Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File: FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier: oZqB9MwRCuEzXLWFeEzhGjggMVbG7Y2OJ7UBd5zzu24=
Subject key identifier: 94:F7:E0:47:C1:64:83:07:C8:A4:62:9E:EE:0D:CA:30:76:B2:DD:D9
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 019D19B60F80F544F2710EC2B3EFC7D8C5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number: 187E
Signing time: Mon 23 Mar 2026 08:00:55 +0000
Manifest this update: Mon 23 Mar 2026 08:00:55 +0000
Manifest next update: Tue 24 Mar 2026 08:00:55 +0000
Files and hashes: 1: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: BXn985NR4ViaU30KiQ7x63RLUhHjPz4lDq2ZcdvEOFA=)
2: RXspwIUrgHZfrSVCO63AFZW1IxY.roa (hash: 2OggZdJRXeMt/msbNLPkl5fnqJJuk9plsaJeWQW6pRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:b6:0f:80:f5:44:f2:71:0e:c2:b3:ef:c7:d8:c5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Mar 23 08:00:55 2026 GMT
Not After : Mar 24 08:00:55 2026 GMT
Subject: CN=94f7e047c1648307c8a4629eee0dca3076b2ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:95:9d:a8:4e:3e:ac:bb:63:16:07:2d:ce:
92:9a:ab:aa:50:59:84:44:98:42:ad:59:bb:1f:4e:
49:56:0a:74:ed:12:5b:be:9d:a5:47:6b:39:66:72:
e5:ca:bb:35:67:64:62:45:34:da:85:17:e6:e0:d6:
10:e9:3f:50:cd:0b:83:d4:19:55:02:b7:75:2d:c3:
05:fb:55:1d:3a:eb:71:ab:c6:1e:d6:20:fa:ad:a3:
01:85:2b:78:16:6a:28:9d:d3:cb:d0:59:14:14:c9:
93:41:cb:58:fd:e0:59:32:95:97:73:d0:8f:6b:9b:
3a:70:59:40:e6:24:29:5a:46:13:9a:3d:87:ad:05:
05:5d:7d:d4:e1:e3:61:00:20:23:72:ad:c3:e7:43:
ce:a3:84:4b:8c:24:af:62:10:ed:c2:a0:31:f1:53:
c8:59:54:b5:38:c9:9f:24:06:99:94:e2:bc:fa:54:
81:04:8f:c5:fa:d1:cd:8e:fe:9c:49:99:37:bc:19:
5e:78:bf:d6:4d:89:aa:36:94:5c:79:9e:39:92:43:
9b:58:42:f5:bb:68:b0:ae:6c:3f:71:01:56:99:27:
47:db:41:c0:d6:ee:06:a7:4d:4e:17:66:30:b1:38:
e4:f1:56:39:b6:67:a4:01:58:60:ce:d3:d2:df:64:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:E0:47:C1:64:83:07:C8:A4:62:9E:EE:0D:CA:30:76:B2:DD:D9
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:8f:f7:1f:84:d1:8b:16:e3:da:82:f1:a5:4c:32:6e:1a:
9a:d7:a4:c3:4a:55:ad:29:27:84:fb:2e:71:86:79:3d:77:49:
53:1c:97:3c:5b:d3:fb:52:2a:7f:bc:27:db:ad:3c:ec:9a:44:
7b:d7:13:79:46:ad:75:91:d3:15:e6:8f:90:58:a7:d8:d5:52:
70:bc:05:e5:3c:4e:ea:73:df:73:a4:53:1d:b2:aa:83:a6:e9:
4e:d9:88:11:9f:d5:ae:23:af:01:b2:22:f9:bd:05:8f:fb:e8:
42:5b:93:58:1a:6d:52:7a:f6:05:33:dc:4d:11:9f:92:29:e6:
f8:2e:37:00:01:b6:c3:a8:07:ed:c6:91:1c:4d:f1:e2:d2:85:
db:b7:ef:c4:35:71:a8:d4:9c:61:1a:a3:fa:f2:48:05:fa:4c:
d3:87:5b:13:0f:0b:04:d3:4a:95:1f:93:70:33:f9:e5:5d:7b:
bc:6b:ec:2f:9b:20:99:8c:d8:8c:76:3f:12:d1:a8:50:f2:33:
13:69:ba:e3:e9:4f:04:03:5e:20:aa:1e:94:a4:a9:ec:9b:bd:
f4:ed:28:8a:27:10:ec:a3:09:5c:07:1a:32:c3:6b:b3:a7:b0:
50:e2:12:ea:17:50:a8:dc:f5:52:4b:0b:61:77:1b:6e:ef:d7:
17:38:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:17 2026 by rpki-client