Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: 9SRDAAPQ4QEJrwT4hsxRxRw0EG8fNcBAnoF8LfBXW/4=
Subject key identifier: 0F:76:6C:1A:D0:2D:39:F0:07:AF:31:BF:2A:BC:60:16:09:4A:94:0E
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 019D70670F7E04DE7B41CC50E88AB014C1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 18AA
Signing time: Thu 09 Apr 2026 04:01:35 +0000
Manifest this update: Thu 09 Apr 2026 04:01:35 +0000
Manifest next update: Fri 10 Apr 2026 04:01:35 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: iyRV6QItdcY4zz2/5QxVPFehavZesxSdFWgqGzs4U4A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:67:0f:7e:04:de:7b:41:cc:50:e8:8a:b0:14:c1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Apr 9 04:01:35 2026 GMT
Not After : Apr 10 04:01:35 2026 GMT
Subject: CN=0f766c1ad02d39f007af31bf2abc6016094a940e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:c0:43:b4:08:73:19:1a:4a:93:a0:02:aa:
a2:61:87:c9:1c:1a:fd:35:ed:35:ea:f5:28:d0:04:
dc:30:42:5f:95:c7:41:7c:23:4c:42:f5:25:45:ca:
46:f4:56:a8:0b:0d:c3:cc:51:5f:02:3f:80:54:3d:
25:99:49:9c:0c:fa:48:d2:a1:b4:19:de:6e:80:8a:
96:06:df:65:3b:a6:5a:94:c9:b0:13:f1:89:da:a9:
8c:ab:db:72:fe:7d:34:fe:15:a3:6d:6a:ad:6c:41:
99:7f:cf:18:64:21:82:18:51:1e:70:3f:88:3e:1c:
c1:e8:43:e7:1b:2b:0f:6d:b4:71:75:66:4b:36:c8:
3d:ad:3f:3f:d4:bf:d3:45:9f:b3:58:28:5c:4d:a3:
8b:30:81:75:2b:ee:0b:01:16:1a:04:df:f5:6c:87:
a7:47:05:e0:d6:a4:8b:cc:20:d7:db:ee:d2:a7:3f:
dc:16:f7:01:66:0e:97:3c:c2:a0:01:dc:78:30:dc:
0c:c2:dd:d8:9b:91:40:fd:01:68:e4:a4:22:c0:2f:
db:2a:ee:8f:cb:70:89:8f:07:44:0a:44:99:d6:5e:
98:11:7c:18:40:5a:cd:56:b7:c7:4a:9a:21:d1:f4:
9b:63:72:a2:ef:51:14:1b:da:df:d9:59:b2:da:3f:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:76:6C:1A:D0:2D:39:F0:07:AF:31:BF:2A:BC:60:16:09:4A:94:0E
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:20:04:87:eb:08:bf:1c:c8:06:6b:3b:30:d8:ee:69:cd:f7:
a0:a6:62:4a:f0:93:2b:94:1e:0b:3c:2e:d3:f5:c9:90:cf:a1:
cb:4b:91:59:91:e9:f9:1e:5a:75:68:7b:73:df:ee:83:26:c3:
63:5d:32:89:85:c8:04:53:e3:cb:75:57:23:26:e9:a7:93:92:
9e:9e:0f:c8:30:ff:6d:0b:86:ef:89:16:bf:3d:29:a6:74:9a:
25:57:31:0f:9a:94:f5:88:92:fc:a7:91:80:d3:7e:8d:e4:be:
71:70:7d:2f:5d:30:bb:92:fe:38:14:c5:a2:13:01:31:81:5f:
be:f3:8b:d4:8c:93:9c:49:52:d2:ac:08:83:9c:28:d3:1a:c6:
9b:8a:95:c2:c5:7e:d4:95:69:5d:06:95:65:7d:54:9e:be:36:
52:37:5d:14:80:24:30:37:62:72:55:c5:98:9d:e9:cc:c3:b7:
bf:ef:17:4f:42:2e:28:fc:10:04:fc:60:41:58:18:10:1c:32:
b8:56:8a:8c:42:40:60:49:b6:0f:2e:4c:da:f6:2e:e7:eb:68:
41:20:4a:d6:0c:84:67:7d:e1:bd:5e:d8:fc:6e:c1:dc:22:2c:
76:ad:c5:c5:1e:cf:7a:03:a0:52:ca:d9:aa:da:e4:36:04:98:
8a:05:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:55 2026 by rpki-client