Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
File: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft (raw, json)
Hash identifier: Ttv8SAIzu+ZKmpWNlT50LjeuBBtc49veNYB292omAd0=
Subject key identifier: 65:A6:D7:EA:D6:A3:F5:6B:61:1C:4F:05:7F:BC:20:00:3F:88:B1:00
Authority key identifier: 21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
Certificate issuer: /CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Certificate serial: 5419A0F5A27D5E7D82E03C8CC31404DC3200DBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
Manifest number: 02F4
Signing time: Sun 08 Mar 2026 20:17:25 +0000
Manifest this update: Sun 08 Mar 2026 20:12:23 +0000
Manifest next update: Mon 09 Mar 2026 21:53:23 +0000
Files and hashes: 1: 21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl (hash: 577qnOlSzzWPUdjOh0SLMe+RnS0sMZSXXkgJVuik0UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:19:a0:f5:a2:7d:5e:7d:82:e0:3c:8c:c3:14:04:dc:32:00:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c9cb25454f399c88cdffcba74bb9308834e09d
Validity
Not Before: Mar 8 20:12:23 2026 GMT
Not After : Mar 9 21:53:23 2026 GMT
Subject: CN=65A6D7EAD6A3F56B611C4F057FBC20003F88B100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:24:c9:3a:90:c8:23:d1:6e:51:4b:f3:6b:f0:
ca:21:13:82:5c:b7:80:4d:46:9d:c8:4c:f7:39:97:
77:f3:d1:5d:f2:b4:cb:2a:7f:f7:17:f5:36:1a:21:
cd:41:fa:31:c9:e0:12:ba:67:a8:57:56:23:a5:1f:
ea:be:cf:f9:b9:fd:e4:23:00:1a:79:66:81:68:81:
ce:52:72:97:4e:00:a1:3c:f9:85:6d:f6:bb:b8:03:
f3:21:df:3d:49:71:f0:c2:7a:c4:a3:cf:90:55:ac:
25:68:87:5c:de:d8:b8:80:6e:5c:c0:a3:b1:a5:d5:
3c:4d:44:c6:19:c1:d1:42:89:9f:45:7e:57:da:bc:
2e:fb:67:9c:4b:c0:e5:56:d9:f5:9e:d3:70:2b:01:
67:2a:d5:c1:9b:37:cf:0c:84:a5:cb:cf:0a:27:f6:
05:7f:d9:59:55:fb:63:c4:57:41:64:15:ec:22:bc:
a3:86:9f:3c:a8:d0:06:25:3e:8f:e8:15:a9:d3:6f:
15:84:05:79:c5:a6:fc:2a:13:21:2e:74:72:3d:2c:
1d:23:9b:6e:8c:f2:99:19:58:46:61:eb:09:25:e6:
9e:37:2f:7a:d2:4a:ef:f2:7b:ea:21:ea:16:3a:f6:
91:9b:7a:db:25:23:70:9b:80:32:88:29:1b:b8:f4:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:D7:EA:D6:A3:F5:6B:61:1C:4F:05:7F:BC:20:00:3F:88:B1:00
X509v3 Authority Key Identifier:
keyid:21:C9:CB:25:45:4F:39:9C:88:CD:FF:CB:A7:4B:B9:30:88:34:E0:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcnLJUVPOZyIzf_Lp0u5MIg04J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/1/21C9CB25454F399C88CDFFCBA74BB9308834E09D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a7:42:c8:fb:d1:42:7d:52:07:76:a7:c6:46:74:ad:3b:e1:
a0:fa:d2:35:a2:7d:58:79:3f:60:ae:5b:6c:02:06:da:08:72:
dc:be:4f:87:9c:60:1e:b6:a7:54:f0:d2:53:66:a6:38:a9:ad:
6b:fb:a8:5e:cd:16:e8:cf:ba:a6:8a:db:10:b3:cd:d4:61:df:
fc:66:29:e3:4d:59:a0:be:18:78:7f:20:3c:6c:21:a6:16:42:
00:8e:2e:b8:0b:8d:23:44:1e:fe:a7:27:70:9e:b8:11:44:45:
61:7a:d0:58:9d:19:98:a9:1f:93:cc:1f:2f:69:ae:0a:b7:56:
eb:2f:0c:85:e3:af:6e:3a:b2:5d:62:32:c6:62:f0:56:b1:08:
4b:77:1d:5a:62:0a:ba:4b:28:09:35:5e:3e:e7:3a:e3:2a:36:
d3:4f:23:bc:77:3b:40:df:56:0d:f0:ae:f6:ad:11:61:ac:02:
c3:17:a1:18:11:aa:f2:f7:b4:0a:84:af:1a:dd:e0:79:58:49:
e5:da:3c:68:11:4e:48:38:c4:18:16:7e:65:ed:e5:ba:d9:54:
1c:c5:ea:95:a0:03:2e:3e:9e:bc:b2:a6:50:3d:6d:f3:36:4b:
ca:bb:6d:a0:14:68:57:da:5d:4b:b3:3d:6e:38:80:45:b3:16:
40:2a:86:00
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVBmg9aJ9Xn2C4DyMwxQE3DIA2+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFjOWNiMjU0NTRmMzk5Yzg4Y2RmZmNiYTc0YmI5MzA4
ODM0ZTA5ZDAeFw0yNjAzMDgyMDEyMjNaFw0yNjAzMDkyMTUzMjNaMDMxMTAvBgNV
BAMTKDY1QTZEN0VBRDZBM0Y1NkI2MTFDNEYwNTdGQkMyMDAwM0Y4OEIxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjJMk6kMgj0W5RS/Nr8MohE4Jc
t4BNRp3ITPc5l3fz0V3ytMsqf/cX9TYaIc1B+jHJ4BK6Z6hXViOlH+q+z/m5/eQj
ABp5ZoFogc5ScpdOAKE8+YVt9ru4A/Mh3z1JcfDCesSjz5BVrCVoh1ze2LiAblzA
o7Gl1TxNRMYZwdFCiZ9FflfavC77Z5xLwOVW2fWe03ArAWcq1cGbN88MhKXLzwon
9gV/2VlV+2PEV0FkFewivKOGnzyo0AYlPo/oFanTbxWEBXnFpvwqEyEudHI9LB0j
m26M8pkZWEZh6wkl5p43L3rSSu/ye+oh6hY69pGbetslI3CbgDKIKRu49F2rAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUZabX6taj9WthHE8Ff7wgAD+IsQAwHwYDVR0j
BBgwFoAUIcnLJUVPOZyIzf/Lp0u5MIg04J0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzEv
MjFDOUNCMjU0NTRGMzk5Qzg4Q0RGRkNCQTc0QkI5MzA4ODM0RTA5RC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ljbkxKVVZQT1p5SXpmX0xwMHU1TUlnMDRKMC5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wMTRiOTIwOGI1NDY0ZmYx
YWVhYzFmYzgyOWFkMDM0My8xLzIxQzlDQjI1NDU0RjM5OUM4OENERkZDQkE3NEJC
OTMwODgzNEUwOUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgp0LI+9FCfVIHdqfGRnStO+Gg+tI1on1Y
eT9grltsAgbaCHLcvk+HnGAetqdU8NJTZqY4qa1r+6hezRboz7qmitsQs83UYd/8
ZinjTVmgvhh4fyA8bCGmFkIAji64C40jRB7+pydwnrgRREVhetBYnRmYqR+TzB8v
aa4Kt1brLwyF469uOrJdYjLGYvBWsQhLdx1aYgq6SygJNV4+5zrjKjbTTyO8dztA
31YN8K72rRFhrALDF6EYEary97QKhK8a3eB5WEnl2jxoEU5IOMQYFn5l7eW62VQc
xeqVoAMuPp68sqZQPW3zNkvKu22gFGhX2l1Lsz1uOIBFsxZAKoYA
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:43:55 2026 by rpki-client