Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: N9sM/ieFzBqiXy/Jbc5jnx4L/fTcXk9tW+Pjz747sRo=
Subject key identifier: C7:1F:AF:3B:D7:0F:0B:3B:A8:AF:DE:91:9E:87:FC:B1:C2:67:E0:FA
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 019B95C1B8F806BF3BD3A437C4E211681E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 05A8
Signing time: Wed 07 Jan 2026 00:00:59 +0000
Manifest this update: Wed 07 Jan 2026 00:00:59 +0000
Manifest next update: Thu 08 Jan 2026 00:00:59 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: L7SQLKPwklUj/MzXZEPQqPQwOJ0TbKxTaFgQ8ctnJcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:95:c1:b8:f8:06:bf:3b:d3:a4:37:c4:e2:11:68:1e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Jan 7 00:00:59 2026 GMT
Not After : Jan 8 00:00:59 2026 GMT
Subject: CN=c71faf3bd70f0b3ba8afde919e87fcb1c267e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:28:68:81:e0:b2:50:11:08:2c:b0:1c:61:
3d:07:1f:c9:db:12:4f:74:6f:5f:d5:ce:44:0f:b1:
bf:b4:48:b8:8c:48:ac:43:e4:27:63:30:83:37:c7:
0e:29:01:d0:a8:f2:da:08:d7:f8:6b:8b:fd:9b:72:
b9:f4:b1:67:44:06:10:1d:bf:03:27:44:9a:4a:23:
34:0b:f9:c9:54:ea:fd:f2:77:0a:05:15:57:9b:59:
d3:0b:9a:56:10:c4:bd:c9:5a:4c:c5:76:ec:f2:0d:
50:34:34:36:ad:49:02:18:e5:ae:74:8a:58:fc:1b:
25:97:4b:4a:2d:e4:5f:6a:74:3b:5f:d9:bc:fe:af:
7c:8e:d9:ba:bb:ce:88:13:d6:84:3b:92:98:bc:b2:
00:d5:68:77:c6:af:34:75:eb:17:2e:8e:f7:b0:69:
9e:e3:1a:85:af:7c:e4:68:28:7c:a9:0d:72:83:4e:
73:7f:6f:37:f8:7c:7c:22:bc:c2:cd:fa:05:5c:36:
76:f3:dc:39:c0:b2:c5:3a:b6:16:92:7f:4c:02:a1:
fc:ee:e7:5e:80:0d:77:24:b3:ee:46:ef:96:15:05:
0f:c2:c4:97:fb:b6:4e:22:90:57:d5:e5:52:57:37:
c4:2c:89:58:36:a4:1c:c8:f1:ae:f1:62:91:21:15:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1F:AF:3B:D7:0F:0B:3B:A8:AF:DE:91:9E:87:FC:B1:C2:67:E0:FA
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:aa:91:9c:d6:25:c1:06:a4:89:4f:50:1f:14:6b:0a:26:a3:
05:9b:07:27:49:48:80:d5:bc:f6:7b:19:97:55:a0:be:ea:c8:
47:9c:f7:ff:49:ba:59:7b:08:46:3e:b8:51:ed:3a:a6:62:30:
63:9b:f1:ba:ad:28:7a:f7:72:c3:87:6c:03:f7:3d:3c:05:a6:
0b:76:41:7c:ad:1a:e2:c3:39:3f:3f:49:a7:9d:dc:55:46:8a:
8c:cc:87:07:43:04:ed:4f:3c:55:bd:58:83:27:72:ec:ef:3b:
ca:02:23:d4:4c:3d:35:0b:95:b7:3d:89:62:70:f7:df:ca:8f:
5f:e4:df:e6:3d:d2:3e:75:c4:e0:4f:95:5d:e4:14:56:78:99:
62:8c:9f:bd:1a:bf:93:77:0c:99:b8:ad:ed:d4:05:ab:eb:86:
5c:1b:de:6a:d8:64:1d:f5:08:8c:9e:59:bf:69:2c:2d:c7:50:
c1:bb:be:c9:33:e7:6d:8f:95:b9:d6:bd:10:bf:8d:4f:7a:07:
6c:a0:b1:36:c7:85:79:4d:25:cb:f1:98:05:be:5e:d4:9d:dc:
72:47:5a:db:72:5d:f9:db:3f:be:bf:b3:fa:cc:e3:53:d8:0f:
fa:bb:53:03:d8:b0:43:d3:47:83:da:22:32:44:43:90:6e:20:
dd:e7:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:16 2026 by rpki-client