Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
File: odwGMOlglt5IItH1HvgMb_9UGRs.mft (raw, json)
Hash identifier: Xi4iXVpvnF50g1QPCyKppwPv6RyQpaG3NQ+ogtc9GdY=
Subject key identifier: C7:55:29:ED:05:91:90:13:3A:7B:C9:F5:B9:06:35:75:C7:D2:D6:3E
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 019D19114CB99F5059389CD0612E0A57AB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
Manifest number: 07CC
Signing time: Mon 23 Mar 2026 05:00:57 +0000
Manifest this update: Mon 23 Mar 2026 05:00:57 +0000
Manifest next update: Tue 24 Mar 2026 05:00:57 +0000
Files and hashes: 1: 3tkw1-qcgk_89pGe7YNJR2YIKSg.roa (hash: 8wvPCey8xezOzLXtvtokdiPSl8fhacZDXdIFAhw8g4o=)
2: odwGMOlglt5IItH1HvgMb_9UGRs.crl (hash: /t346zqdOSsolcdtuzbKRZKPtgoL3AfqmFl/K3GligM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:11:4c:b9:9f:50:59:38:9c:d0:61:2e:0a:57:ab:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Mar 23 05:00:57 2026 GMT
Not After : Mar 24 05:00:57 2026 GMT
Subject: CN=c75529ed059190133a7bc9f5b9063575c7d2d63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:62:f6:c4:ef:55:8d:a9:00:c4:79:00:dd:86:
db:78:d5:f5:65:24:2c:55:e4:31:45:40:f4:ec:cd:
c5:c9:2f:a1:33:52:2b:fb:f3:d6:5d:ca:3f:a8:3e:
6f:e3:ad:c5:2f:25:be:b1:77:c4:78:bb:4b:b2:ed:
12:0e:90:ba:4d:b6:00:5b:ef:a2:cc:fd:9d:0b:ef:
be:b2:23:b9:8a:f1:b3:9d:ab:21:6c:4f:30:39:cf:
93:82:b4:7b:12:aa:e9:ae:5d:1e:54:00:9a:e7:9a:
96:35:f0:bb:28:10:8a:af:fb:e4:c4:3d:d4:a0:a0:
bc:a7:e8:11:2d:e6:e8:68:44:39:20:dd:6d:25:34:
fe:f7:dc:cc:43:15:7f:6a:3b:be:29:23:49:bd:39:
b6:85:c4:4b:7f:e4:cf:ae:de:fe:3f:2c:2a:41:1f:
ed:6d:b7:2d:24:07:b3:88:4b:20:7e:57:4a:d0:06:
36:1a:22:cd:8b:d0:73:e9:74:dc:66:14:fc:00:35:
8a:27:19:4e:9b:ea:11:7a:48:38:c1:c0:1d:7a:db:
98:f2:0d:81:d0:76:4a:c6:cc:df:63:07:82:6e:3d:
61:98:a7:98:65:4f:e5:9a:e2:4a:27:82:d2:56:33:
cb:29:56:3b:64:45:93:7d:66:01:bd:fe:4f:7b:c9:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:29:ED:05:91:90:13:3A:7B:C9:F5:B9:06:35:75:C7:D2:D6:3E
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:d5:e2:a0:a1:72:18:0a:ca:14:1d:3c:91:e2:af:8e:ba:
07:46:a9:2f:17:dc:01:07:88:98:ec:96:30:a9:f8:b3:ed:62:
88:4d:4c:38:a5:86:48:0c:24:10:38:b4:ab:f0:85:a2:62:92:
a5:70:7c:60:1f:9e:09:b6:56:6c:63:45:59:52:07:08:0a:3d:
e6:42:c9:be:bd:18:5d:05:7e:46:2d:64:b8:8d:da:23:6e:7b:
01:ae:23:17:47:3d:5e:62:5a:31:65:cd:0b:94:39:c3:ad:61:
b2:bd:e9:8a:82:49:2e:26:ff:b2:6a:82:90:4b:f2:84:51:f7:
e6:6c:8a:9e:e3:ca:77:af:af:05:a4:92:d0:bb:03:d5:08:68:
90:9b:52:f8:37:d5:35:b3:a4:00:b3:96:5b:b2:ad:e6:d3:fb:
9d:1b:7a:f5:e3:b5:60:96:20:74:c0:88:f3:ff:b6:f9:aa:e6:
32:94:25:f6:53:f5:81:e7:15:2e:c8:02:e3:e7:1e:f9:ab:52:
2e:b6:bc:e1:6b:bf:3b:f4:8a:d0:3a:de:80:92:78:44:36:57:
87:70:52:6d:f0:56:ca:0f:52:73:9c:68:0e:63:e7:6d:d7:ee:
b6:5b:01:b7:47:a8:1e:90:c4:01:ff:af:9f:ba:35:c0:ea:77:
ac:1a:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:08 2026 by rpki-client