Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: RyFQJPQJwDTwriCpGhSPF9eXbw9lxJyb16MHf/4NdMY=
Subject key identifier: 80:3B:F4:9E:4F:FD:BC:9A:0C:17:B7:98:BE:27:44:D4:1E:A9:65:52
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 019C4A36DCEEC5F8F1B34F8177DC0083531E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 17A1
Signing time: Wed 11 Feb 2026 01:00:35 +0000
Manifest this update: Wed 11 Feb 2026 01:00:35 +0000
Manifest next update: Thu 12 Feb 2026 01:00:35 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: 4CTZSEHOFYkliqSTXFaVsYoWa05XKdy+HQq++YRb91M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4a:36:dc:ee:c5:f8:f1:b3:4f:81:77:dc:00:83:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Feb 11 01:00:35 2026 GMT
Not After : Feb 12 01:00:35 2026 GMT
Subject: CN=803bf49e4ffdbc9a0c17b798be2744d41ea96552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:e7:30:d3:7e:e6:52:0a:47:50:9f:c6:ae:
9c:52:b9:b8:41:37:25:a5:c4:1a:a6:7a:07:45:ed:
f5:dd:10:25:0d:8a:7b:da:a6:3a:9d:d5:46:15:eb:
2f:a5:70:aa:21:bf:c6:f1:94:6f:43:1e:1f:82:02:
1a:59:d6:28:3e:21:6c:d3:e5:1e:f5:b9:6e:7d:84:
08:2e:33:86:5e:72:c6:e2:19:b4:5b:c4:0b:c1:87:
66:f5:79:02:2b:5f:96:01:ec:ee:b9:99:12:0d:13:
e9:6b:37:b1:48:92:fc:eb:20:0a:8a:db:98:28:fa:
c4:8c:da:dd:7f:02:79:43:71:91:49:04:88:93:d7:
f0:39:13:c3:17:15:3e:c0:07:a7:ac:e0:59:37:4b:
44:03:da:95:ed:e7:f9:72:22:44:e6:64:2b:bc:b9:
5b:52:9c:bf:65:64:97:85:86:76:08:e0:f5:45:d9:
58:12:6a:46:1b:83:da:76:12:43:4b:56:c0:d7:fd:
8f:41:2d:d0:e0:36:d1:28:9e:23:15:c9:6a:0f:7a:
3a:a7:63:a9:1e:58:7c:f5:ae:ee:61:2a:ac:04:3b:
7a:f4:be:95:6a:f4:75:0a:88:fd:78:94:d1:e6:cd:
0f:c0:36:20:24:e4:27:46:b4:33:3d:7d:2b:30:65:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3B:F4:9E:4F:FD:BC:9A:0C:17:B7:98:BE:27:44:D4:1E:A9:65:52
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:0a:c2:5a:ea:ef:b9:6d:6c:4f:37:24:e3:a7:0f:b7:6c:
0b:07:62:a7:9e:f0:5b:f1:15:ea:1e:83:a9:b2:a4:6a:b3:22:
9b:6f:80:fd:e2:ae:14:92:a3:66:6f:ff:a7:e3:58:36:da:7b:
d8:f4:1f:85:eb:e6:70:b6:0e:1c:df:87:f2:58:fe:bd:60:e2:
3c:c5:f2:b7:a5:77:ab:71:c2:59:a8:ca:3d:88:c9:6d:db:b2:
16:f1:f2:54:bb:3b:ed:00:3e:56:06:39:c3:0c:4f:48:96:02:
61:0a:61:3e:58:0f:e7:68:7a:90:ba:07:15:ae:fe:60:ac:e5:
31:18:c1:57:b1:42:c2:00:62:05:3e:6d:d3:76:d7:9d:c6:99:
8f:2f:ef:32:c9:84:dd:3c:7d:71:77:9a:e4:cb:74:02:75:b5:
cf:15:8d:3d:6e:2b:a8:a1:2c:80:1c:74:03:77:4a:52:8c:c9:
2c:6d:7d:2e:70:3e:0a:80:e7:1f:d0:e6:77:a7:f4:74:19:1f:
65:46:82:b0:28:aa:ed:03:82:d0:57:a7:59:2f:ec:95:5b:76:
49:27:43:01:7d:ba:b6:dd:c6:1e:23:3f:da:18:97:95:6b:dc:
de:1b:14:67:f7:b5:74:e9:a6:b6:98:7d:2a:fb:37:db:58:60:
b4:8e:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:31 2026 by rpki-client