Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier: rCBrRGwbCTsd1tLkA17fBGkX270JrSZ12zMgP4/HZbg=
Subject key identifier: 06:86:F2:AE:FC:94:00:57:7A:B8:85:CC:ED:AD:44:00:56:83:96:21
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer: /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial: 442188A10A52FA0918F6456A4607337C52BA888A
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number: 02ED
Signing time: Thu 26 Feb 2026 20:16:23 +0000
Manifest this update: Thu 26 Feb 2026 20:11:21 +0000
Manifest next update: Fri 27 Feb 2026 23:36:21 +0000
Files and hashes: 1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: 2ABM6GQPz0Kb6xIiVSrnLpbh5BjG9tLUsRQalxzFeD4=)
2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:21:88:a1:0a:52:fa:09:18:f6:45:6a:46:07:33:7c:52:ba:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Validity
Not Before: Feb 26 20:11:21 2026 GMT
Not After : Feb 27 23:36:21 2026 GMT
Subject: CN=0686F2AEFC9400577AB885CCEDAD440056839621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:69:0e:70:fe:1e:eb:43:20:58:0d:cf:dc:
4b:91:fb:56:82:b9:c0:95:82:de:e2:34:9b:c9:b3:
2d:a9:da:d0:15:f9:54:86:22:8f:3a:4b:3a:3e:37:
b7:4e:6b:78:a4:52:52:fa:52:9a:b2:43:26:0f:ae:
72:78:c0:8b:9d:51:81:28:e1:e8:f2:83:c7:83:50:
96:cd:38:a5:fa:5f:e5:94:c9:98:04:60:65:d9:8d:
85:31:aa:66:78:8d:36:e1:77:a2:06:5e:ce:78:7f:
da:13:9b:53:87:53:73:ae:30:c0:b0:8e:59:e9:25:
fd:e2:c8:5c:27:5e:7f:b9:03:f7:f2:14:fe:f3:61:
89:73:ab:9f:b3:17:3f:e8:8a:4e:b6:ba:fb:5e:ae:
85:ba:6c:18:52:8c:4d:2c:14:2c:9a:a2:ba:93:1c:
51:66:da:50:0e:2d:e4:2e:51:88:65:a7:46:5e:86:
63:bd:f0:c6:2a:a4:f3:45:be:11:e6:b9:f4:a0:63:
a9:51:ee:e9:a2:e1:e1:0a:67:0f:0f:61:13:b2:6d:
14:85:e3:4f:0e:ce:a1:0b:6d:90:5f:25:d4:95:19:
1c:96:90:92:4d:4c:ea:19:90:8e:bb:36:c7:ef:f7:
a1:fc:db:09:be:0a:a3:26:f1:78:05:a1:47:20:55:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:86:F2:AE:FC:94:00:57:7A:B8:85:CC:ED:AD:44:00:56:83:96:21
X509v3 Authority Key Identifier:
keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ca:d9:9f:10:5b:0b:b3:34:76:12:90:43:74:bb:b2:31:df:
28:d1:9b:c4:49:33:e1:8e:0d:73:2e:55:a6:f0:71:54:2b:11:
00:84:37:78:98:b5:6e:32:b7:d2:5c:a1:ac:a4:66:9d:ff:b3:
35:91:19:4d:1f:c0:cc:66:f7:a3:67:3d:7a:14:8b:47:12:eb:
12:ea:5e:8f:1c:f1:ac:e2:b9:89:d6:3a:dd:12:41:1e:5b:96:
8e:40:49:e4:6e:a3:37:e3:e1:8f:47:77:d3:3d:83:e7:01:92:
e9:ba:46:4f:aa:e1:1f:0f:60:d3:de:89:70:b2:61:71:2c:00:
33:60:65:5c:96:b3:74:c7:8c:c8:41:2e:67:0d:42:53:a0:fe:
56:82:29:89:af:d0:9a:a3:4f:47:22:e6:31:e4:a3:c3:d1:dc:
d8:0e:54:21:bc:29:97:15:57:1d:3f:68:3f:94:f9:ab:0c:54:
df:c0:e3:74:7e:ad:31:98:0b:fd:e3:ca:f9:1e:79:58:bc:b6:
45:3d:05:0a:0a:03:1d:33:dd:8a:2a:f5:8c:a5:03:29:b6:ac:
7c:88:42:8d:16:b5:d0:33:00:42:e0:5f:42:8c:e4:66:0f:89:
75:dd:07:63:82:b9:26:78:d9:dc:df:15:ed:d4:e5:c8:b4:65:
e9:c3:f0:41
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIURCGIoQpS+gkY9kVqRgczfFK6iIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD
NkJBNkE0MjAeFw0yNjAyMjYyMDExMjFaFw0yNjAyMjcyMzM2MjFaMDMxMTAvBgNV
BAMTKDA2ODZGMkFFRkM5NDAwNTc3QUI4ODVDQ0VEQUQ0NDAwNTY4Mzk2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmrWkOcP4e60MgWA3P3EuR+1aC
ucCVgt7iNJvJsy2p2tAV+VSGIo86Szo+N7dOa3ikUlL6UpqyQyYPrnJ4wIudUYEo
4ejyg8eDUJbNOKX6X+WUyZgEYGXZjYUxqmZ4jTbhd6IGXs54f9oTm1OHU3OuMMCw
jlnpJf3iyFwnXn+5A/fyFP7zYYlzq5+zFz/oik62uvteroW6bBhSjE0sFCyaorqT
HFFm2lAOLeQuUYhlp0ZehmO98MYqpPNFvhHmufSgY6lR7umi4eEKZw8PYROybRSF
408OzqELbZBfJdSVGRyWkJJNTOoZkI67Nsfv96H82wm+CqMm8XgFoUcgVawJAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUBobyrvyUAFd6uIXM7a1EAFaDliEwHwYDVR0j
BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv
MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG
NEM2QkE2QTQyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2VjYjM0
YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAvMTBCNTEzMzlDNUJDQ0U3MDlD
QjZENkExNDkyMUFBRjRDNkJBNkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAXK2Z8QWwuzNHYSkEN0
u7Ix3yjRm8RJM+GODXMuVabwcVQrEQCEN3iYtW4yt9JcoaykZp3/szWRGU0fwMxm
96NnPXoUi0cS6xLqXo8c8aziuYnWOt0SQR5blo5ASeRuozfj4Y9Hd9M9g+cBkum6
Rk+q4R8PYNPeiXCyYXEsADNgZVyWs3THjMhBLmcNQlOg/laCKYmv0JqjT0ci5jHk
o8PR3NgOVCG8KZcVVx0/aD+U+asMVN/A43R+rTGYC/3jyvkeeVi8tkU9BQoKAx0z
3Yoq9YylAym2rHyIQo0WtdAzAELgX0KM5GYPiXXdB2OCuSZ42dzfFe3U5ci0ZenD
8EE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:11 2026 by rpki-client