Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier: 5QvGfqt3MUvtPUuh/WSZx87moOIrY5ozVqPJm9bSvPI=
Subject key identifier: E4:EA:F6:61:98:12:87:8C:37:B8:57:A6:F9:02:16:88:95:96:61:66
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019D2DE11B4194C50043C2052DEA4FE30786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number: 1889
Signing time: Fri 27 Mar 2026 06:00:20 +0000
Manifest this update: Fri 27 Mar 2026 06:00:20 +0000
Manifest next update: Sat 28 Mar 2026 06:00:20 +0000
Files and hashes: 1: K9qrZBR_fmm4eKVDh5mgAxgKUjA.roa (hash: mz9IbH2TcauzEdRTkvsk6aZrHNIPGk0qBoIBNHpM3I4=)
2: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: xUIR8KTMy8hY4EIQzUje6Ayte4VHzkJ3KoqwTsp/R8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:e1:1b:41:94:c5:00:43:c2:05:2d:ea:4f:e3:07:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Mar 27 06:00:20 2026 GMT
Not After : Mar 28 06:00:20 2026 GMT
Subject: CN=e4eaf6619812878c37b857a6f902168895966166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:72:c3:51:3a:88:a6:96:a4:af:f8:9c:8e:
ef:99:93:53:11:37:72:73:51:0d:a6:3d:96:d9:a1:
a0:9b:41:ce:76:04:c6:93:a7:e7:1c:e4:da:7c:33:
28:78:71:ac:4f:09:2b:a8:43:79:89:d7:19:85:ce:
6d:5c:2a:87:06:72:d9:f7:9d:aa:e0:d0:3d:a1:79:
cd:b0:95:95:ef:b5:c9:47:a5:01:6a:8a:0e:bf:9f:
b4:ee:08:98:b8:04:33:08:93:1a:bb:76:ab:b9:3a:
4a:ea:1f:3e:40:09:a0:ca:e9:cb:1d:7b:e8:1d:4e:
9c:ca:ba:68:27:18:7e:48:96:d1:1a:01:fe:71:7c:
69:c8:57:f2:7f:5f:51:83:54:b8:50:fc:cd:06:fb:
cf:31:bb:64:91:32:53:c2:59:42:6a:e1:4e:c8:35:
f3:df:5d:e6:ec:17:1e:a8:8a:44:58:92:f7:d8:4d:
88:01:37:de:e6:f2:97:2d:a3:2c:f3:74:e5:f3:00:
98:7d:43:76:f2:7f:5a:37:22:33:80:33:25:eb:d9:
f0:2b:c3:0d:b7:a1:a8:07:01:c3:f3:b4:d8:5a:de:
4f:bb:28:49:23:eb:12:cb:bb:d5:dd:c9:12:45:43:
b1:11:53:02:22:0e:c4:87:69:9c:0a:b4:8f:8a:56:
f9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EA:F6:61:98:12:87:8C:37:B8:57:A6:F9:02:16:88:95:96:61:66
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:28:85:a4:3e:03:3a:4c:00:b1:b0:d4:c0:6a:6b:d0:81:
25:6e:69:60:6a:4a:72:88:07:36:ce:b6:71:06:72:60:88:af:
d7:bf:47:e5:0b:13:ad:f1:c6:94:fd:74:84:b4:f1:2a:af:d0:
51:8e:a2:95:7e:d7:31:5d:d7:21:5e:e0:52:eb:95:4b:22:be:
8c:1d:82:75:bb:c5:3c:1b:e7:b6:28:de:c9:83:dd:6a:da:98:
82:fd:cf:e9:fd:1d:75:9b:2c:e9:80:d1:e4:40:60:9a:d0:7b:
e3:40:27:23:54:3a:37:c4:a2:5d:ce:1a:a9:a2:82:20:60:ce:
48:df:0d:0a:1a:3f:5b:96:43:2d:ec:09:20:1b:8e:a7:b3:4d:
d7:63:c3:b9:fb:fa:67:96:6d:24:8b:cb:36:67:0a:8f:87:9a:
96:fe:bd:89:12:d2:50:6b:a0:01:bf:fc:1b:cd:48:4f:36:c7:
f1:02:f1:80:bb:08:f2:a1:e9:c2:2d:10:98:dd:80:65:93:19:
97:22:e0:1a:f6:fd:8d:40:e1:94:89:24:f2:e8:ed:30:d9:73:
e2:e8:db:06:4e:af:cb:b6:b3:07:87:d5:0b:a8:0b:63:5f:b2:
86:60:66:81:1d:b0:9c:f9:42:45:7b:12:44:e2:4d:a7:44:ee:
3e:d4:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:15 2026 by rpki-client