Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: jKiIEivgD5Gxy7EIHghBkNWc3e8sV7IaWdMWtSFEyyM=
Subject key identifier: D1:41:7F:5C:18:FF:3D:82:B0:FD:B1:86:B0:DB:94:23:C4:7A:19:43
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 019D19ECFB95DCED8B2227D3871AF7311099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 07CA
Signing time: Mon 23 Mar 2026 09:00:54 +0000
Manifest this update: Mon 23 Mar 2026 09:00:54 +0000
Manifest next update: Tue 24 Mar 2026 09:00:54 +0000
Files and hashes: 1: aMebyeYsCSmSS_1lFCfJ1iL_LRc.roa (hash: JMJQMDh4awwPLboVZjlFyeGOEIJWV3eJSMK2QvujR/0=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: 0jTQ/7S69pfCiu+3FC6Rend9tnXZmy8Jia8laj0lAno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:ec:fb:95:dc:ed:8b:22:27:d3:87:1a:f7:31:10:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Mar 23 09:00:54 2026 GMT
Not After : Mar 24 09:00:54 2026 GMT
Subject: CN=d1417f5c18ff3d82b0fdb186b0db9423c47a1943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:4d:a8:0d:b6:71:8c:4d:ff:9b:00:e6:b4:
16:e1:68:71:93:84:5f:49:64:a0:76:c2:d4:b4:62:
4c:d9:73:7e:69:af:ac:31:b9:f3:54:f0:aa:63:e8:
2d:f9:59:58:dc:d1:c5:56:4e:9a:5f:19:d4:ca:33:
0e:7a:09:28:7a:c9:f2:68:c8:06:4d:0c:71:b9:1d:
55:c4:83:30:f7:c7:2a:f8:55:41:65:13:d1:a0:50:
d0:28:56:39:ac:9e:7b:34:f0:ce:fe:97:61:7f:d3:
03:35:43:d3:28:a2:95:66:97:e2:5a:ae:cc:41:64:
95:f2:e5:f4:8f:c5:a6:07:79:84:2e:04:d6:14:30:
88:84:6b:36:f6:3d:8c:1e:4a:53:f9:4a:79:3e:d7:
a6:e2:50:14:47:58:c3:ad:3b:be:32:a6:12:38:fa:
54:da:6f:13:1d:02:7f:9d:15:5e:74:d9:af:34:95:
b4:ca:b1:3c:73:73:0e:dc:24:c9:35:87:6a:36:ba:
6f:77:21:2d:27:7e:18:5e:2a:f0:1d:42:a9:df:c5:
8d:32:06:e8:b7:a5:d1:36:c6:e6:75:53:f1:aa:71:
d7:b5:4e:77:3b:9d:68:57:16:6e:8e:33:3d:06:92:
e6:3e:c3:12:c2:1f:77:79:bf:ab:d9:b4:bb:9b:0f:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:7F:5C:18:FF:3D:82:B0:FD:B1:86:B0:DB:94:23:C4:7A:19:43
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4c:38:41:ca:ff:87:d4:fb:1d:56:96:c2:35:e8:d9:a3:2f:
08:b0:f2:0c:65:35:5e:48:c4:bd:e8:a0:80:5f:d5:12:f7:1f:
34:0c:32:11:ea:81:94:d7:1e:86:13:10:c1:6c:df:d3:95:35:
05:a4:80:d1:47:87:d6:03:d5:ef:6d:c5:67:92:b0:60:fe:05:
a1:92:70:e7:23:a2:bc:a1:48:d0:a2:77:c0:af:83:db:60:95:
69:44:30:76:9c:ed:97:7a:88:e6:9d:dc:a9:3c:9e:38:ce:1e:
b2:5a:04:cc:43:aa:f6:fc:7b:ab:e2:d4:39:60:2c:6a:b5:1c:
e8:b6:3f:3b:d9:ec:44:e6:03:08:de:c9:ad:bf:0c:7e:5f:b5:
aa:42:1c:d5:02:81:66:a1:b8:13:3e:fa:93:35:5e:72:e5:58:
32:03:dd:fb:93:bc:c0:1f:74:77:5b:77:71:db:12:d9:a3:5c:
bc:0c:35:d8:f1:14:ef:5d:96:d5:b9:73:53:21:88:53:85:8b:
49:66:8e:49:c7:40:a3:a1:8e:ff:a4:11:02:1d:fa:de:8a:af:
12:3f:f4:d4:b4:f0:0c:72:86:87:2c:bc:bb:78:67:13:d7:92:
24:5b:3c:58:72:81:c8:1b:15:90:8f:d4:42:0b:3b:6d:96:9c:
e0:4e:d6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:01:12 2026 by rpki-client