Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File: N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier: R2s+KX9BandSkM4zOYO6YKVGu5iJnPglwpYpU7O7Hno=
Subject key identifier: B3:F4:4A:C3:E6:CA:B5:F2:DF:A1:C5:1D:B0:2F:E4:C5:BA:62:FA:62
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer: /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial: 019C7369F9F7FD26F7DEE04784F9D3D6E415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number: 1085
Signing time: Thu 19 Feb 2026 01:00:50 +0000
Manifest this update: Thu 19 Feb 2026 01:00:50 +0000
Manifest next update: Fri 20 Feb 2026 01:00:50 +0000
Files and hashes: 1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: hNM+5n+jzsGl9x+//2OdoBFZbl37vwd8PlF1ufPv8LQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:73:69:f9:f7:fd:26:f7:de:e0:47:84:f9:d3:d6:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
Validity
Not Before: Feb 19 01:00:50 2026 GMT
Not After : Feb 20 01:00:50 2026 GMT
Subject: CN=b3f44ac3e6cab5f2dfa1c51db02fe4c5ba62fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:0f:eb:69:a2:26:83:15:62:a3:09:f2:99:
4d:58:d6:90:26:d0:ee:58:42:39:68:d5:f4:3e:77:
8a:e7:a2:ec:b8:c7:03:b1:f4:3f:9e:59:36:67:4c:
cd:5f:e4:9d:ff:27:89:72:ae:95:40:03:da:ae:50:
4e:69:13:c8:db:f5:25:b2:0b:e3:a9:1c:62:d5:70:
4c:ba:15:59:d3:52:00:74:6e:21:07:d8:34:36:17:
f8:06:7a:b8:b6:d2:7b:42:55:b9:e6:14:df:b5:80:
81:32:5d:a0:57:29:0d:2e:3b:51:30:a6:53:bf:3a:
e6:18:66:f7:c6:60:07:48:55:b0:1b:1a:d2:a5:58:
98:0c:8c:71:09:68:1e:ee:8a:5c:14:2e:89:b2:c8:
93:50:0d:1f:ee:8c:db:1d:0e:27:94:09:da:98:69:
65:53:db:22:8b:b8:c5:06:f6:ef:36:6d:75:a7:43:
20:c4:da:6a:b1:fa:7b:e7:0c:43:5c:57:16:89:29:
34:97:6d:fd:4d:ed:d1:9c:1b:df:dd:27:8d:59:2e:
63:d4:fa:55:7f:18:58:fa:46:02:9e:69:5a:87:d5:
ac:f7:8e:c4:34:8e:03:30:43:0d:29:4d:fe:97:d3:
6f:7a:17:5c:3d:80:3d:bf:6d:27:49:75:cd:c6:6e:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:4A:C3:E6:CA:B5:F2:DF:A1:C5:1D:B0:2F:E4:C5:BA:62:FA:62
X509v3 Authority Key Identifier:
keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b6:b8:eb:86:9d:a0:d8:60:81:16:fc:73:75:6d:0b:28:64:
ae:e8:a1:94:43:1e:24:72:2e:02:2a:66:43:41:38:7a:4d:d1:
99:7d:59:56:3e:fb:8b:7e:e4:40:36:19:87:c8:7a:f4:3b:fd:
cd:7b:b3:89:21:7b:c8:aa:8d:37:4b:d0:69:0d:5d:37:57:0d:
c2:ea:ad:4f:00:87:ea:8e:70:62:ad:95:08:27:32:3f:35:c4:
6d:52:b7:86:75:a9:97:37:2d:16:3d:b9:a9:a3:19:00:d4:2e:
b8:4a:fe:d9:2a:98:e8:7a:3a:1e:b1:36:f2:b3:46:18:dc:93:
d1:dd:94:fe:16:2e:8c:0d:6b:7f:75:8e:d0:7b:61:9d:86:f8:
a1:dc:f2:dd:67:dd:67:ff:75:02:84:41:49:b0:c0:c4:6b:80:
d1:c4:a2:18:b6:a2:0d:4a:6b:38:2b:53:49:33:8e:c1:90:d7:
55:c7:8a:7c:6b:a0:4d:a9:8e:2b:e8:27:fc:57:dc:45:8e:e7:
5d:d3:32:56:d0:6c:dc:5a:7f:05:01:fb:a2:cf:7a:59:cc:93:
46:ae:24:f4:df:e7:59:35:fd:d1:0f:00:fd:cf:67:ea:02:88:
2d:f1:06:e6:ef:79:26:c7:60:a8:8a:e1:a6:9a:d8:02:05:c5:
28:1c:4a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:40 2026 by rpki-client