Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: d4lrALOcJRCw+G50rbAYI6zgEjhVEyZTlU/ZXVISIrs=
Subject key identifier: E3:7F:F3:18:59:B7:C2:61:20:27:5A:03:68:54:A1:C9:92:4F:F2:B6
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 019CDC5726B4C95ED7465FBB0E5AC056FA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 06EE
Signing time: Wed 11 Mar 2026 10:00:24 +0000
Manifest this update: Wed 11 Mar 2026 10:00:24 +0000
Manifest next update: Thu 12 Mar 2026 10:00:24 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: Z40NNi9X+CrShDcY5G6nowtpLjfJiqvJa9Vtv0WfSsQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:57:26:b4:c9:5e:d7:46:5f:bb:0e:5a:c0:56:fa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Mar 11 10:00:24 2026 GMT
Not After : Mar 12 10:00:24 2026 GMT
Subject: CN=e37ff31859b7c26120275a036854a1c9924ff2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:32:7c:cf:e5:84:74:d3:78:1d:c5:db:47:
19:20:04:bb:17:0c:c1:30:a6:42:cc:46:17:5c:23:
3f:59:c1:e5:e9:d8:f8:39:01:d5:0f:56:4e:80:8f:
56:5e:b6:0b:8f:f6:52:56:d4:bf:19:59:60:a9:d9:
f4:f8:e4:6f:9a:47:75:3a:34:23:c2:9a:9f:81:ee:
09:f3:91:cf:4a:f8:08:d6:6b:7a:62:cb:8a:e5:78:
84:ad:cf:a5:6c:ce:4d:b8:33:36:e8:ab:40:56:75:
cd:c5:ea:f7:81:7b:10:b8:af:11:58:78:24:da:de:
d1:93:5b:44:de:bd:c9:60:8d:f3:ff:20:47:ae:8e:
3c:ca:5d:7f:5f:0b:39:8f:72:01:23:a4:f7:c1:4e:
1c:53:40:e3:f9:e7:26:50:15:0b:57:62:df:12:df:
ec:19:9b:73:ad:bd:fc:61:c0:37:15:0f:56:04:0b:
06:e0:1b:31:ca:ec:f7:69:c8:e5:bb:23:26:17:d3:
c6:e3:d6:b5:29:46:7f:ea:b6:42:d8:b0:90:47:82:
57:fa:c2:17:9a:0c:3d:7a:87:d7:f3:bb:e0:ac:22:
13:3a:26:f6:6b:0c:64:db:c2:a4:08:43:ad:a3:bb:
71:9c:7e:09:36:24:4e:94:d3:e3:ec:3c:58:66:a9:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:F3:18:59:B7:C2:61:20:27:5A:03:68:54:A1:C9:92:4F:F2:B6
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cb:fd:31:02:bf:7c:eb:b9:67:fa:13:03:43:66:59:df:6d:
07:fd:a1:86:c8:85:3f:e7:47:d2:88:f4:e8:c0:a5:aa:21:bc:
56:7c:80:08:21:a5:5b:f5:91:8c:aa:60:9f:8f:fc:18:d6:9d:
6e:ee:d0:85:59:c3:a4:b9:00:9d:ff:01:8e:f6:58:92:cd:58:
14:2c:dd:78:a9:77:3a:95:ca:63:ea:30:71:62:c8:a6:05:22:
da:92:8a:4d:e0:82:09:9c:7d:68:8f:ba:a5:f1:5f:b3:69:74:
e7:17:b2:c5:92:e4:8c:b8:fb:e8:f4:12:0c:f5:84:d6:9e:fd:
13:f9:96:18:b6:b5:f2:e1:64:1f:58:c5:0e:12:00:b2:c7:b9:
24:8d:ae:5c:c5:a4:07:1d:53:f8:80:e1:e5:22:d8:b0:c8:97:
88:60:40:23:46:e0:bf:33:24:b9:00:e8:61:82:74:a9:32:83:
c6:cd:e2:82:15:80:0c:e5:e0:b0:70:1f:f3:ea:6a:98:8f:a0:
f7:6c:c8:5d:4c:dc:34:e1:47:5b:c3:4e:c5:24:96:a0:63:49:
65:c5:aa:5e:88:ad:a1:7c:d9:e7:73:9e:6b:90:54:2d:43:ec:
fa:ff:b3:19:60:67:3a:42:71:64:93:87:7c:64:e3:a8:fa:ff:
79:c4:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:50 2026 by rpki-client