Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: xjs/AOwVp48zyaEg304h1TQ8qPmuXufobkfxhjDv3f4=
Subject key identifier: 85:CE:1B:C6:7A:59:C2:E1:7D:2B:B7:D6:25:16:B7:C2:97:BB:3D:F1
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 019F216B4594EDDB2B1F01DC6D9F6D749CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 0A4D
Signing time: Thu 02 Jul 2026 06:01:45 +0000
Manifest this update: Thu 02 Jul 2026 06:01:45 +0000
Manifest next update: Fri 03 Jul 2026 06:01:45 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: BIqavQeOGDRgxM8qd1cdZ2v7v8izhT7UaPr6MHP+wKQ=)
2: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (hash: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:6b:45:94:ed:db:2b:1f:01:dc:6d:9f:6d:74:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Jul 2 06:01:45 2026 GMT
Not After : Jul 3 06:01:45 2026 GMT
Subject: CN=85ce1bc67a59c2e17d2bb7d62516b7c297bb3df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:78:49:c2:9b:87:4c:a0:53:87:d4:94:b7:
67:f0:41:2d:c8:fb:46:eb:e1:14:49:e4:1a:c5:5f:
c7:e3:8d:81:c8:68:c8:4b:e1:57:69:8b:9e:a4:bc:
7a:70:e6:23:8f:dc:0c:13:3a:b7:c3:8a:ed:eb:7e:
1e:dc:f1:0b:cb:56:d3:a5:08:0d:6f:b6:9a:1b:77:
57:df:70:c9:a9:28:69:0a:59:90:9c:f3:cd:50:eb:
a9:7b:b2:88:bb:55:fb:55:d3:e0:2f:16:a1:71:8e:
c9:fd:16:08:fb:7f:3a:13:eb:7c:ae:76:03:3c:b5:
2f:8f:cd:6f:84:19:1f:65:96:75:6e:80:fb:16:77:
e8:c9:89:b2:49:c4:0b:c0:8f:b7:8a:ff:cf:04:59:
4a:bc:d0:e8:dd:7a:8c:9d:40:66:0b:8d:7d:71:62:
fc:d9:95:99:b4:89:be:18:55:b4:1b:af:f8:88:d7:
75:7a:b0:a2:24:e7:ba:5d:01:21:d1:4f:a4:e6:a2:
6b:ea:d3:ab:be:ba:f5:1f:77:d2:01:4b:ed:8a:6c:
df:60:5a:0a:d8:33:7f:fc:a0:24:d8:2c:05:e9:fa:
9b:7f:1c:b8:05:71:67:f1:7e:52:56:9e:ee:10:72:
d4:e1:1e:95:88:c7:75:af:8f:0e:8b:e7:61:44:15:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:1B:C6:7A:59:C2:E1:7D:2B:B7:D6:25:16:B7:C2:97:BB:3D:F1
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bf:e7:7c:8b:ca:a8:d0:ef:9f:68:ce:ff:13:fc:de:63:75:
50:4d:e6:f8:43:c9:03:d3:67:5a:8b:06:9d:ac:d2:b6:95:c6:
7c:16:84:2a:07:e5:cd:07:4f:8e:9d:76:cf:37:fa:81:b5:54:
d8:34:12:ff:de:14:10:8c:e6:b6:f5:40:68:f4:2d:1f:10:47:
0f:41:85:c8:31:80:85:c1:cf:45:b4:39:d3:ad:6a:32:a3:7f:
cf:18:4c:c7:de:15:fc:32:d3:61:d0:18:45:7d:93:bf:02:40:
cc:2c:eb:a1:65:98:55:7f:04:5c:85:a4:1e:ee:7d:54:47:33:
5b:c1:b6:8f:b9:b3:7f:47:d7:cd:4f:df:c8:c4:7e:a9:1f:f6:
08:ff:8e:cd:fb:6d:76:95:73:b8:4f:b8:ee:86:0d:b5:4a:61:
7b:8c:6c:22:ce:0d:df:5e:1f:99:96:a1:61:57:92:6d:65:e2:
d3:30:df:b1:0e:9e:b7:19:60:49:55:cc:ee:aa:1e:83:35:6f:
58:fe:f0:ac:31:ac:da:8e:de:ff:f9:64:eb:05:91:9e:29:5a:
5e:a4:92:7c:c8:cc:49:b2:ca:e0:3c:b0:ce:0b:0c:73:ce:5e:
31:8f:61:6e:b3:8a:6e:fd:c7:a2:14:ce:98:b9:35:cd:7a:4e:
70:41:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:07 2026 by rpki-client