Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
File: wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json)
Hash identifier: 68m5RKW2e3c1vpC/y5lwPDF+wW41Jqnrd+Fa8xu8AQk=
Subject key identifier: 2D:23:40:1F:85:82:0B:02:5C:B6:C1:36:35:42:AA:1C:FD:15:F3:52
Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
Certificate issuer: /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Certificate serial: 019CF3F2CAB2339829C093C9B9B6D19A55A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
Manifest number: 05A3
Signing time: Mon 16 Mar 2026 00:01:40 +0000
Manifest this update: Mon 16 Mar 2026 00:01:40 +0000
Manifest next update: Tue 17 Mar 2026 00:01:40 +0000
Files and hashes: 1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: IN0h5Q/T1u6zx8Xdgb0N1Ql2SJHXIxBm5ElxmbV+KeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:ca:b2:33:98:29:c0:93:c9:b9:b6:d1:9a:55:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055
Validity
Not Before: Mar 16 00:01:40 2026 GMT
Not After : Mar 17 00:01:40 2026 GMT
Subject: CN=2d23401f85820b025cb6c1363542aa1cfd15f352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:c3:1b:41:45:6e:6c:30:3f:cb:20:55:05:
ae:80:ce:00:de:0b:38:59:95:51:bb:b1:72:31:9c:
c1:a2:fe:19:0f:18:82:7b:8e:64:24:48:8b:ce:8f:
8c:b8:5c:92:54:f7:ff:11:fa:34:61:89:f7:a1:4e:
c5:f2:e4:e3:a5:17:9f:f3:e6:f7:13:c6:22:92:9e:
27:5b:a5:db:60:72:70:82:79:a8:6c:72:e1:a5:56:
2e:56:e8:9d:8f:a0:16:60:eb:59:e0:6f:55:06:14:
7c:8e:16:f4:03:06:61:27:6f:ee:3f:a1:ad:6b:4f:
83:06:14:01:60:54:f3:fe:32:28:31:72:32:14:a1:
97:4f:24:bc:ed:f6:aa:25:50:3f:18:ed:aa:c9:90:
8c:af:22:a4:a0:8b:59:c6:60:12:45:b1:d3:5c:38:
21:ae:19:03:45:54:b6:dd:01:b8:11:b5:3b:ef:63:
2a:fb:2a:c9:07:fe:cd:b3:9d:11:f4:28:1e:6c:e4:
73:b6:2b:f6:d0:5e:66:25:1c:28:49:1a:42:7f:2f:
7e:54:d9:b3:d9:8c:5e:1b:4d:dc:b3:bf:4f:ba:0b:
e1:17:fd:dc:a9:b6:1a:74:34:62:f3:40:5d:f8:9e:
03:d3:11:e6:c7:71:6d:7f:ce:77:ff:90:aa:bd:4d:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:40:1F:85:82:0B:02:5C:B6:C1:36:35:42:AA:1C:FD:15:F3:52
X509v3 Authority Key Identifier:
keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6d:88:2a:64:8c:9b:50:fb:d3:f5:bb:af:5a:44:5d:9d:af:
94:74:ae:85:f2:6f:fa:1b:f6:3b:fe:ca:4e:9a:90:90:a3:08:
01:92:12:2b:50:a8:fb:c0:c6:92:d6:a4:b3:f0:bc:a6:99:33:
b7:3f:24:70:45:6c:61:65:c9:1c:54:3b:cb:9f:17:b5:96:4b:
6f:b3:d3:f3:31:52:26:23:ea:93:71:20:67:61:d3:f6:f9:76:
74:a7:eb:ad:7c:4a:1f:8a:2f:7d:14:11:9e:8c:72:79:38:1c:
2e:45:1c:11:27:e8:e0:9d:0e:6a:70:30:0a:12:5c:cc:06:99:
f4:27:57:42:10:02:f2:3d:a9:8b:c0:a9:e9:2b:33:c0:49:f9:
8c:ba:12:63:1d:51:03:d8:1e:df:a3:6c:36:01:dc:45:f5:13:
1d:63:18:2c:49:17:14:69:bc:a4:ca:a8:e6:d7:8a:dc:c4:ac:
c2:5b:96:4c:4d:24:bf:0a:00:e8:1e:c0:cc:0b:bf:60:a6:81:
8c:ae:80:22:f1:c1:a4:2c:29:db:ba:6f:77:cf:73:04:b3:80:
b4:43:03:ea:88:7b:59:c5:9f:53:84:33:7e:2d:8c:82:e3:fc:
b9:09:0c:fb:3c:ed:5d:f0:88:6a:1d:13:71:bf:c7:b3:89:6a:
b6:b1:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:36 2026 by rpki-client