Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File: QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier: dvF3E3jdzL2Ac/4WEhoY+1aGvSYCxLd9Hce0lzvuhNI=
Subject key identifier: FE:06:80:9A:4F:97:1A:A6:CD:92:1B:44:E4:EF:11:29:6C:CA:FF:0C
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer: /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial: 019B9177F0BB6525EDEC438DC8522F2B927D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number: 17B2
Signing time: Tue 06 Jan 2026 04:01:55 +0000
Manifest this update: Tue 06 Jan 2026 04:01:55 +0000
Manifest next update: Wed 07 Jan 2026 04:01:55 +0000
Files and hashes: 1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: 2RZrX+4s+4LgP8iZpcjT0AAl2RlGaZgZWDQOhblmrDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:91:77:f0:bb:65:25:ed:ec:43:8d:c8:52:2f:2b:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
Validity
Not Before: Jan 6 04:01:55 2026 GMT
Not After : Jan 7 04:01:55 2026 GMT
Subject: CN=fe06809a4f971aa6cd921b44e4ef11296ccaff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:0e:ca:c0:c0:0b:4e:b2:57:32:4f:2f:ea:
61:2a:5a:a6:3c:b9:5b:cc:c5:c1:cc:80:15:6a:80:
40:da:29:a0:c8:31:59:95:06:8e:ea:6b:19:47:28:
a0:ab:42:5c:dd:8f:d9:1a:a9:bd:01:db:f7:2a:04:
c5:32:4e:86:74:44:9c:28:2a:ba:a9:0f:2c:a5:09:
0a:60:5b:10:76:8d:36:b2:71:2c:7f:58:3e:8b:10:
37:e6:bb:bc:93:2a:18:6e:fb:7a:1d:82:e1:db:84:
f9:9f:f0:91:fb:12:7f:b2:8c:4e:04:90:f1:71:3f:
c2:c6:84:9b:ee:bd:2b:0b:72:cf:ee:50:42:6b:f6:
b7:69:c5:4b:8c:37:1d:4e:8c:e1:b4:fe:0d:2f:94:
ce:cb:d4:77:b8:82:38:9c:17:ef:89:81:dc:10:09:
09:83:17:a6:d9:5a:5d:42:4f:ab:a3:7d:28:70:f2:
81:2e:ac:f8:91:60:eb:39:8e:27:af:f4:eb:3b:3a:
63:4e:1c:ab:7d:20:82:a6:15:dc:6b:85:ea:44:78:
4e:3f:fc:eb:ca:5b:a0:b3:67:fb:95:37:4b:49:2d:
47:f7:88:5b:33:c8:81:86:47:38:d1:73:24:e6:bc:
cf:ab:03:25:fa:4b:7f:4c:02:29:94:e1:ee:dd:4f:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:06:80:9A:4F:97:1A:A6:CD:92:1B:44:E4:EF:11:29:6C:CA:FF:0C
X509v3 Authority Key Identifier:
keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:b9:1f:09:30:87:39:fb:4c:04:31:ce:5e:17:0b:55:4b:
87:a8:27:9e:41:d9:55:24:b9:ff:99:14:af:64:17:ba:0b:c6:
d9:45:08:08:9b:ad:3b:09:80:16:d3:57:fb:00:65:89:6c:6a:
7e:72:e8:d7:ef:18:46:26:f9:6d:f1:25:43:8c:68:56:88:88:
a5:0d:7e:dc:81:f5:cb:7e:ba:8d:69:07:81:7b:c1:b3:25:4c:
1d:0b:03:c0:92:87:8f:2a:c1:cf:67:85:ef:eb:a5:58:13:a3:
3b:c1:18:1a:43:64:bc:44:8b:b8:38:bc:e9:ce:af:31:e0:ee:
20:47:49:ea:6d:5f:d2:2a:ba:71:56:32:b5:b7:05:03:c0:5e:
9e:a9:7d:59:89:bf:7e:f7:6c:c6:93:2d:59:5c:c4:ab:8a:55:
12:5f:4c:0b:e6:7b:1e:37:1d:8f:18:5e:f7:6e:d1:f0:1a:7b:
a9:11:79:1f:13:fe:16:20:8d:40:d0:e4:e0:c1:ba:fa:1f:d5:
1c:d6:bf:a3:df:f6:81:78:8d:96:8c:04:12:d1:7c:35:cf:16:
61:ad:39:ee:07:e5:17:67:30:40:ab:b2:21:ba:e5:d5:17:0d:
f9:1b:b2:ad:b0:ad:ce:67:58:85:57:7d:45:ee:66:18:a9:73:
97:bc:97:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:05 2026 by rpki-client