Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier: jTQVUsfWQZZz4VmdgrawDeDokeyyQp5rkX3sURp83J8=
Subject key identifier: 9E:99:CA:B5:A0:82:73:8E:72:07:BD:19:8D:12:23:14:61:AA:08:2B
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial: 019B7C38C4932501F00002F4263E614EA2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number: 0DCE
Signing time: Fri 02 Jan 2026 01:00:53 +0000
Manifest this update: Fri 02 Jan 2026 01:00:53 +0000
Manifest next update: Sat 03 Jan 2026 01:00:53 +0000
Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: +GjB8kRbOQf0iBrTH30yoIfvJtdM8gs5wXtAVKu8GFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:38:c4:93:25:01:f0:00:02:f4:26:3e:61:4e:a2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
Validity
Not Before: Jan 2 01:00:53 2026 GMT
Not After : Jan 3 01:00:53 2026 GMT
Subject: CN=9e99cab5a082738e7207bd198d12231461aa082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:c2:1a:02:f3:de:3a:d4:11:7a:d4:49:e2:
10:d5:95:d1:0b:5a:69:4d:b4:2e:53:fe:9b:d6:4b:
53:dd:e8:85:d7:8f:b9:5d:b5:ae:ab:89:f6:01:33:
52:ff:a0:13:e7:ba:71:2e:db:48:81:79:cd:08:37:
11:cc:e2:08:4a:dc:2b:e8:42:9c:1f:69:c1:61:b6:
a5:9a:54:17:d3:f7:17:fa:17:f6:78:2b:08:76:dc:
22:76:24:64:f5:42:7d:1d:06:58:37:c2:0a:d2:c1:
8b:44:4f:3b:32:bc:84:3f:ea:5b:e8:53:6b:c6:23:
75:72:b2:6a:66:bc:32:55:6a:a6:6c:fd:57:13:0c:
25:70:22:c0:31:44:47:16:4a:de:92:82:d0:3c:1b:
9f:90:4e:7b:0f:1d:65:6c:bd:3e:36:22:08:52:44:
0d:31:7a:11:8b:98:6a:b4:7f:c3:80:a4:f4:df:10:
fd:1d:df:08:aa:35:1b:22:1b:c1:27:ad:6d:ab:4f:
2b:48:71:ec:01:10:ea:6c:1e:64:5e:54:76:51:85:
07:f4:e6:2b:c8:e1:b8:c5:ae:43:e5:b7:31:d2:5d:
ad:a3:18:49:d9:91:0a:6d:77:1c:3c:79:f1:72:ba:
12:f4:6f:51:7c:ba:04:34:de:d9:ab:a3:af:12:75:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:CA:B5:A0:82:73:8E:72:07:BD:19:8D:12:23:14:61:AA:08:2B
X509v3 Authority Key Identifier:
keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:13:0a:0b:1f:6e:27:79:a7:14:68:2e:eb:b7:1b:40:67:bb:
1f:6a:fb:db:da:73:f1:fd:98:32:92:bc:5f:be:4f:7e:c1:85:
91:12:2c:e9:f7:3b:ab:c8:59:6e:d7:83:a4:54:6e:fe:31:51:
9c:00:98:e3:95:ec:07:eb:ce:56:3e:cc:20:4f:d9:af:52:1e:
82:7a:52:59:34:6c:96:d3:88:f2:d5:da:47:57:86:bf:25:b1:
99:be:a6:b8:26:0e:77:f0:68:78:d5:aa:e0:21:45:79:df:78:
66:ed:fd:b6:f3:3e:48:d8:c8:84:0e:5e:39:2b:f4:2d:44:29:
3b:73:70:b5:82:53:01:04:7b:63:6b:f5:80:5d:71:7a:b6:bc:
67:be:40:6d:df:9b:a0:53:3d:f9:30:fe:50:a0:aa:6a:4e:74:
65:84:74:c8:3d:0a:62:8e:bc:f8:49:1c:10:9a:f5:74:ae:68:
c9:74:10:4f:35:33:55:45:dd:79:4d:98:8d:9b:57:af:ae:5b:
54:14:b6:b3:fe:89:59:a3:7a:26:2f:50:25:82:06:71:b8:9d:
35:e5:e7:2a:2a:4d:04:45:55:0b:da:ce:03:24:56:92:42:4d:
1e:bc:53:b6:22:a4:b2:31:44:43:c6:a1:93:ae:c5:94:50:50:
ad:47:8e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt8OMSTJQHwAAL0Jj5hTqL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmYxM2E2N2YyMjVjM2MyYTYwNjY1OGMyMzk2NWI4MTkx
ZDQwMDgwHhcNMjYwMTAyMDEwMDUzWhcNMjYwMTAzMDEwMDUzWjAzMTEwLwYDVQQD
Eyg5ZTk5Y2FiNWEwODI3MzhlNzIwN2JkMTk4ZDEyMjMxNDYxYWEwODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHCGgLz3jrUEXrUSeIQ1ZXRC1pp
TbQuU/6b1ktT3eiF14+5XbWuq4n2ATNS/6AT57pxLttIgXnNCDcRzOIIStwr6EKc
H2nBYbalmlQX0/cX+hf2eCsIdtwidiRk9UJ9HQZYN8IK0sGLRE87MryEP+pb6FNr
xiN1crJqZrwyVWqmbP1XEwwlcCLAMURHFkrekoLQPBufkE57Dx1lbL0+NiIIUkQN
MXoRi5hqtH/DgKT03xD9Hd8IqjUbIhvBJ61tq08rSHHsARDqbB5kXlR2UYUH9OYr
yOG4xa5D5bcx0l2toxhJ2ZEKbXccPHnxcroS9G9RfLoENN7Zq6OvEnVjqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6ZyrWggnOOcge9GY0SIxRhqggrMB8GA1UdIwQY
MBaAFK//E6Z/Ilw8KmBmWMI5ZbgZHUAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQt
NmQyYjJiYTJhODhhLzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84ZjA2M2MtMTE5YS00N2EwLThiMGQtNmQyYjJiYTJhODhh
LzEvcl84VHBuOGlYRHdxWUdaWXdqbGx1QmtkUUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRMKCx9u
J3mnFGgu67cbQGe7H2r729pz8f2YMpK8X75PfsGFkRIs6fc7q8hZbteDpFRu/jFR
nACY45XsB+vOVj7MIE/Zr1IegnpSWTRsltOI8tXaR1eGvyWxmb6muCYOd/BoeNWq
4CFFed94Zu39tvM+SNjIhA5eOSv0LUQpO3NwtYJTAQR7Y2v1gF1xera8Z75Abd+b
oFM9+TD+UKCqak50ZYR0yD0KYo68+EkcEJr1dK5oyXQQTzUzVUXdeU2YjZtXr65b
VBS2s/6JWaN6Ji9QJYIGcbidNeXnKipNBEVVC9rOAyRWkkJNHrxTtiKksjFEQ8ah
k67FlFBQrUeOkg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:15 2026 by rpki-client