Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: igyLbziXDcJpqCeWkeDC9rOpMJInxAurP+Toy4GSv8g=
Subject key identifier: 01:E5:54:34:A0:BD:16:53:32:44:42:9D:88:F8:FF:54:B3:A3:E6:2F
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019D74E99F12EC1E656AFA5E4CFD42AE5E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 07A7
Signing time: Fri 10 Apr 2026 01:02:40 +0000
Manifest this update: Fri 10 Apr 2026 01:02:40 +0000
Manifest next update: Sat 11 Apr 2026 01:02:40 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: 377kZkb4FkqjuLNuBPS7p6SwBOzpgJBYIQoWc9yN4qg=)
2: qnaI3dSUo6JkKXowYAsIMeMpnOc.roa (hash: dUT0p+f2BUwnddx9s697e9AmQEvx5OAEb+TGVaVGOZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:e9:9f:12:ec:1e:65:6a:fa:5e:4c:fd:42:ae:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Apr 10 01:02:40 2026 GMT
Not After : Apr 11 01:02:40 2026 GMT
Subject: CN=01e55434a0bd16533244429d88f8ff54b3a3e62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:c5:51:dd:28:53:48:4b:b9:35:8b:30:ed:
28:ca:92:c8:1a:16:cb:89:78:f8:2d:65:8e:43:56:
e7:f3:18:d6:3d:4c:b6:51:6f:b1:b4:5b:a9:76:39:
40:64:37:51:ce:d6:22:1a:35:f4:cd:7c:81:e2:aa:
1f:40:43:59:a3:95:82:b8:d8:8f:ba:80:80:ea:a9:
32:bd:4e:94:fe:95:29:a8:a8:4a:e0:7b:37:b4:0c:
f3:c6:ee:19:fc:0c:51:45:4c:e9:03:3d:63:da:12:
d3:4f:7d:47:4e:fa:5e:bb:7a:b2:df:2b:b7:4d:ef:
fb:9c:ed:a3:4d:00:e4:7b:a9:45:12:63:a3:85:42:
1d:da:33:76:33:95:d2:de:29:cf:45:6e:f1:c6:db:
a3:74:6f:a4:58:ba:99:ef:ff:7b:e0:61:e1:37:f3:
08:0b:37:5d:d7:ae:02:e6:8a:2d:5e:ab:62:35:bf:
fc:c7:fe:df:bd:b9:85:be:26:25:50:c0:cf:ee:13:
e1:97:ba:03:30:0a:bb:dd:24:81:cc:43:6d:5e:22:
ae:6f:65:96:47:fe:76:d9:85:e3:ec:8e:50:2d:81:
08:9f:e1:28:36:4d:68:c2:e2:66:a1:b1:26:10:95:
3b:09:b9:91:88:45:bd:24:64:99:f3:8f:8f:b6:f3:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:54:34:A0:BD:16:53:32:44:42:9D:88:F8:FF:54:B3:A3:E6:2F
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6f:a9:a1:06:9b:59:dd:08:2f:cc:a1:dd:15:5f:bb:2f:7c:
4a:a4:ae:46:34:5a:c9:28:23:ef:d1:e4:ab:87:de:70:3b:d0:
72:c0:2c:f4:9a:58:ed:d0:5c:4e:a6:68:ee:32:4a:f5:dc:c6:
21:1f:02:b6:42:6f:ab:07:c5:6a:6e:2a:bf:2f:da:6c:48:b3:
f9:e2:8a:62:7a:3d:5e:a7:54:39:78:56:35:05:90:e0:34:29:
f2:a5:87:6f:8f:25:6e:d6:6e:3c:25:fa:55:77:a0:68:fc:47:
8b:a3:07:fd:f0:6c:60:d1:21:e6:98:7b:d9:ac:a4:f2:4e:d9:
3c:5b:0b:e5:7f:27:9f:ff:a1:4a:40:59:b4:76:9d:1f:0b:a5:
d3:d5:39:b0:33:e0:e5:b2:0f:e6:62:56:ea:9d:a8:49:34:46:
dc:99:a0:b5:c4:fc:a6:bd:3e:ff:3f:05:51:76:44:ea:e9:5d:
48:08:9a:c3:ea:bf:ad:c6:f8:ed:48:fb:96:d3:0e:0c:21:38:
11:fa:32:0c:be:fa:76:01:08:bf:24:0f:43:62:f3:b3:26:cd:
3a:e1:d6:89:df:fc:14:a4:78:e5:02:8f:40:a8:be:d7:e3:46:
cf:74:4b:4e:b9:2c:c7:d2:b0:50:5f:fa:ec:1a:a5:fe:7c:fd:
49:5f:34:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ106Z8S7B5lavpeTP1Crl5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjYwNDEwMDEwMjQwWhcNMjYwNDExMDEwMjQwWjAzMTEwLwYDVQQD
EygwMWU1NTQzNGEwYmQxNjUzMzI0NDQyOWQ4OGY4ZmY1NGIzYTNlNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug/FUd0oU0hLuTWLMO0oypLIGhbL
iXj4LWWOQ1bn8xjWPUy2UW+xtFupdjlAZDdRztYiGjX0zXyB4qofQENZo5WCuNiP
uoCA6qkyvU6U/pUpqKhK4Hs3tAzzxu4Z/AxRRUzpAz1j2hLTT31HTvpeu3qy3yu3
Te/7nO2jTQDke6lFEmOjhUId2jN2M5XS3inPRW7xxtujdG+kWLqZ7/974GHhN/MI
Czdd164C5ootXqtiNb/8x/7fvbmFviYlUMDP7hPhl7oDMAq73SSBzENtXiKub2WW
R/522YXj7I5QLYEIn+EoNk1owuJmobEmEJU7CbmRiEW9JGSZ84+PtvN3iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHlVDSgvRZTMkRCnYj4/1Szo+YvMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdW+poQab
Wd0IL8yh3RVfuy98SqSuRjRaySgj79Hkq4fecDvQcsAs9JpY7dBcTqZo7jJK9dzG
IR8CtkJvqwfFam4qvy/abEiz+eKKYno9XqdUOXhWNQWQ4DQp8qWHb48lbtZuPCX6
VXegaPxHi6MH/fBsYNEh5ph72ayk8k7ZPFsL5X8nn/+hSkBZtHadHwul09U5sDPg
5bIP5mJW6p2oSTRG3JmgtcT8pr0+/z8FUXZE6uldSAiaw+q/rcb47Uj7ltMODCE4
EfoyDL76dgEIvyQPQ2LzsybNOuHWid/8FKR45QKPQKi+1+NGz3RLTrksx9KwUF/6
7Bql/nz9SV80Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:19 2026 by rpki-client