Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: GSu+QNDCZctWGcqqbgAQd8S3aiPaqYdxE7Gz60+UFsg=
Subject key identifier: 91:91:CB:C7:3F:6C:FE:A4:D4:A2:62:75:95:52:13:BA:2B:86:17:4E
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 019D1A91F5938162FB3E8F59726B1030E57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 092E
Signing time: Mon 23 Mar 2026 12:01:06 +0000
Manifest this update: Mon 23 Mar 2026 12:01:06 +0000
Manifest next update: Tue 24 Mar 2026 12:01:06 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: nGKYq1JOxeifBMORlkg0GFjt5PKkqQAermYUgpENYPc=)
2: pIAhj8amHnd0fjLTUVpUmZpe45o.roa (hash: F6Vq2qEf6nCrdvdX7pWrP/aHN1l9RhEoh7QDzNTcEVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:91:f5:93:81:62:fb:3e:8f:59:72:6b:10:30:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Mar 23 12:01:06 2026 GMT
Not After : Mar 24 12:01:06 2026 GMT
Subject: CN=9191cbc73f6cfea4d4a26275955213ba2b86174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:62:40:a0:84:fa:23:c3:d7:36:fe:dd:aa:
ff:8b:e0:d7:2f:b5:09:a5:e5:48:c1:d2:82:65:97:
5d:82:a6:a2:19:f3:87:33:97:fc:fa:ac:71:f9:6c:
4e:9e:f8:1f:96:5b:79:f7:35:5d:e9:5c:4d:b8:0e:
e5:7c:fe:0f:17:ce:8c:1b:96:93:0b:f1:41:28:e0:
d9:c5:48:0a:23:d0:3c:b4:68:98:3b:c1:23:09:af:
e0:2a:90:00:1a:ee:66:7a:ab:e7:72:01:04:c8:7c:
17:1e:15:19:98:6b:38:c7:06:8a:3a:92:eb:e0:84:
c4:bd:24:17:c7:e0:fe:e9:14:5f:d5:73:88:7c:b3:
06:9f:bb:9d:c6:8e:57:8e:df:1b:c1:93:3c:d0:b0:
d1:b7:5b:84:e6:08:d8:6e:4c:5b:af:dc:c9:36:1a:
6c:82:ac:c8:8a:42:f5:87:3d:3b:92:50:a4:ca:0c:
55:d1:6f:7f:2d:d8:1c:6d:a1:c2:30:85:0a:77:4d:
05:10:7f:a1:6c:f9:61:18:89:41:56:44:61:69:ef:
88:0f:df:8d:e4:4c:0d:e8:15:02:8c:a2:01:45:6a:
20:cc:98:d7:00:0a:16:82:0f:1b:a3:c0:71:39:15:
e7:8e:a1:69:e7:f6:17:bf:d2:87:8e:48:87:fe:b0:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:91:CB:C7:3F:6C:FE:A4:D4:A2:62:75:95:52:13:BA:2B:86:17:4E
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:70:3d:7d:73:95:3a:db:9b:3d:78:d1:7b:4c:64:bf:3c:
18:92:e5:1a:b1:df:03:fe:b6:20:3a:68:5d:b1:56:1e:93:6f:
35:4f:4d:be:1d:40:0a:f6:b5:aa:b7:ff:75:7a:9e:3b:d0:25:
19:06:d6:70:b9:cc:e7:00:99:b5:5d:12:14:69:fc:8a:93:01:
91:da:cb:05:56:16:ec:76:92:cd:81:e1:f8:82:4f:bb:d4:48:
02:4f:7a:5c:96:c4:d6:3f:17:55:e7:65:c7:f0:3c:d2:3e:ce:
24:41:6c:69:29:b8:58:81:d9:59:09:22:4c:d0:20:65:d1:1c:
ad:38:73:63:e0:f6:97:ea:96:6c:98:5a:c5:76:72:99:c2:f3:
8f:b5:05:07:8c:88:5f:f8:ff:16:13:fc:20:22:f8:06:9d:a0:
5b:33:f9:f8:cd:fa:af:92:ed:6a:fd:0b:85:a7:d8:56:5f:a7:
3a:ed:b9:e6:c1:a3:43:29:0b:61:7c:aa:f8:fb:d4:28:6d:61:
77:f7:e8:e9:40:87:d2:f5:22:10:d5:7d:60:00:e8:dd:60:ac:
3f:70:8d:c2:3a:ea:70:ef:14:02:15:b2:25:52:4f:9c:f8:2a:
ec:2b:f8:b5:07:bf:e3:7c:4a:0e:e6:c9:4d:83:79:4c:1c:e8:
c3:a0:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:16 2026 by rpki-client