Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json)
Hash identifier: q0RYvDlE08Z5yXaTn1tSYwn1Oqt21ScVkwTb+rYRu60=
Subject key identifier: DD:7D:7E:6F:8B:FF:43:85:9C:A0:31:C1:CE:38:7E:35:A7:0B:37:55
Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Certificate serial: 019D763324F56F849BEC6B41EFCA0B2B7053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
Manifest number: 07B9
Signing time: Fri 10 Apr 2026 07:02:36 +0000
Manifest this update: Fri 10 Apr 2026 07:02:36 +0000
Manifest next update: Sat 11 Apr 2026 07:02:36 +0000
Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: XSQGUiHfb7LjFEbooTXSyENOt5WfaU75vsZbUghtUC0=)
2: pDLuqrMTiYnndul8__rNpmENW8w.roa (hash: dtdLEtRi5z1XMEhrlW7Gcgyf8VOzvZLXKWQl6l7zHXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:33:24:f5:6f:84:9b:ec:6b:41:ef:ca:0b:2b:70:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2
Validity
Not Before: Apr 10 07:02:36 2026 GMT
Not After : Apr 11 07:02:36 2026 GMT
Subject: CN=dd7d7e6f8bff43859ca031c1ce387e35a70b3755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:f1:85:c4:91:87:fe:c8:9b:3e:70:14:02:
90:a4:d7:f4:38:8b:52:da:fc:1d:c9:7e:4f:a4:ae:
14:05:1a:a6:51:68:4d:ba:f0:7c:21:a8:ac:59:2d:
24:01:79:ca:cc:74:b4:37:22:dd:f7:67:62:9f:77:
32:6d:7a:00:c0:d4:58:f7:8c:fc:71:6a:70:60:09:
23:2f:7e:15:1c:3c:95:7c:62:23:a0:94:b1:1a:d3:
2e:f2:21:5c:0f:65:b0:5b:11:96:02:13:ec:4c:9f:
12:b6:7b:f4:8a:3d:db:ca:7c:7f:91:2f:f8:9f:72:
ab:af:65:ea:5a:e9:6d:b4:f9:87:d6:ae:99:84:00:
9f:42:19:bd:63:a6:69:a0:46:43:59:fe:cb:34:b5:
bd:9a:6a:17:bd:66:55:be:f7:d6:1d:d2:96:ff:cf:
1b:46:aa:a7:32:56:33:8b:a9:26:89:b2:90:34:9f:
7a:48:d8:b9:b0:f1:1d:6a:2a:ea:07:62:bc:33:d5:
1c:3a:1d:ad:38:80:0b:98:ff:20:f7:43:61:88:79:
1a:cc:e3:72:f0:71:78:df:60:ab:4b:4f:b6:2a:0f:
a8:c8:cd:3f:df:af:a6:47:d1:92:04:9e:07:df:f5:
2e:7c:f4:24:ca:62:1a:c6:24:7c:81:44:e2:88:bf:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:7E:6F:8B:FF:43:85:9C:A0:31:C1:CE:38:7E:35:A7:0B:37:55
X509v3 Authority Key Identifier:
keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:39:75:09:3e:ed:ee:50:ac:d0:23:33:59:51:69:6b:db:3e:
14:74:66:77:4b:02:5e:47:13:d6:4e:77:a5:98:2f:5b:7c:88:
42:a2:d1:2e:8e:fa:7d:29:3e:60:6c:3a:68:7b:33:8f:a7:a5:
5d:0b:b4:9d:67:cc:b9:94:b7:1c:0c:e4:ca:9d:25:c6:95:59:
bf:19:be:f2:25:d1:d6:cb:b5:c2:7e:b2:2f:13:3f:31:b1:07:
ab:07:e8:ed:6b:32:15:a4:57:f0:89:34:e1:cc:50:46:39:0f:
18:a7:ff:7d:a1:62:1a:ae:c9:25:ce:d2:19:b0:a6:e4:5b:7c:
53:bb:fe:41:72:92:b2:7c:f3:95:56:17:51:3e:75:b9:0f:18:
fd:57:c8:31:03:b1:9a:10:37:80:44:13:07:59:69:fd:76:dc:
72:0c:56:ac:85:9e:f1:2a:b4:6e:e4:cd:e5:ca:d7:fd:21:b2:
49:8b:fd:30:67:12:42:fc:c6:a6:8a:81:69:8d:c4:66:09:09:
ef:7f:86:79:0c:ee:26:bc:9f:01:2f:83:a3:22:63:96:94:5b:
c5:95:f4:a8:55:b8:48:c8:2d:5b:ea:4e:2f:68:bb:f9:e6:8c:
c0:c3:c2:f1:3f:05:d4:57:f9:00:60:53:79:f7:24:f6:b8:5a:
12:cb:3b:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ12MyT1b4Sb7GtB78oLK3BTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4
NWNmYzIwHhcNMjYwNDEwMDcwMjM2WhcNMjYwNDExMDcwMjM2WjAzMTEwLwYDVQQD
EyhkZDdkN2U2ZjhiZmY0Mzg1OWNhMDMxYzFjZTM4N2UzNWE3MGIzNzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUrxhcSRh/7Imz5wFAKQpNf0OItS
2vwdyX5PpK4UBRqmUWhNuvB8IaisWS0kAXnKzHS0NyLd92din3cybXoAwNRY94z8
cWpwYAkjL34VHDyVfGIjoJSxGtMu8iFcD2WwWxGWAhPsTJ8Stnv0ij3bynx/kS/4
n3Krr2XqWulttPmH1q6ZhACfQhm9Y6ZpoEZDWf7LNLW9mmoXvWZVvvfWHdKW/88b
RqqnMlYzi6kmibKQNJ96SNi5sPEdairqB2K8M9UcOh2tOIALmP8g90NhiHkazONy
8HF432CrS0+2Kg+oyM0/36+mR9GSBJ4H3/UufPQkymIaxiR8gUTiiL++twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN19fm+L/0OFnKAxwc44fjWnCzdVMB8GA1UdIwQY
MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct
NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2
LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTl1CT7t
7lCs0CMzWVFpa9s+FHRmd0sCXkcT1k53pZgvW3yIQqLRLo76fSk+YGw6aHszj6el
XQu0nWfMuZS3HAzkyp0lxpVZvxm+8iXR1su1wn6yLxM/MbEHqwfo7WsyFaRX8Ik0
4cxQRjkPGKf/faFiGq7JJc7SGbCm5Ft8U7v+QXKSsnzzlVYXUT51uQ8Y/VfIMQOx
mhA3gEQTB1lp/XbccgxWrIWe8Sq0buTN5crX/SGySYv9MGcSQvzGpoqBaY3EZgkJ
73+GeQzuJryfAS+DoyJjlpRbxZX0qFW4SMgtW+pOL2i7+eaMwMPC8T8F1Ff5AGBT
efck9rhaEss7ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:40:32 2026 by rpki-client