Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: Dex4EP2NX9VROaDyVb4rw92LG0YJnIBDrwVTIEaQS5E=
Subject key identifier: 18:4A:01:A9:E4:CF:18:B8:37:B0:62:B0:54:B0:87:FF:E1:4D:3A:84
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 019C6E7A1626F53B284E7F3E47CC75A94D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 0A36
Signing time: Wed 18 Feb 2026 02:00:20 +0000
Manifest this update: Wed 18 Feb 2026 02:00:20 +0000
Manifest next update: Thu 19 Feb 2026 02:00:20 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: 4R2+4q7e+DioyskIXX2RpKV3MsNk+0WSidCzBCw28oA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6e:7a:16:26:f5:3b:28:4e:7f:3e:47:cc:75:a9:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Feb 18 02:00:20 2026 GMT
Not After : Feb 19 02:00:20 2026 GMT
Subject: CN=184a01a9e4cf18b837b062b054b087ffe14d3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:0c:c8:36:33:0e:a1:f1:17:91:4e:27:3c:
0f:c7:24:97:cd:18:ea:eb:d4:26:ec:3d:bd:28:ed:
fe:ea:1d:83:24:be:22:59:84:ad:04:ef:2e:fa:5d:
00:98:1b:a9:80:3f:9b:d8:7f:fd:6b:53:be:b2:48:
44:25:d9:3a:56:69:c9:a3:b9:e3:24:38:fd:3e:88:
3f:71:1f:88:92:84:7c:1a:2b:df:3e:aa:bd:1b:39:
93:28:ab:52:1a:8e:60:c3:12:5c:7d:b6:be:71:a3:
c1:95:de:43:a2:b8:9e:b5:4f:c3:99:a4:9b:9a:b9:
df:96:ae:26:f3:3e:3e:30:05:0b:b9:6d:a1:31:ec:
21:5d:06:3d:cc:5a:59:d2:a2:38:b1:d1:ce:65:4e:
3a:c6:b5:29:7f:38:4d:8f:54:9a:e1:0f:9e:d0:7a:
80:43:61:11:d8:9c:33:53:7a:b6:66:51:dd:3a:78:
fd:b0:f5:64:c7:76:97:75:a5:0c:6c:d7:72:a8:42:
d4:a6:a2:c7:c6:fc:29:28:07:00:62:20:27:95:4e:
a8:29:44:fa:96:c2:17:96:04:bc:b3:e8:88:30:1a:
e9:e5:b7:8c:01:4d:8f:44:d3:77:ca:11:59:55:f0:
cc:52:85:54:65:1a:f3:8c:bf:b8:3f:c3:f3:11:c3:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:01:A9:E4:CF:18:B8:37:B0:62:B0:54:B0:87:FF:E1:4D:3A:84
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:42:8f:bf:11:32:a9:0f:00:b3:d0:b8:6b:38:aa:27:42:
17:1b:36:81:41:53:06:38:c7:e1:c8:58:23:0a:43:dc:89:ee:
c7:11:ff:f4:67:d7:0f:7f:63:4f:48:e5:87:ae:21:59:fd:28:
1b:15:62:ff:fe:16:0d:20:3b:15:16:67:33:52:a0:1e:6d:da:
a5:7f:43:1e:31:4f:9c:0e:d8:ab:1f:2a:01:55:43:e4:6d:d4:
8e:29:91:11:ef:2d:87:ff:e3:7b:4f:a7:7b:d6:9b:70:e1:1b:
0b:ba:9f:51:4d:fb:00:4d:1d:1e:2a:e0:50:12:c4:c6:3c:82:
81:d7:18:b7:75:96:1e:b7:28:60:08:fe:62:09:53:c2:2e:1a:
99:1a:3f:79:0a:e0:b6:16:d7:70:f8:46:29:73:dc:c8:76:ad:
92:d8:4c:14:f1:20:fe:b0:14:c2:46:2a:86:80:2f:c7:b8:32:
c3:8d:4f:52:5d:11:0c:a3:68:a9:7a:62:a1:c2:98:cf:b7:7b:
49:3e:0b:47:e5:ec:67:5e:bf:2d:8e:d9:eb:e8:94:94:fe:46:
b8:e7:9f:a7:c8:d1:e5:0c:aa:03:53:f4:e7:8c:df:94:17:a8:
bf:a6:b7:10:33:a5:05:03:cf:8f:58:94:ed:59:66:12:42:f1:
6a:ce:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:08 2026 by rpki-client