Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: 1kFEFZWIYkejrxmUm61CEKFQkJlMok1R1O6wukyJdbc=
Subject key identifier: 0F:3D:DF:42:12:7D:88:33:07:63:3C:69:18:2A:4B:E3:EF:E2:9B:4E
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 019C1B38D98947A249AD0D4B47719BE853FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 0438
Signing time: Sun 01 Feb 2026 22:00:36 +0000
Manifest this update: Sun 01 Feb 2026 22:00:36 +0000
Manifest next update: Mon 02 Feb 2026 22:00:36 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: ijiXc2eb3YjyKpsZGeRc6KBc0hxlmPn6tA5dAhFndiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:38:d9:89:47:a2:49:ad:0d:4b:47:71:9b:e8:53:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Feb 1 22:00:36 2026 GMT
Not After : Feb 2 22:00:36 2026 GMT
Subject: CN=0f3ddf42127d883307633c69182a4be3efe29b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:0e:ca:f9:ab:37:ca:58:08:89:51:67:32:
d7:b9:17:e1:99:4e:b5:b1:b2:64:6b:9d:1e:55:47:
c3:10:66:8c:64:a1:7a:8e:bc:cc:f4:a6:36:fe:19:
7d:00:6f:2f:13:26:14:a2:f3:36:bf:b6:d6:10:64:
5f:21:84:8c:6b:8f:6c:be:d9:ec:10:20:e5:79:47:
fd:c5:34:f3:a4:45:70:2c:54:f5:2e:9c:9f:7a:79:
9e:31:af:10:8f:99:b1:46:28:1f:fa:9c:7d:df:61:
49:f4:a0:7d:d7:74:dd:7f:f7:fc:3a:3a:b7:cb:65:
eb:40:bf:b1:bf:c6:ce:b8:5e:84:78:04:8f:7b:87:
35:9c:6a:b2:32:dc:ff:03:e4:ff:c7:17:fc:c6:91:
71:bf:50:8b:e8:e3:a1:2f:b0:8f:21:43:74:41:21:
3c:62:24:e5:f9:c9:d7:d5:32:ca:77:1e:b1:8e:0f:
d7:db:69:c1:70:6b:dc:b6:77:80:e6:f2:bd:9f:6b:
11:b3:e5:93:05:e7:45:70:94:c5:ac:88:fc:69:65:
a1:80:88:c7:b1:4e:10:b9:fd:aa:89:8b:00:8d:c1:
cf:85:c7:c5:af:42:b2:59:5d:be:76:ef:22:32:f0:
95:63:1f:e5:60:43:bd:d0:c0:6d:0a:4d:4c:52:a0:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3D:DF:42:12:7D:88:33:07:63:3C:69:18:2A:4B:E3:EF:E2:9B:4E
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:df:42:77:08:14:fd:df:3c:be:bf:f7:3e:c9:57:44:c3:6b:
3e:45:25:bf:43:64:da:13:1c:8c:13:5a:04:cf:c7:c5:83:c8:
c6:4c:94:2f:cc:7b:6e:18:d1:b3:24:0f:c4:c7:92:eb:f0:7c:
e6:51:72:73:c0:5b:dd:37:2f:50:1e:d4:f4:31:b8:58:43:ad:
a9:f5:f3:f9:a9:21:cd:66:b1:c4:7d:09:b5:2d:2e:b3:81:fe:
e5:dc:c4:19:c6:a0:2b:d2:7a:0b:a4:8c:60:e5:52:c3:c9:6d:
c4:be:be:3c:cb:e5:99:3c:b5:10:0e:9e:71:b0:1b:29:7f:04:
e3:53:24:4c:8e:a0:43:df:f2:0e:dc:c1:cb:e9:31:79:84:ed:
70:cd:2c:69:1f:6e:51:db:e9:39:37:40:2c:94:6a:c1:79:50:
d1:f2:78:34:3a:7a:73:f9:91:f7:8a:b9:27:15:cc:28:fb:b1:
bd:4e:e9:31:5c:ea:97:b0:c7:10:b0:64:43:a7:5c:be:08:44:
17:37:b5:02:54:3d:8e:7b:3a:97:2c:37:67:5c:76:29:57:16:
dc:15:71:96:2d:17:f4:95:42:a9:c3:1d:79:74:f5:f0:e8:06:
35:c5:2f:e2:a9:7e:05:0b:70:7e:d1:7f:d2:3f:8f:d3:b3:40:
38:83:d2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:42 2026 by rpki-client