Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/NdZJSzlxkqAbYPYxids3YZ7Aqhs.mft
File: NdZJSzlxkqAbYPYxids3YZ7Aqhs.mft (raw, json)
Hash identifier: vlW3188s+J68ZytcfP6ntLO87PBApTnm1QBMrYlGSH0=
Subject key identifier: 6B:8E:CF:83:FB:D7:37:0F:B2:D0:81:7C:2E:0A:27:98:FC:0C:56:F8
Authority key identifier: 35:D6:49:4B:39:71:92:A0:1B:60:F6:31:89:DB:37:61:9E:C0:AA:1B
Certificate issuer: /CN=35d6494b397192a01b60f63189db37619ec0aa1b
Certificate serial: 019BDB7E9C7AA7DB7338F0C9EA5582B86B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdZJSzlxkqAbYPYxids3YZ7Aqhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/NdZJSzlxkqAbYPYxids3YZ7Aqhs.mft
Manifest number: 3B
Signing time: Tue 20 Jan 2026 13:01:06 +0000
Manifest this update: Tue 20 Jan 2026 13:01:06 +0000
Manifest next update: Wed 21 Jan 2026 13:01:06 +0000
Files and hashes: 1: NdZJSzlxkqAbYPYxids3YZ7Aqhs.crl (hash: cHo4iZcLi9hmV7YjrSEOZj46uHfKf3bkr4yxUX29jkM=)
2: YQezev6tU26Tv5TrnPK3up8TwUc.asa (hash: t8ebK+w0g0X6B7deaK4o4OFK5boSwt1cm/fxIRKMEME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:db:7e:9c:7a:a7:db:73:38:f0:c9:ea:55:82:b8:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d6494b397192a01b60f63189db37619ec0aa1b
Validity
Not Before: Jan 20 13:01:06 2026 GMT
Not After : Jan 21 13:01:06 2026 GMT
Subject: CN=6b8ecf83fbd7370fb2d0817c2e0a2798fc0c56f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:73:23:7c:5a:57:10:4c:ff:22:4a:1f:15:
7a:69:e4:d9:4b:86:29:54:25:1b:b5:a6:6a:9f:54:
fe:2d:5e:80:30:e5:32:92:60:97:8c:88:ea:1e:e4:
3c:2b:92:62:d7:0e:20:45:09:8d:f9:84:0d:5e:ad:
9c:55:e1:37:a6:7a:9d:5f:c6:1b:4a:c1:cc:31:f9:
c0:31:b1:3d:73:f8:5b:3e:db:c0:93:fa:b6:01:b6:
3e:d4:17:b8:1d:2f:96:e1:38:0b:29:85:6c:61:89:
1f:33:74:67:d3:9f:3f:a0:d8:6e:b5:14:e3:3f:83:
6d:5e:02:44:0e:6e:7d:e1:b8:70:cc:49:30:fd:c1:
7c:9b:0b:16:c3:0a:40:c3:41:ba:9e:a5:37:9d:88:
46:9d:09:b9:0d:d0:1d:49:7c:9b:64:ad:a6:81:d2:
af:81:de:c1:60:92:63:ea:51:97:b5:84:e8:9b:21:
55:9c:00:43:7b:ec:e5:81:64:de:53:f9:db:91:25:
6d:f8:23:50:3f:5f:ae:94:ac:d0:99:07:64:9a:a8:
1a:48:16:06:5e:83:03:bb:46:72:11:0e:0a:45:59:
a8:1b:9f:7b:94:24:cb:aa:20:a2:f0:9e:a5:ff:2b:
57:bb:bf:da:23:d7:21:85:6d:b5:d2:28:72:51:33:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:CF:83:FB:D7:37:0F:B2:D0:81:7C:2E:0A:27:98:FC:0C:56:F8
X509v3 Authority Key Identifier:
keyid:35:D6:49:4B:39:71:92:A0:1B:60:F6:31:89:DB:37:61:9E:C0:AA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdZJSzlxkqAbYPYxids3YZ7Aqhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/NdZJSzlxkqAbYPYxids3YZ7Aqhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/NdZJSzlxkqAbYPYxids3YZ7Aqhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:46:63:8f:96:57:b8:d2:44:59:07:ab:1d:b2:b3:7a:a9:72:
6b:17:d2:1b:70:c4:9d:41:05:87:cc:27:71:1e:33:8b:94:10:
a7:2b:f5:d6:fa:85:67:d9:25:d3:f3:15:93:94:b4:6c:00:75:
cf:b0:ad:15:76:d7:30:d5:14:94:19:db:d9:7d:93:2c:41:46:
50:25:56:7c:0b:77:7d:68:48:4f:66:65:f1:70:c4:d3:b1:9f:
ff:d7:28:2c:55:16:3c:c7:14:c4:17:7d:11:27:b1:87:e5:56:
55:54:34:ff:5b:38:0f:8d:2a:2f:46:61:4b:e8:d4:b7:70:dc:
65:c0:1e:14:20:5a:32:a4:e4:cd:0c:3b:d1:04:e8:6f:97:fe:
2e:e4:6e:c8:34:a2:b6:2a:76:17:3e:93:34:9a:ef:82:9f:38:
e9:2f:32:2d:25:e6:ad:a9:b1:0d:0c:6c:e7:84:6f:84:87:a4:
c1:57:32:a9:c1:36:a4:ff:05:17:43:36:62:77:5b:5f:4e:86:
4c:3b:ab:a2:98:b2:be:9d:e4:81:19:49:0a:e3:e1:f3:7b:f8:
cf:a7:da:60:79:ca:15:2d:cb:13:b9:b7:9d:10:fb:3f:ff:3f:
3a:68:0e:24:1f:ad:44:9b:83:07:49:b9:a2:5d:22:d4:fc:d9:
ab:d0:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:05:00 2026 by rpki-client