Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: qWDWDYXQGDIsihFb+lCDybP1alXhK+r7qX//hu10t4M=
Subject key identifier: 8D:98:7A:EC:3E:FF:31:10:BC:18:7E:EB:F8:CD:8C:C7:DF:B7:EA:74
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019D751E7B95FC00059C07C2728EBBEF5ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 07A8
Signing time: Fri 10 Apr 2026 02:00:25 +0000
Manifest this update: Fri 10 Apr 2026 02:00:25 +0000
Manifest next update: Sat 11 Apr 2026 02:00:25 +0000
Files and hashes: 1: 02YEKq1IDPEF8lBAQFD4RLUmuKw.roa (hash: TS/pQGf2LaMx5573KYxQQhCXKrO448hCMH6JUvctiu8=)
2: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: F4R0moBe0jMXcvyb9tBFaepE4RRAX0Dt6qyiqz1bqJc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:75:1e:7b:95:fc:00:05:9c:07:c2:72:8e:bb:ef:5a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Apr 10 02:00:25 2026 GMT
Not After : Apr 11 02:00:25 2026 GMT
Subject: CN=8d987aec3eff3110bc187eebf8cd8cc7dfb7ea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:f9:33:87:e6:36:c2:9d:2f:1a:8b:c8:86:
0e:06:1b:dc:cf:b4:50:fc:14:7e:f6:c5:5c:6c:3b:
f5:98:93:5b:18:c8:bb:e7:52:9b:d2:3e:29:ac:86:
1c:f0:80:83:38:a6:fd:1b:8f:96:b8:44:b2:f4:58:
a9:ab:64:d1:2f:8f:f7:38:a7:dc:2c:98:dd:16:c3:
58:fb:e0:05:97:27:91:79:5f:5d:fb:7e:2a:61:68:
04:42:4c:9b:a3:e8:d6:6f:35:eb:5f:97:39:c3:e8:
47:4d:31:4c:7d:bb:88:a5:ad:6d:ed:39:a6:77:6e:
13:13:a6:5a:1f:79:b5:bc:a5:10:8f:af:6b:e8:f9:
b9:b1:13:4c:d8:fb:05:ac:a3:a8:1a:6a:7d:64:42:
16:2b:53:75:bd:a0:c4:34:7b:02:2a:30:8a:8e:b1:
22:ea:d3:1d:13:df:1f:ab:5a:16:89:78:07:37:5c:
a2:32:e9:70:c4:fe:0c:a8:d4:9a:69:57:45:90:e3:
e6:79:f6:73:88:0a:a1:65:81:f3:82:18:fb:e1:b8:
b2:b1:05:af:a2:40:29:89:49:0a:9d:51:0d:14:fd:
ad:2b:78:69:d6:7f:59:50:33:e7:18:ce:2c:f6:7f:
af:c9:f9:f1:0b:2d:c2:b5:20:2c:75:d8:f8:d4:82:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:98:7A:EC:3E:FF:31:10:BC:18:7E:EB:F8:CD:8C:C7:DF:B7:EA:74
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:3b:a1:4d:93:3c:4b:bc:89:94:12:08:af:b2:b6:05:93:
b2:ae:75:86:2f:b4:ff:c7:c7:61:10:d0:a9:bb:e1:90:3b:a4:
2f:3d:eb:c9:31:07:7f:b1:65:2b:f3:88:dc:75:8b:8c:b7:98:
58:9d:33:7c:48:b7:98:52:7e:5c:e8:ce:ba:26:4e:01:52:e3:
d4:78:6f:25:89:7c:a1:de:cc:65:20:8b:5e:83:50:9f:80:0d:
6c:bb:8f:84:e8:c3:d0:51:e1:3d:50:3c:aa:a0:72:b3:ee:e2:
aa:77:a1:56:1e:4b:e5:35:52:7e:89:c1:7f:cc:09:35:31:6a:
b9:02:c0:6d:7e:02:e6:89:71:d3:b0:33:8f:e8:5a:ad:f6:c8:
34:53:9d:e9:c6:89:25:3e:4e:0e:6a:a8:06:cb:2a:d2:6f:7b:
ad:96:4d:84:8c:e4:80:eb:cf:c6:58:56:ea:52:ca:ef:0d:06:
91:9c:36:b7:01:e1:3a:26:31:3d:0c:3b:ef:95:d9:c8:c3:89:
40:fa:c8:b9:85:48:9e:d3:33:21:68:88:33:ce:05:a3:af:b4:
f0:03:8d:8b:74:e2:a4:c9:78:ae:27:40:3e:f5:c5:09:63:40:
f7:89:78:79:21:e6:de:92:b3:65:5b:e5:13:e7:eb:de:67:74:
2c:b7:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:09 2026 by rpki-client