Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json)
Hash identifier: S3Yv6qHVB+z0qG5l03YKAQa6LOEGZvK+MWV4V9wwjC8=
Subject key identifier: 4A:71:C1:B2:8D:BC:2B:A5:A0:17:3C:88:A0:93:D2:81:1B:C1:5F:BB
Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71
Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
Certificate serial: 516DFF7D9C4C5F2CCF3745B0219BFECD35295B0C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
Manifest number: 02EC
Signing time: Thu 26 Feb 2026 05:13:56 +0000
Manifest this update: Thu 26 Feb 2026 05:08:54 +0000
Manifest next update: Fri 27 Feb 2026 07:55:54 +0000
Files and hashes: 1: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 3wo4yWYqUm70prj7oF5pGF3zOR0/7RB8Epa8stuidcg=)
2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: vxaqD429klEPt03aXXniKGxzQoHI4Ar9F2T3pRAzV/Y=)
3: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: 8q9qY1jwvFtQbwITcfKPjd5to6+hKyXHhKwLIwQFKSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:6d:ff:7d:9c:4c:5f:2c:cf:37:45:b0:21:9b:fe:cd:35:29:5b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71
Validity
Not Before: Feb 26 05:08:54 2026 GMT
Not After : Feb 27 07:55:54 2026 GMT
Subject: CN=4A71C1B28DBC2BA5A0173C88A093D2811BC15FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:be:ae:4a:e8:eb:53:84:f8:76:cb:ce:3d:
27:66:3f:2b:4a:47:5d:f0:c7:ea:ae:0c:11:02:1f:
93:cf:ba:d1:d4:85:2e:b6:9a:43:a0:b3:48:ea:29:
a1:4b:4c:f1:43:60:46:b9:6c:03:e1:ab:c6:cf:03:
59:a4:92:c0:81:fd:92:35:5f:38:c9:ce:bb:5d:53:
34:cc:4e:ac:ac:6f:4e:00:af:d2:a0:bb:d4:5d:42:
86:cf:a4:f2:19:eb:54:9d:2b:8a:87:be:fc:d0:a4:
ee:16:ad:9a:73:a6:2b:fc:94:8f:75:2f:d7:1c:ae:
7a:d9:9e:4c:2a:dd:f9:c4:21:fe:a1:80:1c:fd:53:
04:ee:5f:3f:b7:5f:f8:db:22:f7:ac:c9:8e:6f:f9:
f9:c0:56:1d:e8:27:35:82:b5:3f:fe:78:b0:c8:dc:
d0:86:e8:c0:45:38:41:82:d5:c2:ee:41:9f:10:97:
23:1a:b3:20:da:d9:c0:6b:6e:f1:9a:74:2a:0e:53:
3f:1d:da:3f:ae:ee:ff:b7:0b:c6:b2:be:21:ca:0e:
52:f2:6f:84:51:3f:ed:a9:5b:29:a4:3a:b5:47:b4:
05:eb:c3:66:82:c3:61:ba:cb:3e:77:1e:01:9c:69:
1f:3c:4a:74:4b:ba:de:7a:33:33:5e:7e:27:a0:d2:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:71:C1:B2:8D:BC:2B:A5:A0:17:3C:88:A0:93:D2:81:1B:C1:5F:BB
X509v3 Authority Key Identifier:
keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:47:98:dd:f3:88:0d:3d:01:75:ee:a4:11:2b:df:c7:ca:0d:
69:0b:aa:79:f0:03:55:13:d2:51:36:75:8a:28:91:91:20:47:
06:5e:bf:e8:36:e6:24:53:1e:a9:16:01:aa:f9:3c:ac:c2:81:
71:84:6e:8b:e3:ce:8e:73:38:4d:04:ce:73:19:cf:aa:ea:2d:
e6:b4:56:40:b3:a5:9f:a7:2b:dc:8c:82:30:3f:39:6b:b2:f1:
fb:99:bb:a5:14:eb:44:86:de:8f:a6:98:3b:17:f6:58:9e:8b:
25:bf:02:15:35:0b:e6:8c:ca:47:49:44:ea:14:ba:b9:09:5c:
32:28:26:c8:d4:22:58:fb:a6:b4:5a:b6:65:ee:08:2a:e9:ca:
41:72:49:24:bb:3a:c5:21:dd:c4:8b:20:94:61:ad:bd:bb:7d:
4b:4e:1c:cc:d4:04:55:0d:5c:82:17:61:af:9b:87:15:90:10:
14:47:98:78:3f:2a:45:3b:eb:cf:6f:e0:a7:b4:39:83:0d:36:
98:02:7d:9f:02:00:48:42:ad:11:f6:cb:22:e6:6b:86:e5:57:
46:ec:73:da:4b:51:cc:9d:3e:e1:a5:af:6a:40:1a:3c:6e:db:
bb:4f:79:3f:1f:bb:26:b0:79:eb:33:59:4a:9e:6f:65:b2:33:
6e:e9:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:32:25 2026 by rpki-client