Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: GGJyR32urhk01jGAPhLhiu/4L/m74Vo1T9E+Q1x6qgU=
Subject key identifier: 36:F9:64:0F:FD:76:BC:07:7F:3F:E2:AB:EF:34:62:BA:36:86:2E:AB
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 019FC66DABD6EF0880134880EBC23352E22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 19DF
Signing time: Mon 03 Aug 2026 07:01:43 +0000
Manifest this update: Mon 03 Aug 2026 07:01:43 +0000
Manifest next update: Tue 04 Aug 2026 07:01:43 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: iLm/7CJRMe+lMXMyQXi3j0ahsvr4cGdWJU1WUmhe6qo=)
2: 9g90EbWmc6BJchDyUX4pQOV_PqM.roa (hash: 5bDGEQi2LTAictj/wkSLC8c8gl+A2erEIQu+tlRO84s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:6d:ab:d6:ef:08:80:13:48:80:eb:c2:33:52:e2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Aug 3 07:01:43 2026 GMT
Not After : Aug 4 07:01:43 2026 GMT
Subject: CN=36f9640ffd76bc077f3fe2abef3462ba36862eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:0f:8d:c4:37:0f:f0:80:bb:16:f8:71:09:
a1:3a:a7:0b:c2:d6:06:5d:8d:8c:2f:38:8c:5c:48:
fa:b5:d8:4e:9a:ba:82:fb:91:64:b0:83:76:71:f3:
81:2c:0a:3e:a2:86:63:32:90:9e:44:7f:df:44:f6:
1f:f6:15:45:d0:e9:a6:d8:5f:9d:20:ab:9a:44:32:
2b:49:5b:0c:7a:ff:e4:f1:a1:5a:dd:31:74:d7:ec:
85:75:01:1b:97:de:f7:9c:b3:b6:a5:9e:77:1b:7f:
b8:3c:d8:c0:62:2b:f8:dc:96:0c:9c:08:56:2a:94:
c9:85:fe:ed:c3:84:d0:5e:18:75:38:67:a8:0a:b8:
a0:f8:d4:76:37:c8:2e:68:f0:9c:87:48:b7:fd:99:
83:e0:01:9c:b2:5c:ef:9f:9c:d3:eb:bf:a5:d3:79:
2c:7d:f5:cf:5d:cf:a1:e0:9c:18:d8:c7:23:f0:53:
ba:32:07:70:ad:b8:c8:17:d9:4b:23:64:e5:3b:e8:
bd:d3:27:05:41:4f:2b:cf:42:85:bd:62:e5:13:84:
01:f6:b2:7d:38:f9:a1:14:a0:20:3b:6b:4f:46:59:
a0:3d:a5:b8:50:27:7c:5e:7b:51:04:7b:fe:45:1f:
5a:80:3f:51:3c:f8:35:ba:ec:4f:40:c8:e4:85:b8:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:64:0F:FD:76:BC:07:7F:3F:E2:AB:EF:34:62:BA:36:86:2E:AB
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7b:d2:cf:86:27:b6:4a:01:e9:f5:44:9e:ea:94:6a:1a:23:
57:b9:ad:2a:d4:f3:25:89:3f:8f:f2:56:08:2e:10:a3:f3:22:
de:f1:fd:aa:8b:50:ca:5f:51:91:c6:de:4d:c8:6b:51:f1:fc:
68:33:7f:e7:42:39:1b:90:08:79:bc:f4:37:e3:75:1c:9b:6d:
67:bd:8d:0f:0a:2f:7a:99:fb:f5:14:53:fb:6e:96:28:63:11:
71:30:ed:9f:c5:a5:c3:cc:ea:7b:e4:90:6c:f8:07:68:b0:66:
5c:2e:60:92:28:bb:a4:cb:5f:99:1c:25:39:9d:51:5b:0c:2e:
74:3d:b7:ca:96:a7:51:14:15:e9:c4:31:d2:81:46:2d:66:aa:
fe:dd:c7:5a:89:df:e5:2a:10:79:5b:cd:9b:ed:e9:a6:84:f0:
70:20:07:af:81:fc:01:d2:3e:30:04:6b:00:ca:1d:af:72:5d:
06:6c:54:4c:5d:61:17:36:cb:6a:e2:b5:79:a8:25:f1:1f:67:
2e:4f:ac:75:a3:a1:22:89:1d:69:3f:14:8c:67:ea:d8:f4:c7:
47:33:8a:0c:29:9c:11:71:8e:5d:88:3f:4d:54:ee:03:99:6b:
5d:a3:85:a9:c9:e6:bb:3c:b5:7c:03:47:f5:47:24:07:7d:3a:
49:1d:a3:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/GbavW7wiAE0iA68IzUuIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNzA0MGM3NDI5ZTdiOWUyMWE1ZmZjODhkOTMyYjQ3MDdj
YzNhMDAwHhcNMjYwODAzMDcwMTQzWhcNMjYwODA0MDcwMTQzWjAzMTEwLwYDVQQD
EygzNmY5NjQwZmZkNzZiYzA3N2YzZmUyYWJlZjM0NjJiYTM2ODYyZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR0PjcQ3D/CAuxb4cQmhOqcLwtYG
XY2MLziMXEj6tdhOmrqC+5FksIN2cfOBLAo+ooZjMpCeRH/fRPYf9hVF0Omm2F+d
IKuaRDIrSVsMev/k8aFa3TF01+yFdQEbl973nLO2pZ53G3+4PNjAYiv43JYMnAhW
KpTJhf7tw4TQXhh1OGeoCrig+NR2N8guaPCch0i3/ZmD4AGcslzvn5zT67+l03ks
ffXPXc+h4JwY2Mcj8FO6MgdwrbjIF9lLI2TlO+i90ycFQU8rz0KFvWLlE4QB9rJ9
OPmhFKAgO2tPRlmgPaW4UCd8XntRBHv+RR9agD9RPPg1uuxPQMjkhbi0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb5ZA/9drwHfz/iq+80Yro2hi6rMB8GA1UdIwQY
MBaAFPJwQMdCnnueIaX/yI2TK0cHzDoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMt
N2VjYWJhZTE4ZDhhLzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMtN2VjYWJhZTE4ZDhh
LzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3vSz4Yn
tkoB6fVEnuqUahojV7mtKtTzJYk/j/JWCC4Qo/Mi3vH9qotQyl9RkcbeTchrUfH8
aDN/50I5G5AIebz0N+N1HJttZ72NDwovepn79RRT+26WKGMRcTDtn8Wlw8zqe+SQ
bPgHaLBmXC5gkii7pMtfmRwlOZ1RWwwudD23ypanURQV6cQx0oFGLWaq/t3HWonf
5SoQeVvNm+3ppoTwcCAHr4H8AdI+MARrAModr3JdBmxUTF1hFzbLauK1eagl8R9n
Lk+sdaOhIokdaT8UjGfq2PTHRzOKDCmcEXGOXYg/TVTuA5lrXaOFqcnmuzy1fANH
9UckB306SR2jZA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:15 2026 by rpki-client