Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier: d6eo91vUCKT5qSSR1v3PM5az9jc6/Qbe5DFtDE1HN6o=
Subject key identifier: A5:E1:C6:01:07:0C:DC:3E:26:D7:85:5A:80:78:24:CA:D4:7A:CB:35
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 019D19B5D3747020F70BBA6FF6F77C9697C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number: 07ED
Signing time: Mon 23 Mar 2026 08:00:39 +0000
Manifest this update: Mon 23 Mar 2026 08:00:39 +0000
Manifest next update: Tue 24 Mar 2026 08:00:39 +0000
Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: SaS17LuldxPxibbdiqYdVDPFkowmGDji3YxY3JUGGiQ=)
2: yclEt1JNJDBhPPdjW9WERFXCEk0.roa (hash: 1C/HRqa6c4qK7pb+ge5om9xDk+yETr9/xoZaxBuFlmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:b5:d3:74:70:20:f7:0b:ba:6f:f6:f7:7c:96:97:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Mar 23 08:00:39 2026 GMT
Not After : Mar 24 08:00:39 2026 GMT
Subject: CN=a5e1c601070cdc3e26d7855a807824cad47acb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:8e:cd:b8:a1:41:71:e1:71:8f:15:12:b8:
c4:07:71:1d:a5:0e:32:43:42:93:e5:72:dc:71:a0:
50:44:e4:82:68:d3:b0:08:7d:e2:f9:af:ef:f1:5c:
10:bb:c0:85:19:da:b5:a4:b2:ef:d8:00:7a:78:18:
66:7c:eb:ba:88:7f:86:22:98:35:16:e1:a3:ed:70:
f3:c8:16:e6:9e:59:a5:6c:78:a3:b8:51:b6:fd:82:
14:bc:8a:c6:20:76:a9:80:e1:ce:43:3d:bd:98:bf:
b4:44:36:e1:a9:85:10:2c:4a:68:15:89:bc:57:9a:
cd:89:db:f3:73:be:ba:1f:04:33:85:18:5f:7a:6a:
8d:45:80:25:76:74:86:10:64:df:ee:82:dd:0b:03:
d6:60:82:00:a5:02:fa:39:2d:bf:40:67:99:fc:c0:
0f:5b:0b:a7:b9:a8:df:7b:3a:37:25:8e:db:6f:e4:
6d:97:3f:d1:79:85:44:84:e7:3c:55:f5:6a:d1:72:
f4:6e:58:98:78:79:95:dc:90:68:c1:26:31:ec:91:
1f:7c:e5:59:06:3f:91:35:51:d8:ad:91:7e:cf:09:
3f:5c:f8:f1:a7:bc:2a:eb:74:fd:d8:18:4d:c2:28:
eb:0a:c3:b2:98:41:c0:00:70:16:aa:35:c3:91:19:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:C6:01:07:0C:DC:3E:26:D7:85:5A:80:78:24:CA:D4:7A:CB:35
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7b:ee:64:d2:18:06:88:80:7c:8a:cb:c4:37:4f:39:70:b6:
85:2b:36:10:fe:bc:7e:d5:3d:4c:37:51:79:24:4d:49:a6:76:
79:1d:29:1c:e5:9e:7b:62:d9:f9:cf:9d:33:b3:a2:20:d1:3b:
aa:80:56:7d:5d:1f:f5:47:d5:7a:16:24:22:cd:0e:3d:9d:49:
d7:37:d4:bf:c4:20:b7:c4:1b:9b:51:46:28:5b:83:9c:81:62:
32:33:ee:e1:23:f8:bc:92:ac:64:81:5c:fb:b7:ef:d2:43:1d:
ac:b1:e0:00:95:c4:f9:80:71:47:1c:28:16:92:ae:a7:76:91:
3f:65:09:0d:3b:79:3c:c5:61:0d:ad:18:2c:ca:7e:46:d0:07:
ff:df:39:9c:44:7d:3d:5b:45:1d:38:86:6f:fb:92:45:e1:64:
0a:dc:75:39:3d:57:a0:ef:f5:a3:82:a6:ea:33:c1:34:ed:f0:
3c:c4:2d:20:72:09:f1:81:f8:dc:39:ab:e3:f6:f2:c0:f6:41:
9e:05:38:78:28:e6:1a:f8:48:0a:f0:61:3d:70:68:14:9a:41:
d9:66:f1:70:fb:15:6c:17:d1:be:2f:ee:d0:d1:bb:4f:da:1e:
fa:6c:76:55:eb:53:b9:1f:73:a8:2d:4e:b2:52:8a:41:21:3e:
ce:ed:10:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ZtdN0cCD3C7pv9vd8lpfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5
MmVlNjUwHhcNMjYwMzIzMDgwMDM5WhcNMjYwMzI0MDgwMDM5WjAzMTEwLwYDVQQD
EyhhNWUxYzYwMTA3MGNkYzNlMjZkNzg1NWE4MDc4MjRjYWQ0N2FjYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzKOzbihQXHhcY8VErjEB3EdpQ4y
Q0KT5XLccaBQROSCaNOwCH3i+a/v8VwQu8CFGdq1pLLv2AB6eBhmfOu6iH+GIpg1
FuGj7XDzyBbmnlmlbHijuFG2/YIUvIrGIHapgOHOQz29mL+0RDbhqYUQLEpoFYm8
V5rNidvzc766HwQzhRhfemqNRYAldnSGEGTf7oLdCwPWYIIApQL6OS2/QGeZ/MAP
Wwunuajfezo3JY7bb+Rtlz/ReYVEhOc8VfVq0XL0bliYeHmV3JBowSYx7JEffOVZ
Bj+RNVHYrZF+zwk/XPjxp7wq63T92BhNwijrCsOymEHAAHAWqjXDkRmkfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXhxgEHDNw+JteFWoB4JMrUess1MB8GA1UdIwQY
MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt
NDZmMDA0YTE5NTkxLzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx
LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXvuZNIY
BoiAfIrLxDdPOXC2hSs2EP68ftU9TDdReSRNSaZ2eR0pHOWee2LZ+c+dM7OiINE7
qoBWfV0f9UfVehYkIs0OPZ1J1zfUv8Qgt8Qbm1FGKFuDnIFiMjPu4SP4vJKsZIFc
+7fv0kMdrLHgAJXE+YBxRxwoFpKup3aRP2UJDTt5PMVhDa0YLMp+RtAH/985nER9
PVtFHTiGb/uSReFkCtx1OT1XoO/1o4Km6jPBNO3wPMQtIHIJ8YH43Dmr4/bywPZB
ngU4eCjmGvhICvBhPXBoFJpB2WbxcPsVbBfRvi/u0NG7T9oe+mx2VetTuR9zqC1O
slKKQSE+zu0Qew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:17 2026 by rpki-client