Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft
File: qn2enOi8XayPr4gW2aCgqGHbioU.mft (raw, json)
Hash identifier: BL3R0J4+5kqo6kco/EL89T/fDxEZghMGDPIjf30bjMI=
Subject key identifier: 73:40:98:C3:87:92:7D:68:0D:ED:32:E9:16:D9:8B:3D:81:5D:CD:26
Authority key identifier: AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85
Certificate issuer: /CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85
Certificate serial: 019C2C9A8E67C2EF1B95C6BC527D05D3C1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft
Manifest number: 62
Signing time: Thu 05 Feb 2026 07:00:52 +0000
Manifest this update: Thu 05 Feb 2026 07:00:52 +0000
Manifest next update: Fri 06 Feb 2026 07:00:52 +0000
Files and hashes: 1: CS5ZQgE1DjiY73TjWXLmvA1XB6s.asa (hash: cdzgInYFqqniFAya9n+J57Hqz+X64L3eS0xllceyplc=)
2: qn2enOi8XayPr4gW2aCgqGHbioU.crl (hash: PwPNAIZRHtvTjRszCdpT/6yKfuozvOh58BIj7GIu5v4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:9a:8e:67:c2:ef:1b:95:c6:bc:52:7d:05:d3:c1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85
Validity
Not Before: Feb 5 07:00:52 2026 GMT
Not After : Feb 6 07:00:52 2026 GMT
Subject: CN=734098c387927d680ded32e916d98b3d815dcd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:bc:6c:af:2c:d9:e4:b3:9a:82:eb:66:f1:
76:f0:34:c8:f4:fe:c8:3a:36:d0:21:8e:b5:6c:31:
ed:df:fb:1d:ef:13:8f:73:c4:ba:91:86:dc:4e:c6:
8e:99:2f:72:f3:d6:5a:de:06:c2:ad:14:24:a7:dc:
bf:bb:3f:53:93:c2:1a:12:95:e5:27:4c:bc:d8:30:
52:cc:b1:7b:3b:d6:49:5e:2f:25:f8:f5:6b:4a:d2:
61:54:bb:4d:20:a1:9e:a3:0d:ec:9f:42:af:c8:55:
7a:01:91:21:d7:2b:0c:a9:43:38:02:3c:98:05:20:
67:59:09:7c:d2:4d:52:76:b9:67:8b:47:b3:ec:06:
9f:2d:ae:b9:1b:ad:bf:51:b1:11:6c:6d:a3:76:62:
e2:bc:97:d8:07:1a:8d:76:c1:cf:71:ad:a5:fb:16:
14:55:3e:68:87:39:ef:ef:a0:f0:3f:66:29:99:b7:
5f:b1:94:84:4e:47:24:43:2f:16:7e:5f:9a:09:db:
60:cc:2b:b6:2a:7c:fc:34:a1:ac:37:b4:ec:16:e7:
c2:88:40:db:53:af:38:42:f3:80:34:3f:b8:a9:02:
bb:6b:b9:cf:a2:fa:d2:f5:80:66:25:92:d0:b2:f0:
55:b1:26:d4:90:44:27:47:c4:52:a5:af:54:f2:8e:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:98:C3:87:92:7D:68:0D:ED:32:E9:16:D9:8B:3D:81:5D:CD:26
X509v3 Authority Key Identifier:
keyid:AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:90:57:28:ef:af:8e:0b:1c:70:c2:78:97:1e:42:b8:c8:ab:
39:4e:4d:42:c2:f2:81:5e:62:34:39:90:0f:a1:93:1f:48:9c:
4a:33:bb:24:34:ba:9c:9e:1b:87:1b:a8:a8:52:a2:cf:63:64:
a2:0a:55:d3:35:3d:07:90:31:61:5e:d7:eb:81:33:65:4f:b3:
8b:fd:32:19:1b:18:b9:41:cd:81:b4:6e:cb:19:2f:e2:98:cc:
e5:87:0a:31:fe:82:2f:85:67:e9:2d:ef:b9:9a:ee:3e:49:8b:
63:32:fb:dd:3a:a9:7c:31:d0:77:39:4b:47:72:a0:7f:5a:f9:
c4:ec:2a:8a:65:a9:db:d4:9e:2b:8e:f1:23:19:59:bc:b7:ff:
76:7f:2a:f5:fd:24:0a:0a:b4:fb:db:4f:7e:9e:ff:1a:36:50:
25:d7:13:2f:2e:ce:31:fa:ff:ab:0b:ea:cc:6e:54:f5:63:fc:
12:c3:81:44:35:02:c3:8f:57:33:fc:58:df:42:d5:fe:70:43:
93:9f:68:30:20:7f:87:cd:8e:87:56:04:97:9c:ff:d4:cb:b4:
4e:75:e0:07:5f:6e:fb:0b:91:0a:8f:2f:02:00:26:1d:26:2d:
f9:82:2a:8c:24:ee:6d:57:2c:b3:79:08:ac:57:96:48:39:9c:
d7:3b:02:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwsmo5nwu8blca8Un0F08G8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2Q5ZTljZThiYzVkYWM4ZmFmODgxNmQ5YTBhMGE4NjFk
YjhhODUwHhcNMjYwMjA1MDcwMDUyWhcNMjYwMjA2MDcwMDUyWjAzMTEwLwYDVQQD
Eyg3MzQwOThjMzg3OTI3ZDY4MGRlZDMyZTkxNmQ5OGIzZDgxNWRjZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBe8bK8s2eSzmoLrZvF28DTI9P7I
OjbQIY61bDHt3/sd7xOPc8S6kYbcTsaOmS9y89Za3gbCrRQkp9y/uz9Tk8IaEpXl
J0y82DBSzLF7O9ZJXi8l+PVrStJhVLtNIKGeow3sn0KvyFV6AZEh1ysMqUM4AjyY
BSBnWQl80k1Sdrlni0ez7AafLa65G62/UbERbG2jdmLivJfYBxqNdsHPca2l+xYU
VT5ohznv76DwP2YpmbdfsZSETkckQy8Wfl+aCdtgzCu2Knz8NKGsN7TsFufCiEDb
U684QvOAND+4qQK7a7nPovrS9YBmJZLQsvBVsSbUkEQnR8RSpa9U8o7B0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNAmMOHkn1oDe0y6RbZiz2BXc0mMB8GA1UdIwQY
MBaAFKp9npzovF2sj6+IFtmgoKhh24qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMjhkNWItNjliMS00NzUyLTk5Y2It
NTU0YTgxYzkwNzExLzEvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMjhkNWItNjliMS00NzUyLTk5Y2ItNTU0YTgxYzkwNzEx
LzEvcW4yZW5PaThYYXlQcjRnVzJhQ2dxR0hiaW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJBXKO+v
jgsccMJ4lx5CuMirOU5NQsLygV5iNDmQD6GTH0icSjO7JDS6nJ4bhxuoqFKiz2Nk
ogpV0zU9B5AxYV7X64EzZU+zi/0yGRsYuUHNgbRuyxkv4pjM5YcKMf6CL4Vn6S3v
uZruPkmLYzL73TqpfDHQdzlLR3Kgf1r5xOwqimWp29SeK47xIxlZvLf/dn8q9f0k
Cgq0+9tPfp7/GjZQJdcTLy7OMfr/qwvqzG5U9WP8EsOBRDUCw49XM/xY30LV/nBD
k59oMCB/h82Oh1YEl5z/1Mu0TnXgB19u+wuRCo8vAgAmHSYt+YIqjCTubVcss3kI
rFeWSDmc1zsC0A==
-----END CERTIFICATE-----
Generated at Fri Apr 3 10:31:01 2026 by rpki-client