Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: K9GHkmBKt2hhL5o8B7Xk+bTMB8P/qEWTSOnNXII5PyA=
Subject key identifier: 45:E4:53:14:AB:2A:1E:21:63:0D:D6:23:62:E0:E7:C9:72:15:15:E4
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 019BE3DCB86D1CFB94721056BDF71A529ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 17E1
Signing time: Thu 22 Jan 2026 04:00:51 +0000
Manifest this update: Thu 22 Jan 2026 04:00:51 +0000
Manifest next update: Fri 23 Jan 2026 04:00:51 +0000
Files and hashes: 1: BtJ-wtaE3NZ6-0XbD2DkhXY1rQU.roa (hash: 4ZFj/A3eE47Xk8okR+DUm5yvPcyLJX/IWCuVfkjRerE=)
2: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: kKr1AeHNdqQ6CJH49RhWnGCd8Ryd6VAcqCeOwK4iv0Q=)
3: xBPcvMY04Iz5pO7ag4j4JzJy6d8.roa (hash: hrIC3ZE6aLAF8bOv2982lAad+AAEAjlPEsc9wTm6AZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e3:dc:b8:6d:1c:fb:94:72:10:56:bd:f7:1a:52:9a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 22 04:00:51 2026 GMT
Not After : Jan 23 04:00:51 2026 GMT
Subject: CN=45e45314ab2a1e21630dd62362e0e7c9721515e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:85:c3:aa:b1:14:98:88:9b:f5:db:d5:ef:
88:f1:5b:db:fe:33:87:33:cc:1c:be:05:60:d5:62:
0d:b9:56:ad:7e:0b:71:1d:5f:ed:e5:fd:64:84:07:
ff:42:94:cf:4d:dc:84:e1:16:6d:bd:b4:d8:89:d8:
f2:d1:7a:14:65:5a:90:33:b9:ca:66:e6:c3:e0:d9:
10:14:bb:fe:c6:50:3e:83:b4:52:12:34:c9:13:18:
f4:04:fb:73:6d:a4:11:61:ef:df:18:bf:60:13:5a:
11:fc:de:0a:26:3c:2a:f7:44:09:f7:1b:9b:2b:42:
bd:05:06:61:ab:16:16:88:f0:53:d6:33:73:e1:1b:
8a:1b:67:e3:44:07:91:55:58:e5:0b:f9:35:03:c2:
47:16:e4:a4:6e:4e:e7:bb:63:c6:60:f0:04:d7:29:
db:24:09:fd:8e:df:26:c2:f0:ad:68:82:44:33:ef:
7b:da:62:43:ed:90:03:fe:af:a4:24:2d:91:fa:c0:
0f:30:e8:c9:1a:2c:78:2f:cc:1b:cf:70:e0:0d:29:
d9:cb:f7:53:bb:d1:03:f2:4b:45:4f:55:04:79:2b:
25:17:1b:cc:9b:60:5c:7d:0f:48:fe:83:d9:9a:0e:
57:75:c5:86:6b:84:30:b6:1d:d2:2c:67:9b:0b:04:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:53:14:AB:2A:1E:21:63:0D:D6:23:62:E0:E7:C9:72:15:15:E4
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:5f:a0:9c:62:44:16:fd:0f:49:b5:d6:0c:35:50:b8:09:
70:9e:24:9e:ad:b4:e3:39:dd:26:21:5d:40:3f:ff:bd:ef:73:
1c:7d:22:73:ed:5d:de:f0:c5:0f:90:9c:38:4f:a3:7f:d6:c2:
9e:c1:e4:e0:77:4d:a4:40:ca:06:27:f9:0d:35:39:97:fd:89:
11:bc:cc:22:30:f9:3c:e5:3e:53:ca:e1:09:dc:64:29:f0:39:
b8:d0:ee:e1:62:5a:ec:64:d8:57:63:68:cb:71:a5:c0:6f:3f:
77:3d:ba:b8:5c:8f:b0:51:d8:5a:74:56:b3:bf:f0:11:5d:10:
bc:66:4d:88:9d:ab:51:7f:1c:8d:2b:97:f9:0f:19:d9:dd:e3:
b4:9e:77:eb:3b:d2:cc:2f:4c:4c:8b:74:90:43:b0:ee:53:a5:
2b:52:7c:d0:4c:a1:95:0d:06:91:79:dc:39:85:6f:fe:d2:1e:
b9:17:29:c2:bd:23:fd:f2:2e:f6:76:a3:04:9d:96:51:17:74:
d3:43:0c:44:fc:24:d2:d5:20:12:9e:60:5f:c8:c2:1d:8f:37:
9d:f9:57:23:22:e4:f6:8e:4d:77:ef:a3:8f:fc:0a:1b:8c:bc:
58:44:65:0a:93:94:20:31:db:8a:cb:1a:fd:04:0c:bf:cb:3e:
64:ea:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:46 2026 by rpki-client