Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
File: lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json)
Hash identifier: TxpQzb1lPtc0OBQh5e1yyDq1BTiymCP02ZDxGWxmWsU=
Subject key identifier: 8E:54:D5:07:1C:BF:60:F0:51:95:3E:16:E9:8B:41:A2:15:C3:10:2E
Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
Certificate issuer: /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Certificate serial: 019C8E05A9C35986AA5931CC968044F6866D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
Manifest number: 0558
Signing time: Tue 24 Feb 2026 05:01:01 +0000
Manifest this update: Tue 24 Feb 2026 05:01:01 +0000
Manifest next update: Wed 25 Feb 2026 05:01:01 +0000
Files and hashes: 1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: SwYO+upz7VZWpqjlo3TicjigaDtGDENo35qE8bgq8FQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:05:a9:c3:59:86:aa:59:31:cc:96:80:44:f6:86:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Validity
Not Before: Feb 24 05:01:01 2026 GMT
Not After : Feb 25 05:01:01 2026 GMT
Subject: CN=8e54d5071cbf60f051953e16e98b41a215c3102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:14:1a:3f:36:97:1f:bf:95:4d:2d:91:8b:41:
41:0a:70:1b:f1:c3:4e:e0:df:c0:09:fd:97:f1:23:
72:9d:8e:4f:a5:7c:30:80:c4:b2:71:16:6b:50:ec:
74:16:fe:b4:06:8a:b1:bf:28:8c:66:c8:7a:04:74:
39:2d:61:9c:56:54:ea:ee:95:9a:cc:2f:f2:e0:91:
cc:1b:f0:37:ee:ac:26:b0:5f:03:c7:0d:42:12:74:
1f:2b:57:45:88:88:4f:e9:2c:85:02:0f:29:45:2f:
1c:26:99:b9:a9:2f:9f:35:9e:b2:cd:29:b6:98:07:
26:ce:18:7c:8c:d3:c1:db:59:3f:3f:25:8e:6b:f2:
59:aa:5b:17:e7:d4:6e:5f:57:b2:8c:d6:e5:72:93:
1e:a6:43:b5:f2:76:a4:f7:cc:36:ec:5b:33:d5:52:
a8:ee:b8:1d:47:c4:f8:43:d0:e1:58:d2:13:73:49:
8f:9b:f7:a1:86:e4:6f:04:8e:e0:4a:6a:93:db:e2:
13:2d:f1:51:3c:ac:d7:3a:76:bd:2f:9c:df:17:c2:
52:5a:61:71:c0:87:a8:0a:29:e8:ff:3f:22:9a:9e:
ae:26:b6:5c:86:5d:8d:92:d0:b1:be:a5:35:64:ed:
f6:b6:e0:26:f5:2f:e2:d1:95:3a:0b:28:60:dc:66:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:54:D5:07:1C:BF:60:F0:51:95:3E:16:E9:8B:41:A2:15:C3:10:2E
X509v3 Authority Key Identifier:
keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d0:e3:49:3e:45:3e:08:32:f1:e0:26:5f:be:4f:06:a6:71:
b4:86:34:4b:60:bb:c5:52:0c:b1:c8:4d:6c:c2:e6:68:80:dc:
13:65:7e:da:38:95:20:ba:c0:df:ce:bb:2e:cf:20:79:c4:7d:
66:03:b8:8b:4f:80:4a:53:51:89:c7:b4:3f:53:19:68:34:73:
9b:6f:5f:20:9c:a9:fb:cb:8a:40:e2:af:4b:97:3e:bc:aa:7e:
c5:20:a1:b1:b5:c3:e7:17:dd:94:d8:1c:28:8e:51:c6:85:28:
f2:a3:bf:9a:74:6d:d5:75:39:f9:3e:5d:e5:dc:e6:c3:1d:3b:
ce:06:48:22:12:a6:56:7f:a3:ea:f3:c4:a9:03:0e:40:be:85:
a0:53:8b:63:d3:f1:93:6c:94:4d:d1:17:1e:31:09:aa:e1:22:
b2:d6:ba:e0:91:ea:67:2b:d6:1a:3f:bd:5e:3d:e1:b2:25:38:
87:6b:73:72:1b:29:ac:15:07:b9:10:8b:89:74:5b:07:4e:26:
e7:92:4b:91:d0:35:c0:86:30:18:6a:45:c4:0a:b1:3d:51:a7:
4f:a7:5c:17:c4:3f:5b:ac:9b:ee:62:32:0f:29:7a:25:04:7c:
c3:88:eb:5c:b5:ad:c1:0b:a6:fd:85:b9:e7:1d:89:fc:ee:2f:
ac:fd:22:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyOBanDWYaqWTHMloBE9oZtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDNjODUwOTBmOWNjMmUyMjlkMzhmZGVhYmFlNjI2NTA4
YmRlYjgwHhcNMjYwMjI0MDUwMTAxWhcNMjYwMjI1MDUwMTAxWjAzMTEwLwYDVQQD
Eyg4ZTU0ZDUwNzFjYmY2MGYwNTE5NTNlMTZlOThiNDFhMjE1YzMxMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RQaPzaXH7+VTS2Ri0FBCnAb8cNO
4N/ACf2X8SNynY5PpXwwgMSycRZrUOx0Fv60BoqxvyiMZsh6BHQ5LWGcVlTq7pWa
zC/y4JHMG/A37qwmsF8Dxw1CEnQfK1dFiIhP6SyFAg8pRS8cJpm5qS+fNZ6yzSm2
mAcmzhh8jNPB21k/PyWOa/JZqlsX59RuX1eyjNblcpMepkO18nak98w27Fsz1VKo
7rgdR8T4Q9DhWNITc0mPm/ehhuRvBI7gSmqT2+ITLfFRPKzXOna9L5zfF8JSWmFx
wIeoCino/z8imp6uJrZchl2NktCxvqU1ZO32tuAm9S/i0ZU6Cyhg3GbrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5U1Qccv2DwUZU+FumLQaIVwxAuMB8GA1UdIwQY
MBaAFJUDyFCQ+cwuIp04/eq65iZQi964MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUt
ZjBkZDg3OWFlNTNhLzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUtZjBkZDg3OWFlNTNh
LzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9DjST5F
Pggy8eAmX75PBqZxtIY0S2C7xVIMschNbMLmaIDcE2V+2jiVILrA3867Ls8gecR9
ZgO4i0+ASlNRice0P1MZaDRzm29fIJyp+8uKQOKvS5c+vKp+xSChsbXD5xfdlNgc
KI5RxoUo8qO/mnRt1XU5+T5d5dzmwx07zgZIIhKmVn+j6vPEqQMOQL6FoFOLY9Px
k2yUTdEXHjEJquEista64JHqZyvWGj+9Xj3hsiU4h2tzchsprBUHuRCLiXRbB04m
55JLkdA1wIYwGGpFxAqxPVGnT6dcF8Q/W6yb7mIyDyl6JQR8w4jrXLWtwQum/YW5
5x2J/O4vrP0ifA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:39 2026 by rpki-client