Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: oi/dDz1YUZQKPWDoKtMysgN+rbOz+aD+vvky9Nzv/S0=
Subject key identifier: CA:FC:8D:46:79:0D:1D:27:8A:81:0B:46:FE:CD:1E:C2:C6:04:9E:41
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 019F2247198F499D4B08C0804A85E74E4A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 1127
Signing time: Thu 02 Jul 2026 10:01:52 +0000
Manifest this update: Thu 02 Jul 2026 10:01:52 +0000
Manifest next update: Fri 03 Jul 2026 10:01:52 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: JSUoDBx+6yHyd4alLZEVGiGc/N7t4OV17O3mr1FOaKk=)
2: YtniEFg8kjPPW1GupRixGIZcTZw.roa (hash: kE3KePA1ZXt9tPgxQYG+9riIhGGimv2LBW4VQyOyrso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:47:19:8f:49:9d:4b:08:c0:80:4a:85:e7:4e:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Jul 2 10:01:52 2026 GMT
Not After : Jul 3 10:01:52 2026 GMT
Subject: CN=cafc8d46790d1d278a810b46fecd1ec2c6049e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:e1:a3:5f:59:a8:d6:df:05:36:fa:dc:81:
c6:c7:7a:4a:28:3d:a4:a0:70:f7:d5:14:bc:77:8d:
4c:86:ba:88:67:8a:34:4e:c3:c9:48:77:1e:64:44:
e4:ce:2c:1c:99:1c:5d:f1:91:0c:36:30:e5:b4:1a:
b0:36:0b:cf:55:b6:21:ea:c7:3a:63:9e:b6:1e:cc:
5f:e0:68:ac:20:2b:5f:70:41:ce:9e:c0:4c:08:99:
45:39:c0:d5:1d:65:3c:30:5d:49:6c:25:02:e2:51:
59:8b:f7:ae:da:49:d1:39:9a:b2:5c:13:1d:4b:84:
04:20:4e:68:db:b0:51:f7:c8:9c:96:91:cf:43:c6:
10:eb:be:9e:84:32:db:32:02:c0:ea:04:fa:3e:b2:
60:9b:72:b5:af:7e:b7:cf:96:b9:45:f6:58:e1:4a:
94:42:e1:75:28:0b:b5:0d:56:56:7b:80:06:e8:d1:
70:5b:92:4c:f4:3c:c9:0e:36:4c:d6:11:62:bd:10:
9e:8e:17:04:7c:ce:a3:8b:e4:a2:60:ee:bb:e8:92:
3a:ae:3a:2a:2f:93:7a:ce:a8:78:bd:d8:0e:2f:ab:
bc:39:01:94:06:ca:9f:86:a9:2c:40:75:72:ea:cc:
4f:60:d1:05:0c:e0:5d:fc:64:93:27:59:a1:e8:fe:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FC:8D:46:79:0D:1D:27:8A:81:0B:46:FE:CD:1E:C2:C6:04:9E:41
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1a:c5:81:db:58:38:d9:88:7d:ea:63:32:c4:ef:8e:22:d3:
b4:a0:95:b7:55:8b:55:fd:87:49:38:70:b3:5b:5a:ef:41:02:
bb:1f:e4:07:3d:d0:aa:49:8b:15:25:1a:cd:f5:72:8a:14:06:
74:35:66:0b:22:1a:2e:f7:7d:72:0b:92:7f:fc:e6:da:73:a2:
2c:ec:5a:34:8b:34:5b:f9:4b:77:ad:ea:52:b0:1d:a8:f5:39:
dc:2a:20:c4:48:d7:0f:f2:c5:69:1f:d2:8e:70:17:0f:18:51:
80:af:bd:c1:27:f5:46:96:d1:ac:24:4a:16:cc:c7:89:0d:1f:
5f:68:ce:e8:9b:5f:08:2b:1e:3d:10:1d:67:60:60:56:24:db:
6b:5c:eb:e4:4d:06:e8:f0:4b:4a:2a:e7:dc:a4:c0:aa:70:ba:
80:33:29:e6:48:d9:1d:7c:3c:54:c4:96:8f:ba:1d:be:64:63:
f9:54:06:ad:e4:27:b5:dd:c5:1f:49:15:a1:ea:95:d7:c6:b2:
68:cb:55:bb:dc:e9:d0:59:4a:20:a2:b5:d9:a6:f9:79:48:8c:
9f:3b:df:42:aa:01:41:d5:41:d6:a3:2e:e6:b3:8f:a9:06:92:
92:77:93:7b:5f:8c:62:73:41:fe:fc:ad:57:be:b3:55:fc:4a:
cd:fc:84:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8iRxmPSZ1LCMCASoXnTkpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYWFhNzljYWFjZmY1ZjAzMDRiOWFlOTAwMmUyNzEzZmJm
ZjZkNTIwHhcNMjYwNzAyMTAwMTUyWhcNMjYwNzAzMTAwMTUyWjAzMTEwLwYDVQQD
EyhjYWZjOGQ0Njc5MGQxZDI3OGE4MTBiNDZmZWNkMWVjMmM2MDQ5ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTfho19ZqNbfBTb63IHGx3pKKD2k
oHD31RS8d41MhrqIZ4o0TsPJSHceZETkziwcmRxd8ZEMNjDltBqwNgvPVbYh6sc6
Y562Hsxf4GisICtfcEHOnsBMCJlFOcDVHWU8MF1JbCUC4lFZi/eu2knROZqyXBMd
S4QEIE5o27BR98iclpHPQ8YQ676ehDLbMgLA6gT6PrJgm3K1r363z5a5RfZY4UqU
QuF1KAu1DVZWe4AG6NFwW5JM9DzJDjZM1hFivRCejhcEfM6ji+SiYO676JI6rjoq
L5N6zqh4vdgOL6u8OQGUBsqfhqksQHVy6sxPYNEFDOBd/GSTJ1mh6P7OgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr8jUZ5DR0nioELRv7NHsLGBJ5BMB8GA1UdIwQY
MBaAFAqqp5yqz/XwMEua6QAuJxP7/21SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEt
NmViOWEyMjEyOWUxLzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZmMyNjYtMTI0Ny00ZjAwLWIxNjEtNmViOWEyMjEyOWUx
LzEvQ3Fxbm5LclA5ZkF3UzVycEFDNG5FX3ZfYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhrFgdtY
ONmIfepjMsTvjiLTtKCVt1WLVf2HSThws1ta70ECux/kBz3QqkmLFSUazfVyihQG
dDVmCyIaLvd9cguSf/zm2nOiLOxaNIs0W/lLd63qUrAdqPU53CogxEjXD/LFaR/S
jnAXDxhRgK+9wSf1RpbRrCRKFszHiQ0fX2jO6JtfCCsePRAdZ2BgViTba1zr5E0G
6PBLSirn3KTAqnC6gDMp5kjZHXw8VMSWj7odvmRj+VQGreQntd3FH0kVoeqV18ay
aMtVu9zp0FlKIKK12ab5eUiMnzvfQqoBQdVB1qMu5rOPqQaSkneTe1+MYnNB/vyt
V76zVfxKzfyErQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:25 2026 by rpki-client