Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: eaL+1aMDe+myL8nObJFT37e8em+pXszcvl/2OjBFoKY=
Subject key identifier: FF:B3:91:C2:8C:39:FC:E3:7C:C4:58:33:F2:CD:55:1D:BB:A1:6B:F0
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 019BEA1670AC763D1400EB3FC633D65D353B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 17E5
Signing time: Fri 23 Jan 2026 09:01:37 +0000
Manifest this update: Fri 23 Jan 2026 09:01:37 +0000
Manifest next update: Sat 24 Jan 2026 09:01:37 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: Y4O9YrGiD+3lNeMtX5VRnTC5M9ItjigtWF2npVdV90I=)
2: pcZjrVkTsvtb8tsQk2phvquMKWo.roa (hash: MXWnpVcVVhwCOIu7cPAj2I88xk3BU47ZU2R9eknG7Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ea:16:70:ac:76:3d:14:00:eb:3f:c6:33:d6:5d:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Jan 23 09:01:37 2026 GMT
Not After : Jan 24 09:01:37 2026 GMT
Subject: CN=ffb391c28c39fce37cc45833f2cd551dbba16bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:ca:ff:d6:d1:98:40:dd:f1:0d:9c:e1:13:
d4:d4:75:a3:51:cd:4a:19:cd:13:1b:c8:48:f9:84:
22:b1:06:fd:be:c0:ed:61:5e:87:24:96:ef:78:6b:
62:7d:4f:a8:59:73:c3:67:29:71:bd:35:50:9b:ee:
24:8b:c6:6a:7e:83:c2:1c:e1:4e:d2:6c:03:a5:a5:
1a:f8:fe:25:0e:92:d7:36:13:a4:4c:10:d2:6a:41:
f6:e3:7b:b1:46:94:05:5d:5d:ae:5e:b3:f8:a9:ed:
26:b7:11:9d:8f:ee:50:7d:1b:88:0c:cb:0b:dc:50:
1b:b0:e8:06:ad:42:4f:d9:79:9e:80:f2:6e:39:cb:
0f:75:97:ab:fa:52:25:b0:9b:58:ef:7d:ed:bc:c8:
12:91:5b:56:8a:e0:ab:41:82:02:73:f6:a0:52:ca:
a2:f1:84:11:06:48:15:f6:d6:ec:03:75:a0:07:79:
01:39:ad:4f:79:8f:0a:eb:e9:0e:7e:8a:c5:9e:8d:
93:9d:59:8b:39:ac:b2:33:dd:22:ef:fc:82:a8:b6:
47:48:52:d8:f5:c0:c6:16:04:b8:bd:66:7a:8d:7e:
88:e0:a3:8f:3c:46:c3:bc:7d:e2:d8:64:40:9d:4b:
a8:ac:87:98:64:05:89:7c:2b:0a:bb:a9:90:b7:65:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:91:C2:8C:39:FC:E3:7C:C4:58:33:F2:CD:55:1D:BB:A1:6B:F0
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:49:1e:d2:57:b5:f7:18:67:b5:35:10:a0:31:bc:c0:24:b0:
b1:5a:49:6e:ed:35:64:b1:54:8b:3e:ff:ec:27:70:3b:b5:13:
3a:fc:54:ea:d5:ea:9d:65:f8:3d:8e:f0:b2:e1:d8:0f:35:1e:
a6:83:b7:0c:bf:40:01:58:78:97:0b:ef:dd:40:13:97:ce:05:
dc:ff:7e:64:f2:5e:bc:34:5c:ff:66:91:03:96:28:cc:0d:3b:
2a:1b:f3:72:72:71:00:76:a4:4d:21:36:44:f0:7c:f5:cc:a3:
ea:63:1e:b5:af:36:6b:f9:36:3f:5c:a5:8b:26:bf:92:f6:56:
b9:bc:dc:20:bf:4b:48:61:a4:fb:f1:4a:b1:0d:a8:50:55:a7:
9c:4f:8c:9f:aa:37:0d:f2:d8:79:14:ad:10:d9:06:ac:a4:f9:
c0:42:3b:13:c8:c4:f1:53:dd:ae:d5:b5:da:87:ec:aa:6b:55:
00:29:70:32:66:7c:5a:2a:ff:30:00:6b:04:df:94:4a:28:f6:
a8:d1:77:96:5b:01:2e:e5:59:93:11:af:e1:ab:ab:75:7d:50:
e6:e6:c9:1e:23:37:25:d3:9f:a1:70:9b:aa:ef:2e:3c:76:e2:
62:7a:a7:a8:28:5e:06:60:6d:27:50:b7:d4:80:d7:7c:ad:2d:
6e:56:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:56 2026 by rpki-client