Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: 3ol9EnAtwWCqEUzcRF2OdRd5rltH1mn9/zHoJip6XTw=
Subject key identifier: BF:71:1D:5D:50:9A:A4:89:AB:81:1D:F5:B6:CF:17:04:49:AF:F2:06
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 019C88A8F1B9E06B1A73DF9DC3656C7C06A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 0AF8
Signing time: Mon 23 Feb 2026 04:01:38 +0000
Manifest this update: Mon 23 Feb 2026 04:01:38 +0000
Manifest next update: Tue 24 Feb 2026 04:01:38 +0000
Files and hashes: 1: Eej9gskQ6HpjrksLpwx0h-HAY8A.roa (hash: t+XOMLEKB4RSNhae5plY45B83yXeeY3zAfFByAEFTUI=)
2: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: fzyxaFhWMSzu+4NOP2YCYveACG8brmshyIBj9V4/oCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:88:a8:f1:b9:e0:6b:1a:73:df:9d:c3:65:6c:7c:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Feb 23 04:01:38 2026 GMT
Not After : Feb 24 04:01:38 2026 GMT
Subject: CN=bf711d5d509aa489ab811df5b6cf170449aff206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:cd:3a:97:d6:64:6a:3d:d0:09:a7:ab:fb:
5c:a6:5d:63:23:6b:38:1c:2b:dc:50:9b:55:e2:f1:
99:6c:a6:c4:63:84:aa:8b:8b:06:4e:4f:15:3a:d7:
e1:9f:10:89:eb:5e:29:ed:f7:ad:1c:44:ce:96:52:
d3:99:2b:29:d3:3e:81:30:64:a7:eb:5c:c2:70:e4:
a4:ee:7c:e2:92:7f:0d:db:57:6f:4f:50:07:4c:b4:
e9:40:67:52:aa:6c:04:a8:ee:65:f7:e0:66:bd:6f:
24:f4:91:eb:14:4b:1b:08:ba:2b:23:4f:97:a2:d8:
93:19:5f:e9:fa:2e:6d:f2:e6:d1:29:a3:05:d3:db:
80:69:41:80:27:7c:57:cb:3f:2e:b4:27:04:1d:1c:
67:09:3c:84:24:bb:65:76:71:18:6e:06:54:c3:d6:
e4:e0:e8:db:8d:72:a6:e3:4a:ea:69:28:ed:b1:38:
3b:22:b7:d5:fb:33:04:b7:ec:1b:3b:88:b4:9d:85:
46:07:b4:f6:19:25:14:87:3e:e1:62:c8:22:df:7f:
2f:fb:d5:21:86:05:71:6f:08:03:e3:17:e6:a2:e3:
a5:24:bf:67:13:82:7b:95:a7:34:ed:a4:83:1a:ba:
46:6a:18:55:48:da:96:cc:84:91:24:49:01:c0:42:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:1D:5D:50:9A:A4:89:AB:81:1D:F5:B6:CF:17:04:49:AF:F2:06
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:37:25:83:ff:34:1b:7c:84:83:39:bd:19:1a:d9:d2:e4:
31:00:c0:dd:c7:7a:a6:ee:7a:45:02:93:04:e3:f5:ac:b6:72:
7e:7e:44:e3:fc:2b:c4:b7:42:25:a4:85:52:03:81:19:48:5d:
08:e4:c0:ae:f0:ee:29:18:ff:7b:53:23:11:2b:3a:5d:c6:d1:
fc:73:f5:c7:fa:9e:73:01:88:3d:00:c7:5e:dd:80:6e:8e:1b:
69:06:46:df:21:05:1b:6d:11:fa:57:4b:6d:62:b0:a5:cb:e8:
9b:a3:e3:00:5f:f9:e3:44:4a:60:ae:d3:28:18:f9:de:cd:19:
dc:35:8b:1f:b0:b9:3a:c2:e0:e4:9c:57:84:cb:d2:fb:2e:0c:
3a:1e:8a:31:55:71:9a:e4:63:63:32:c3:f2:f2:3c:7f:d6:fb:
25:29:07:8c:64:2f:30:ef:5c:a7:87:e5:d4:6a:bd:db:6c:4e:
57:98:f1:67:93:39:c8:d6:54:29:c3:dc:58:93:82:98:dd:c9:
ac:d7:17:43:4c:89:8c:1e:e4:b5:8c:39:48:02:01:a1:41:d1:
50:60:32:35:4d:75:c9:6d:87:18:f5:2c:87:2e:ab:b7:cc:59:
e9:00:4c:25:6d:d3:dc:34:09:df:8a:ae:57:e1:0d:3a:3b:f9:
fe:bb:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:56 2026 by rpki-client