Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: XI0M/SVWk7cyFw/YnSTWftUfSbkp2dmlw/gmShORjTY=
Subject key identifier: 7D:65:C8:A7:F5:53:70:08:6C:E3:56:AD:A2:F5:9D:B9:0D:3F:94:BA
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019D856DDD72156ACCFD1A39C76D56758D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0E2A
Signing time: Mon 13 Apr 2026 06:01:02 +0000
Manifest this update: Mon 13 Apr 2026 06:01:02 +0000
Manifest next update: Tue 14 Apr 2026 06:01:02 +0000
Files and hashes: 1: SV2RkPOuByS_r28T-8Z9LI6s33I.roa (hash: mWVfN5OIaVZHfY5wD08vtg6Nd4vEgRrrt33wmevn5GE=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: RKvsMitxJa7sUUIFHdfhYNBBv4b+bTxe5PMifj3CotM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:6d:dd:72:15:6a:cc:fd:1a:39:c7:6d:56:75:8d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Apr 13 06:01:02 2026 GMT
Not After : Apr 14 06:01:02 2026 GMT
Subject: CN=7d65c8a7f55370086ce356ada2f59db90d3f94ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:62:8a:b6:6f:ca:dd:cf:ec:32:9b:bf:98:
37:56:6d:fa:14:92:a7:7b:3c:83:03:d0:dc:83:51:
e6:b5:40:3b:86:15:64:5b:89:de:c3:6b:e5:44:37:
9b:63:1a:06:db:7c:93:2a:6c:7b:e3:38:23:a6:c1:
c6:ab:b9:83:bf:e2:4e:19:b3:1d:0b:2f:57:43:ec:
4f:2e:4d:ff:8f:dc:f7:c7:c5:7e:f0:37:a2:78:99:
0d:00:50:e3:40:37:39:3f:66:3c:c1:39:1f:f2:ec:
de:f8:68:c4:5d:37:df:00:a8:b8:a3:6d:8b:43:b7:
8e:79:c0:74:26:6c:80:3b:52:1e:9e:87:97:d8:f5:
c6:9a:7d:94:48:bc:ce:93:cf:5c:8e:9e:fd:6b:10:
2f:16:23:7a:25:7a:ab:92:e0:4a:47:77:b5:2b:0b:
09:7e:ea:76:ec:46:8f:71:d0:30:c6:7b:72:3c:fe:
3d:18:e4:5d:eb:1b:c5:88:b6:d7:73:93:03:4f:45:
a8:69:cf:79:2d:2a:44:fe:4b:d4:83:1e:aa:1c:07:
c3:02:36:d8:e9:e6:14:6e:6a:01:bb:fe:0c:5e:53:
b0:c0:93:ce:ec:44:1c:b9:c2:7a:cc:df:dc:3b:b2:
67:98:6a:3d:18:d7:8d:16:52:ec:9a:5b:7e:da:27:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:C8:A7:F5:53:70:08:6C:E3:56:AD:A2:F5:9D:B9:0D:3F:94:BA
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:da:da:e3:33:f4:9f:04:24:51:8e:25:b5:a3:7f:c9:14:
78:b4:3b:cd:ec:b5:7e:1c:2c:f7:24:72:3e:6d:a7:f2:00:98:
e5:57:b3:d6:ac:26:f7:d4:36:48:9d:0e:f9:67:00:47:2c:f8:
d3:ab:72:d3:f8:22:b8:e8:32:a1:46:c9:64:49:a5:0d:05:8a:
9f:aa:53:56:5b:d8:94:23:9e:e7:b2:40:77:41:c8:ae:ba:f2:
39:78:4e:19:9f:4a:bb:5c:86:b8:5f:00:1b:c5:49:2e:1a:3a:
d3:85:5d:59:54:58:b4:17:f4:a4:99:c8:e8:38:84:a6:db:f3:
16:71:b8:b8:52:cd:52:d3:a0:72:5e:83:1c:43:23:30:53:07:
89:0f:74:69:31:8a:f1:bc:27:60:94:9a:dd:b2:b8:ff:21:d9:
9d:24:40:eb:58:8b:13:5d:b3:40:f3:3d:6b:a2:c7:cc:14:f9:
f8:6f:45:2e:5c:06:f8:e1:c8:78:2e:1c:0c:f0:fe:bd:d5:ec:
a8:96:93:b4:ff:ae:e5:d2:c5:bd:da:db:cb:7d:e6:5c:46:c2:
13:aa:0c:b4:c2:fb:60:c4:59:84:cc:a4:72:26:7c:18:39:4e:
ea:56:76:02:c5:39:df:34:43:eb:19:01:48:c6:b2:dd:1b:b2:
e6:54:a6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Fbd1yFWrM/Ro5x21WdY0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWM2ZDA2OWQ4ZmI3MzJmNGZlOTJiNGUxM2NkN2RjNGQz
OTNhNDIwHhcNMjYwNDEzMDYwMTAyWhcNMjYwNDE0MDYwMTAyWjAzMTEwLwYDVQQD
Eyg3ZDY1YzhhN2Y1NTM3MDA4NmNlMzU2YWRhMmY1OWRiOTBkM2Y5NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApONiirZvyt3P7DKbv5g3Vm36FJKn
ezyDA9Dcg1HmtUA7hhVkW4new2vlRDebYxoG23yTKmx74zgjpsHGq7mDv+JOGbMd
Cy9XQ+xPLk3/j9z3x8V+8DeieJkNAFDjQDc5P2Y8wTkf8uze+GjEXTffAKi4o22L
Q7eOecB0JmyAO1IenoeX2PXGmn2USLzOk89cjp79axAvFiN6JXqrkuBKR3e1KwsJ
fup27EaPcdAwxntyPP49GORd6xvFiLbXc5MDT0Woac95LSpE/kvUgx6qHAfDAjbY
6eYUbmoBu/4MXlOwwJPO7EQcucJ6zN/cO7JnmGo9GNeNFlLsmlt+2icZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1lyKf1U3AIbONWraL1nbkNP5S6MB8GA1UdIwQY
MBaAFKasbQadj7cy9P6StOE819xNOTpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEt
YmZhMDNhNjY4NTc3LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jMDlmMDItNzUxMC00MmVhLWIyODEtYmZhMDNhNjY4NTc3
LzEvcHF4dEJwMlB0ekwwX3BLMDRUelgzRTA1T2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV/a2uMz
9J8EJFGOJbWjf8kUeLQ7zey1fhws9yRyPm2n8gCY5Vez1qwm99Q2SJ0O+WcARyz4
06ty0/giuOgyoUbJZEmlDQWKn6pTVlvYlCOe57JAd0HIrrryOXhOGZ9Ku1yGuF8A
G8VJLho604VdWVRYtBf0pJnI6DiEptvzFnG4uFLNUtOgcl6DHEMjMFMHiQ90aTGK
8bwnYJSa3bK4/yHZnSRA61iLE12zQPM9a6LHzBT5+G9FLlwG+OHIeC4cDPD+vdXs
qJaTtP+u5dLFvdrby33mXEbCE6oMtML7YMRZhMykciZ8GDlO6lZ2AsU53zRD6xkB
SMay3Ruy5lSmbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:29 2026 by rpki-client