Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
File: Y-ftmpXgsiN2kMdL_njP7eLETnw.mft (raw, json)
Hash identifier: S4CdNAgRN/IuLVEIiha5o3FMDFvU3F9tuxFhNfyCaww=
Subject key identifier: C6:1F:EB:2E:15:56:14:4A:A2:B1:53:4A:09:8F:90:CD:60:33:67:FA
Authority key identifier: 63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
Certificate issuer: /CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Certificate serial: 019C9250B38F59F50FA8A90F7AF4DEA469B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
Manifest number: 0B8F
Signing time: Wed 25 Feb 2026 01:01:28 +0000
Manifest this update: Wed 25 Feb 2026 01:01:28 +0000
Manifest next update: Thu 26 Feb 2026 01:01:28 +0000
Files and hashes: 1: Y-ftmpXgsiN2kMdL_njP7eLETnw.crl (hash: bo4dHVwDtMaehnwtqy386710I3skuuHi6m28zHRht0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:92:50:b3:8f:59:f5:0f:a8:a9:0f:7a:f4:de:a4:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e7ed9a95e0b2237690c74bfe78cfede2c44e7c
Validity
Not Before: Feb 25 01:01:28 2026 GMT
Not After : Feb 26 01:01:28 2026 GMT
Subject: CN=c61feb2e1556144aa2b1534a098f90cd603367fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:4c:c5:41:77:d8:9d:89:b1:b2:4a:58:2f:
c1:f8:a7:7e:97:39:58:08:7e:67:b4:bb:2b:69:c3:
3f:cf:6e:6b:9c:af:88:51:7e:cd:c1:ba:77:80:21:
21:ac:24:65:10:49:3c:42:cd:35:7a:41:4c:33:1b:
49:6d:0d:7a:75:e5:24:77:03:f3:ed:21:e3:85:9b:
d1:9a:9e:6d:b6:60:17:cf:85:d6:13:e8:ed:fe:69:
0f:85:7e:fa:c7:c9:63:5e:4f:df:e9:f3:0b:b5:2b:
31:05:e8:5f:e6:d1:37:82:07:0a:af:06:2d:12:2d:
9c:b5:d5:9c:12:bb:02:91:da:c0:66:e9:76:13:2e:
33:e2:31:e2:30:71:f3:67:34:88:16:27:8a:f2:bf:
b8:59:99:42:1b:23:25:4b:3f:02:73:92:a4:6e:1d:
d3:db:db:93:d9:8d:b6:23:c2:39:d0:db:59:62:9c:
93:c4:96:78:a4:27:f7:eb:61:6a:0c:82:fb:0d:f6:
3e:67:87:9e:b3:2e:bb:31:14:1a:3d:02:5a:d5:f8:
d7:a9:d0:f8:9d:0b:0a:65:91:9d:d1:f0:66:a7:ff:
e5:41:15:d9:c4:ea:80:b3:24:f4:2a:d7:25:58:86:
05:0d:e1:54:e8:8c:de:31:39:82:6e:62:93:b7:b9:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:EB:2E:15:56:14:4A:A2:B1:53:4A:09:8F:90:CD:60:33:67:FA
X509v3 Authority Key Identifier:
keyid:63:E7:ED:9A:95:E0:B2:23:76:90:C7:4B:FE:78:CF:ED:E2:C4:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-ftmpXgsiN2kMdL_njP7eLETnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f0c914-e83f-493a-8b07-19b2d41bea79/1/Y-ftmpXgsiN2kMdL_njP7eLETnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a1:46:4a:be:e2:01:07:50:92:f9:28:e0:98:6d:26:0f:9c:
86:74:65:b7:37:e1:76:eb:4d:7f:f3:72:ea:b7:56:b9:10:5b:
9b:7d:a7:f0:f1:f0:23:30:04:f1:e9:7c:d9:db:a9:cb:c6:ad:
57:45:9e:00:cb:07:a5:7f:5d:d8:d8:0d:62:e0:27:4a:4a:81:
fc:82:78:f0:cb:40:6a:cf:97:0f:f4:c0:d9:b1:50:76:de:21:
c9:37:f2:af:35:68:ba:b0:58:75:d1:d2:bd:2d:e8:5c:62:46:
8b:9b:c8:f3:5b:ab:0f:17:48:55:4d:09:7c:b8:7e:2e:21:2a:
69:2e:17:93:61:2d:82:99:91:f8:9f:de:93:ec:27:f0:f0:6f:
a1:f8:17:85:75:58:80:0b:a3:56:ef:26:47:c1:68:8d:86:4d:
c8:25:65:3e:63:24:4c:35:6b:18:93:25:6d:28:36:39:d7:fb:
16:d8:d0:c9:39:a1:73:7e:2c:bb:07:51:d6:83:42:d7:a0:51:
05:26:34:13:58:c6:9c:44:1e:c4:3e:1f:a1:2f:4d:83:00:84:
52:88:15:49:80:bb:04:e6:a6:7f:33:34:c9:64:78:0c:ee:46:
4a:47:bd:26:4a:1a:c2:36:e5:8d:09:84:4c:60:12:d8:f9:cd:
80:ce:27:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZySULOPWfUPqKkPevTepGm1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTdlZDlhOTVlMGIyMjM3NjkwYzc0YmZlNzhjZmVkZTJj
NDRlN2MwHhcNMjYwMjI1MDEwMTI4WhcNMjYwMjI2MDEwMTI4WjAzMTEwLwYDVQQD
EyhjNjFmZWIyZTE1NTYxNDRhYTJiMTUzNGEwOThmOTBjZDYwMzM2N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+JMxUF32J2JsbJKWC/B+Kd+lzlY
CH5ntLsracM/z25rnK+IUX7Nwbp3gCEhrCRlEEk8Qs01ekFMMxtJbQ16deUkdwPz
7SHjhZvRmp5ttmAXz4XWE+jt/mkPhX76x8ljXk/f6fMLtSsxBehf5tE3ggcKrwYt
Ei2ctdWcErsCkdrAZul2Ey4z4jHiMHHzZzSIFieK8r+4WZlCGyMlSz8Cc5Kkbh3T
29uT2Y22I8I50NtZYpyTxJZ4pCf362FqDIL7DfY+Z4eesy67MRQaPQJa1fjXqdD4
nQsKZZGd0fBmp//lQRXZxOqAsyT0KtclWIYFDeFU6IzeMTmCbmKTt7nq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYf6y4VVhRKorFTSgmPkM1gM2f6MB8GA1UdIwQY
MBaAFGPn7ZqV4LIjdpDHS/54z+3ixE58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDct
MTliMmQ0MWJlYTc5LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMGM5MTQtZTgzZi00OTNhLThiMDctMTliMmQ0MWJlYTc5
LzEvWS1mdG1wWGdzaU4ya01kTF9ualA3ZUxFVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKFGSr7i
AQdQkvko4JhtJg+chnRltzfhdutNf/Ny6rdWuRBbm32n8PHwIzAE8el82dupy8at
V0WeAMsHpX9d2NgNYuAnSkqB/IJ48MtAas+XD/TA2bFQdt4hyTfyrzVourBYddHS
vS3oXGJGi5vI81urDxdIVU0JfLh+LiEqaS4Xk2EtgpmR+J/ek+wn8PBvofgXhXVY
gAujVu8mR8FojYZNyCVlPmMkTDVrGJMlbSg2Odf7FtjQyTmhc34suwdR1oNC16BR
BSY0E1jGnEQexD4foS9NgwCEUogVSYC7BOamfzM0yWR4DO5GSke9JkoawjbljQmE
TGAS2PnNgM4nAQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:47 2026 by rpki-client