:d7:31:13:73:3b:
fa:7f:bf:99:46:07:5a:65:e6:98:c4:0a:32:4c:66:33:e2:11:
78:be:6f:2f:9d:8c:ab:89:6d:5c:df:f8:26:3e:5b:de:5a:40:
eb:b3:f4:a9:4c:15:fa:f1:59:f6:1d:29:f3:55:95:64:88:59:
99:5a:f9:ed:31:d1:cd:4a:cc:1d:cd:e3:46:a5:8e:1e:ba:bd:
b6:32:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:11 2026 by rpki-client