Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json)
Hash identifier: 4drTHxWt0uiwKgJ6BztAp3ocNDA51GbQ/LSWR3WZMks=
Subject key identifier: 8A:98:51:E9:20:57:4C:52:F0:A8:7C:C7:14:C8:34:10:29:D5:F3:15
Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Certificate serial: 5E5F9A7A7C798741F9516455385BE8FE392D2270
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
Manifest number: 02E9
Signing time: Thu 26 Feb 2026 05:25:36 +0000
Manifest this update: Thu 26 Feb 2026 05:20:34 +0000
Manifest next update: Fri 27 Feb 2026 09:06:34 +0000
Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=)
2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: lA2sNzVpLx4wm49SxPaqaH1O/6FOc+/zM8QHFkFnLCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5f:9a:7a:7c:79:87:41:f9:51:64:55:38:5b:e8:fe:39:2d:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439
Validity
Not Before: Feb 26 05:20:34 2026 GMT
Not After : Feb 27 09:06:34 2026 GMT
Subject: CN=8A9851E920574C52F0A87CC714C8341029D5F315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:7b:75:a5:60:0d:ad:10:b7:fa:7b:30:bd:
ae:db:2f:dd:c8:d0:72:cc:fd:71:68:ca:3a:9f:da:
ae:9e:e8:0e:75:83:9e:fc:9b:cf:11:e5:f7:dd:6b:
2b:45:0c:7d:d7:8e:e5:6d:4c:53:02:68:90:44:7b:
13:c2:81:26:36:64:b0:2d:5b:0b:88:c3:84:2e:35:
03:0d:a8:de:e4:d6:70:be:89:cc:f5:db:19:2e:6d:
3e:9e:b3:84:a5:5f:fd:cf:e7:1f:31:c0:63:be:36:
20:c3:e1:72:22:0c:98:9b:c5:8d:0b:97:77:09:0a:
52:ae:75:66:b4:bc:be:94:c9:8c:fc:03:1a:d9:79:
e7:f9:e1:d7:50:65:3d:c6:1e:14:08:42:6e:0b:20:
c7:89:c9:56:f3:83:6e:00:8c:9a:b6:d3:c3:ab:43:
50:15:58:c7:56:64:3d:95:1a:18:b6:42:5c:af:86:
60:c4:9f:f9:96:f9:31:71:92:e6:b4:53:61:98:4a:
a2:b6:33:10:c9:c2:16:0b:9b:b1:65:8c:78:c2:3c:
15:a0:1d:21:7d:ca:5b:c9:b4:7d:45:88:cd:d3:73:
d6:a0:90:23:8d:f9:87:6b:c9:33:21:27:8e:c2:80:
4b:d6:08:ea:1e:50:f5:96:a1:61:d9:3b:45:fb:82:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:51:E9:20:57:4C:52:F0:A8:7C:C7:14:C8:34:10:29:D5:F3:15
X509v3 Authority Key Identifier:
keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c1:c9:19:f1:f6:57:41:c2:e2:2f:dd:ac:ff:a2:af:15:d1:
36:ac:5c:97:c6:94:e3:74:76:a7:ba:97:67:42:32:11:c4:72:
8e:0f:55:c5:eb:40:85:69:f3:26:74:81:4a:d3:cd:76:45:cc:
9e:ae:73:90:5d:c6:37:3d:ec:23:c8:cb:bb:99:40:31:a8:46:
98:85:b5:4c:9d:2e:55:3d:dc:46:7f:ec:83:03:b2:d0:17:03:
37:2d:a4:66:46:e9:45:2a:3d:95:a8:96:6c:2f:db:bd:94:85:
88:07:f1:44:d3:e3:3f:e8:1f:28:4f:5f:68:c4:94:e4:11:a5:
84:e3:7a:b0:6f:a0:c1:80:b4:4b:38:82:13:fa:c6:1d:c4:95:
10:21:8f:2d:17:a3:6f:e1:86:4d:74:f6:4b:71:0e:e5:6f:d0:
bb:6b:f4:23:ac:b8:e9:39:cf:06:f0:a3:94:bc:76:0b:5f:21:
b2:94:b7:ad:3f:b6:62:0b:f7:2c:8b:aa:6d:66:20:dc:90:c2:
9c:96:98:aa:a8:36:38:95:fe:1a:ae:13:4c:bb:3c:c8:5e:a9:
ef:f4:5b:99:59:02:59:43:de:6d:59:b7:e9:c0:a8:05:97:58:
fd:0a:8e:a6:c7:25:f8:b1:18:a6:1e:50:13:54:90:8a:a5:19:
fe:2a:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:03 2026 by rpki-client