Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json)
Hash identifier: idR8Yu++/aHPo4vy+Afbb7zTCbt1bXaLRi5DWwageWM=
Subject key identifier: AC:AD:89:EA:B0:CA:BF:C2:19:EF:AA:54:8D:B4:4F:53:45:EF:28:FD
Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Certificate serial: 019D9404C64BDBEE75A37E3FBC832AFF2FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
Manifest number: 1785
Signing time: Thu 16 Apr 2026 02:00:33 +0000
Manifest this update: Thu 16 Apr 2026 02:00:33 +0000
Manifest next update: Fri 17 Apr 2026 02:00:33 +0000
Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: gYDPi4GhnkJ9boFkGyXFIPLJ2eD3J+JbYuqbDjQqizc=)
2: M_wYZNoIggWkJnIM6XvfidHolKY.roa (hash: EFTDpTat3ODzn/1H+OY3BBqxfsDk+P79i5ALHFGhTpo=)
3: bQp6UIfbTzW5AcQXknJHvnkzhQg.roa (hash: hPsgca8+uCeyeGUqGhR5eAAml/xZhMTXccnFrzec2lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:94:04:c6:4b:db:ee:75:a3:7e:3f:bc:83:2a:ff:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Validity
Not Before: Apr 16 02:00:33 2026 GMT
Not After : Apr 17 02:00:33 2026 GMT
Subject: CN=acad89eab0cabfc219efaa548db44f5345ef28fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:f1:7a:9f:8e:6f:e1:0d:04:48:75:85:cb:
10:a7:76:8f:b6:84:9c:b5:5e:5f:36:a9:38:62:12:
cc:d9:c6:89:dd:b0:a9:0a:7e:fe:07:19:1d:22:c7:
96:c5:58:cf:cb:92:0d:e6:21:01:27:5d:3c:ee:72:
43:2b:ae:76:9f:95:fa:36:85:a3:00:30:2a:fc:e6:
08:7e:40:60:9e:2d:e7:e9:0b:c9:90:d2:d7:55:be:
25:bb:05:72:ed:4a:e6:8b:df:fc:57:bb:d6:3c:38:
6f:7e:e1:19:4b:85:5a:e5:0b:04:97:28:a5:a1:2c:
56:81:04:32:9a:f5:3e:1c:10:67:89:84:7b:9d:4f:
5c:6c:fd:76:a6:c8:63:4e:f7:a5:77:1d:21:64:94:
ec:4d:42:cc:4f:03:4f:d8:ff:17:90:db:3f:51:35:
36:d6:61:b7:ca:e9:2b:8f:f9:ac:1e:e4:b2:06:99:
ca:6e:7b:58:18:3c:e5:52:de:76:b7:12:f3:92:68:
9c:11:e1:d6:a2:c7:4b:80:e0:4b:8e:a1:fd:1d:0f:
03:d4:32:67:ac:6c:78:17:87:66:2b:e4:43:35:2b:
f8:72:37:c8:69:d1:3b:35:5f:14:db:ed:92:bb:d3:
81:c2:38:80:6b:d3:0d:87:76:e9:84:e7:38:e1:3c:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:89:EA:B0:CA:BF:C2:19:EF:AA:54:8D:B4:4F:53:45:EF:28:FD
X509v3 Authority Key Identifier:
keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2d:9e:b2:97:ac:1b:b9:31:cf:e1:55:67:35:2f:27:2e:83:
e3:c3:b5:b3:b7:5b:cd:e3:dc:f0:1e:af:76:7b:c8:45:e1:6b:
e4:ea:a5:a0:08:32:60:c6:38:86:8d:75:3d:62:ce:43:ac:17:
62:c1:00:55:08:fe:84:24:34:8c:7d:5b:f1:af:14:96:56:1b:
29:f1:7e:b9:c2:b9:b0:37:41:52:f7:fe:9a:17:85:64:69:e1:
9e:0d:58:92:75:b0:8c:1f:50:14:ba:69:69:bf:29:07:33:42:
7f:d2:ba:d9:36:d6:77:7d:87:4b:f4:bc:92:5e:f3:f3:bd:b8:
9e:11:6c:f0:b6:01:79:68:4b:1d:71:9d:2e:b8:5b:78:db:d6:
d3:29:d2:19:29:a7:e6:46:dd:58:aa:58:f6:d8:c8:83:1b:dd:
a9:15:b1:e5:35:27:68:fb:84:84:eb:11:24:f8:f0:ee:66:f0:
fc:b0:c5:e4:8f:84:2a:ad:dc:10:3e:58:b5:b2:36:a7:10:77:
9b:0a:8c:6a:b4:2e:74:36:1e:e7:05:20:c5:82:04:ac:ec:df:
ed:25:fd:2a:3f:e8:3a:6a:87:76:de:76:09:dd:16:33:40:22:
eb:dd:53:9d:8d:0d:d4:d2:57:58:83:c4:48:56:81:c4:0d:29:
b9:61:50:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2UBMZL2+51o34/vIMq/y/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWNmMWFhYzIxYWE1ODIzYjAxOWRlOTFhZWVlYzIzZTNl
NTI2ZGIwHhcNMjYwNDE2MDIwMDMzWhcNMjYwNDE3MDIwMDMzWjAzMTEwLwYDVQQD
EyhhY2FkODllYWIwY2FiZmMyMTllZmFhNTQ4ZGI0NGY1MzQ1ZWYyOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDbxep+Ob+ENBEh1hcsQp3aPtoSc
tV5fNqk4YhLM2caJ3bCpCn7+BxkdIseWxVjPy5IN5iEBJ1087nJDK652n5X6NoWj
ADAq/OYIfkBgni3n6QvJkNLXVb4luwVy7Urmi9/8V7vWPDhvfuEZS4Va5QsElyil
oSxWgQQymvU+HBBniYR7nU9cbP12pshjTveldx0hZJTsTULMTwNP2P8XkNs/UTU2
1mG3yukrj/msHuSyBpnKbntYGDzlUt52txLzkmicEeHWosdLgOBLjqH9HQ8D1DJn
rGx4F4dmK+RDNSv4cjfIadE7NV8U2+2Su9OBwjiAa9MNh3bphOc44TzFVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKytieqwyr/CGe+qVI20T1NF7yj9MB8GA1UdIwQY
MBaAFNgc8arCGqWCOwGd6Rru7CPj5SbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYt
OWMwZGUzNjUyNzM4LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYtOWMwZGUzNjUyNzM4
LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci2espes
G7kxz+FVZzUvJy6D48O1s7dbzePc8B6vdnvIReFr5OqloAgyYMY4ho11PWLOQ6wX
YsEAVQj+hCQ0jH1b8a8UllYbKfF+ucK5sDdBUvf+mheFZGnhng1YknWwjB9QFLpp
ab8pBzNCf9K62TbWd32HS/S8kl7z8724nhFs8LYBeWhLHXGdLrhbeNvW0ynSGSmn
5kbdWKpY9tjIgxvdqRWx5TUnaPuEhOsRJPjw7mbw/LDF5I+EKq3cED5YtbI2pxB3
mwqMarQudDYe5wUgxYIErOzf7SX9Kj/oOmqHdt52Cd0WM0Ai691TnY0N1NJXWIPE
SFaBxA0puWFQnQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:22 2026 by rpki-client