Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: 6F0yz1GBvL2ogBaqM9cvhFjRj/XOVekyY2OjTOoZDSg=
Subject key identifier: 88:86:1D:E3:76:CF:6F:40:47:17:3E:EC:3B:55:67:7E:0C:92:30:45
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019BFE4106DFD1AC8EFEDD3DA48C7375B48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1505
Signing time: Tue 27 Jan 2026 07:00:32 +0000
Manifest this update: Tue 27 Jan 2026 07:00:32 +0000
Manifest next update: Wed 28 Jan 2026 07:00:32 +0000
Files and hashes: 1: PkJTBO7wAnRCyh-vwqCDXNy-gFM.roa (hash: iNQh9da8Mf0jJApFS7MUlJZ0wObSIxlPlUsOHw90jNg=)
2: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: MP1fxie+rkfzdV8C7Kf6AWCHjuqFd2PtmlSWqEhMbKA=)
3: wemg5rTkkqVzI0Wh91rmncErW9M.roa (hash: egq769rSEvJ3yiKJ+cXaazDpSWPy4/IG74+NvtNY77Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:41:06:df:d1:ac:8e:fe:dd:3d:a4:8c:73:75:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jan 27 07:00:32 2026 GMT
Not After : Jan 28 07:00:32 2026 GMT
Subject: CN=88861de376cf6f4047173eec3b55677e0c923045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:49:43:35:8a:0c:ef:55:c8:c0:4e:fe:64:
9b:9e:a6:c1:9b:35:94:45:5a:b3:95:55:f3:b1:c1:
60:54:84:b6:08:79:8f:be:a3:16:51:fa:dd:45:01:
73:cc:f2:d4:cf:8f:66:dd:c7:20:5a:dd:56:ba:9f:
56:96:c0:92:90:71:57:69:ce:e7:6f:7d:67:ed:f8:
64:16:52:f7:4f:be:1b:b0:d3:5a:9b:3d:20:d9:8c:
bf:ec:6a:78:25:f9:be:06:22:a1:31:d8:77:09:3a:
52:cc:2d:f3:b0:4e:f9:1f:6d:01:49:cc:a2:e7:0d:
2b:19:7c:59:a7:38:7d:2c:eb:f3:e9:71:a1:8b:c5:
86:17:d6:dc:bd:c4:fd:51:b6:d5:a1:49:8e:ab:84:
ae:63:48:65:96:d3:f6:ea:a1:91:31:9f:1e:6d:7c:
0e:be:33:e4:5d:e0:83:92:1a:0d:4a:21:c7:fc:1e:
00:ec:17:ee:89:46:c4:da:0b:57:a8:31:36:3a:2b:
ba:6d:7c:d8:6c:1e:23:d9:ad:61:2d:17:4e:9a:fa:
d9:f5:bc:74:2d:a6:0b:72:b4:05:fd:04:22:8e:e8:
2c:67:b9:43:f7:b5:ee:91:21:d1:89:e7:72:17:86:
1a:59:f2:af:0d:b5:1f:14:7f:80:5e:ad:83:fc:10:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:1D:E3:76:CF:6F:40:47:17:3E:EC:3B:55:67:7E:0C:92:30:45
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:3d:00:d5:20:9e:d3:0b:37:91:46:0d:99:1f:fa:86:02:
64:7d:2e:f9:56:d9:ce:d9:ff:89:ba:b4:78:fd:4d:41:9c:e2:
0f:d1:76:b9:e4:87:98:fa:38:2a:68:c7:11:77:b0:c2:c2:79:
ff:a0:1d:6a:fa:f7:82:bf:05:75:3b:e9:e3:dd:58:91:e7:77:
94:7f:b6:fc:17:e1:ca:d5:4f:f2:e0:58:1e:fb:db:84:a5:cd:
81:0a:62:15:b0:51:98:d4:0a:53:74:b8:9b:f0:41:f3:97:c0:
9b:b4:07:d7:cf:c5:72:36:a5:fe:44:e4:1d:1f:1d:b3:b2:28:
9a:dc:b3:e7:bb:94:49:2f:49:fd:7a:96:68:9b:29:4d:0e:0b:
a4:8b:1c:42:b1:3e:48:12:2b:78:2f:05:02:2f:d2:ce:be:c5:
be:3f:f2:c7:d8:24:05:98:de:a6:15:48:52:fb:c8:a4:15:e5:
2a:99:7a:d8:f4:54:dd:53:eb:1b:bf:aa:96:74:1c:75:d5:8a:
06:db:cc:08:93:d4:aa:00:01:6a:dd:0f:4f:a4:cc:1c:df:57:
e6:98:67:7e:ed:07:f3:27:0a:a2:ad:8f:10:a2:c6:c4:86:77:
ad:46:9b:ec:ac:06:72:ab:b7:47:ff:18:57:ae:ab:28:8a:7b:
c8:c2:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:31 2026 by rpki-client