Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: SS5DrwUulyqxT/+mINUDWIcfb3WWHYOIQC4I2/9HceQ=
Subject key identifier: B6:E1:9B:F5:EE:4C:D9:6E:BB:D8:98:9A:E2:29:E2:FF:06:F6:BB:DB
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 019BE036A9DEBBF975CA018A2483D140AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 15FF
Signing time: Wed 21 Jan 2026 11:00:37 +0000
Manifest this update: Wed 21 Jan 2026 11:00:37 +0000
Manifest next update: Thu 22 Jan 2026 11:00:37 +0000
Files and hashes: 1: 9A7Bsks6ICfI_Ck3g2gQ4vqbmAU.roa (hash: unolq/2SlxR9i0TvnNY4rzMlJByBYB0KjNK6fKOkF14=)
2: GWEPv8y55Nfw4OgxSikDcW4Z8tw.roa (hash: op40RW3COdE099VcHl+hf9g4HY63nkXk7/1pW1u5s78=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: HConUHA2zZffK/s55XcjOeESwKASnBD+jgo+C/TD+PI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e0:36:a9:de:bb:f9:75:ca:01:8a:24:83:d1:40:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jan 21 11:00:37 2026 GMT
Not After : Jan 22 11:00:37 2026 GMT
Subject: CN=b6e19bf5ee4cd96ebbd8989ae229e2ff06f6bbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:b2:b6:fc:c0:16:06:01:54:4b:96:48:a3:
07:b2:fe:7c:ec:b5:6e:1c:8d:3a:73:2a:4f:f4:4a:
01:26:bc:40:1c:b6:25:f3:85:ec:01:e9:ee:06:cb:
a7:d8:b8:d2:65:d7:74:63:b3:2d:47:e8:82:3b:09:
17:b3:36:2b:88:70:b2:e4:94:59:2e:de:17:6a:d2:
ee:61:d0:07:a8:ab:ca:aa:32:42:bd:63:22:81:ef:
66:58:1a:80:6d:6b:bf:a7:02:61:2b:6a:38:ad:39:
3e:71:d0:dd:04:53:4d:5e:ae:9f:b3:d2:d0:dd:6e:
f7:94:10:f6:a7:d9:e9:f7:1b:a4:ea:90:cb:78:48:
6d:64:07:57:64:68:76:6d:18:55:4a:80:87:57:c1:
1f:14:be:52:cc:70:f4:40:1c:5e:4a:5d:e4:f1:85:
f6:ca:83:75:f8:9a:95:c9:42:a6:50:72:1f:bf:ed:
2e:fa:f3:29:bb:1a:59:b9:12:0d:c7:b0:ac:56:db:
c6:af:74:f5:e3:a6:fb:d4:35:b1:cf:6e:62:e2:d4:
1b:f5:c6:5d:56:97:1d:9f:75:09:19:22:c5:f4:31:
6b:69:ec:d7:f9:ed:71:6a:9d:21:28:d2:3a:c5:23:
14:91:0c:e9:a3:3f:90:f6:55:17:3e:3a:22:d9:1b:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E1:9B:F5:EE:4C:D9:6E:BB:D8:98:9A:E2:29:E2:FF:06:F6:BB:DB
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:f2:5a:20:93:66:39:eb:52:09:63:e2:c6:54:7c:ae:98:
36:ee:7e:0b:0e:d9:e6:b7:56:b4:98:5b:a1:00:5d:20:93:dc:
6c:a8:35:a2:7c:c9:dd:e9:a2:b7:24:ad:1f:bf:bf:2d:36:ad:
78:a6:32:6b:e9:da:ee:7e:68:92:ef:df:05:7e:e1:0f:5d:8e:
71:c8:9b:d6:ce:fa:a9:87:cd:63:8e:1f:10:f3:cb:8e:f5:ea:
5d:08:20:0e:9b:15:62:0c:71:68:ed:7c:40:0c:82:c2:47:c9:
d2:1a:16:ab:4a:a1:76:b3:4f:37:fa:37:d0:92:90:a7:73:7e:
65:33:75:4a:4c:18:e4:3b:2c:88:76:ce:97:d7:58:90:d7:3c:
7f:b1:32:59:1c:d4:15:9a:65:08:b1:8b:e2:02:10:4a:d3:df:
a0:58:51:f4:76:6d:fe:67:36:cd:a9:29:7c:65:6b:c8:53:94:
5d:9f:f1:42:d5:79:03:43:0f:af:4d:ca:74:8c:55:d3:36:67:
3b:64:e8:5f:a7:e9:a0:f6:0b:34:f4:6c:4a:ce:48:02:8b:89:
39:9a:fe:da:67:af:ea:9d:6c:ee:34:b4:b3:cf:98:b7:15:48:
4c:7f:ce:66:11:f7:3a:52:8c:63:93:67:34:67:f0:bc:95:c8:
c6:fe:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:26 2026 by rpki-client