Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
File: 2f-eF7m0GYipJZnLyroDkf-2GiA.mft (raw, json)
Hash identifier: upupSFuZfNNK9hqPVz1MRklhnaQoQZ4g/FD46DX8Xrc=
Subject key identifier: 7B:86:E0:3B:83:05:03:E3:49:E1:BB:3C:50:8A:C1:BC:40:37:D6:20
Authority key identifier: D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
Certificate issuer: /CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Certificate serial: 019C5484521B3F7012C27A75E14D898677E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
Manifest number: 0CC1
Signing time: Fri 13 Feb 2026 01:01:23 +0000
Manifest this update: Fri 13 Feb 2026 01:01:23 +0000
Manifest next update: Sat 14 Feb 2026 01:01:23 +0000
Files and hashes: 1: 2f-eF7m0GYipJZnLyroDkf-2GiA.crl (hash: 0hM45wyJZ7mpjQHgCZNbBiKFYvcZQFMbANVYS4sNctc=)
2: CXGcHwGiTiAFOY7NjCNCxVUi-RQ.roa (hash: zsZdBBsP2qLk8Wzoqm4TOlRxt7Nv3YTcIgc+45WHFnM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:54:84:52:1b:3f:70:12:c2:7a:75:e1:4d:89:86:77:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ff9e17b9b41988a92599cbcaba0391ffb61a20
Validity
Not Before: Feb 13 01:01:23 2026 GMT
Not After : Feb 14 01:01:23 2026 GMT
Subject: CN=7b86e03b830503e349e1bb3c508ac1bc4037d620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:4b:65:27:77:d1:9f:f4:8c:b7:24:eb:9f:
20:0a:ae:ee:1f:12:f0:94:e3:db:82:5c:19:b6:e6:
39:05:76:ee:eb:47:6b:07:c4:2a:f9:98:e9:de:23:
57:ca:71:77:c3:55:47:00:31:da:18:e2:10:c2:c5:
d0:dd:3e:60:d9:b1:46:e6:00:73:bb:df:c4:7c:20:
92:39:d3:90:f0:b0:30:f4:83:98:c5:76:ea:6e:d5:
c4:a5:3d:65:da:f6:05:d3:c8:0d:5a:6f:e7:ef:1c:
3d:11:12:6d:7b:a6:16:45:3b:e9:e0:33:c5:78:54:
cd:2a:82:e1:98:cf:ee:d7:35:51:f5:b2:b3:34:8e:
f7:ae:6a:ad:10:02:50:60:aa:c3:73:43:00:d3:78:
ce:9a:7a:89:9d:1d:33:e2:a9:c0:29:9e:c0:50:9a:
fc:7d:67:c7:a2:52:85:3a:e0:09:54:2b:8d:99:a4:
e7:f1:cd:f7:d3:bc:4d:9f:c0:80:c6:9c:75:b6:72:
60:ab:39:c3:de:0d:74:19:95:e8:c7:6b:99:ba:50:
1e:f2:1b:21:97:84:fa:80:27:78:cd:16:88:b8:c3:
3b:19:ab:60:8b:20:13:9b:fa:d6:79:5f:d8:cc:bb:
df:73:95:0e:b9:01:ed:3f:45:9d:18:a7:e1:1a:c1:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:86:E0:3B:83:05:03:E3:49:E1:BB:3C:50:8A:C1:BC:40:37:D6:20
X509v3 Authority Key Identifier:
keyid:D9:FF:9E:17:B9:B4:19:88:A9:25:99:CB:CA:BA:03:91:FF:B6:1A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f-eF7m0GYipJZnLyroDkf-2GiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/49d859-610a-4242-8ddf-37a0e474ab15/1/2f-eF7m0GYipJZnLyroDkf-2GiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:fd:f7:7c:3e:9f:be:a0:5d:75:31:81:d8:32:c9:14:83:
06:d4:71:9a:1e:6e:2e:52:fd:65:98:f8:9e:27:90:2f:26:c3:
06:cd:02:81:ab:95:7b:bb:84:6b:4c:37:b5:39:8a:8a:21:04:
70:4b:4a:9a:85:4d:2c:f2:c1:36:eb:01:cc:ef:27:ff:50:5f:
60:d2:5b:a1:7c:1b:28:ff:56:34:a7:cd:f1:38:8d:a4:ed:04:
b9:d2:6a:f4:a3:4e:05:fa:77:da:5e:0d:af:38:17:3c:ee:69:
21:3f:ef:f3:2a:72:d2:e8:0b:51:36:1b:d8:d0:4a:5f:24:93:
cb:37:78:15:95:7d:6f:df:80:7b:bd:59:83:df:ed:68:f3:60:
aa:62:33:9d:1d:ae:b8:5c:02:7c:e6:69:54:02:a6:e5:b0:2d:
a8:27:31:c4:9d:ae:9e:2c:fe:2c:0e:3a:36:ad:f2:91:b9:06:
26:58:c4:60:a6:2a:dd:bc:b1:49:c3:01:6d:78:f0:af:59:f0:
84:38:17:a3:3b:62:53:16:76:d8:12:77:ee:5e:9e:02:72:09:
f5:71:eb:e3:65:d0:80:e2:24:f8:f5:5b:6d:d3:16:b1:c4:5b:
40:62:81:cf:02:65:d9:cf:89:aa:3e:1e:5d:50:9d:fc:e3:91:
3f:11:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:21 2026 by rpki-client