Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier: XusMMWq7WB1IpCo+F7pw8O7w4BeQoTCPWZEFen4/nhs=
Subject key identifier: D5:91:34:21:94:79:73:C3:A0:A7:E4:F2:9D:C7:CD:DC:FB:82:B6:03
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial: 019BFF53D014CA6C56FE4CDCDF5C9C7BFF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number: 1225
Signing time: Tue 27 Jan 2026 12:00:41 +0000
Manifest this update: Tue 27 Jan 2026 12:00:41 +0000
Manifest next update: Wed 28 Jan 2026 12:00:41 +0000
Files and hashes: 1: EMQb1ehNu3j_7dRl1hEcmy2I1X0.roa (hash: r9MF1Sny4W9NzIge6lOagoY0iltbVPrI73iobB24DGE=)
2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: s5uWgdI5ip5wR3Kr3O/AQeM4OqwjpU/WtZSkmt4TfY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:53:d0:14:ca:6c:56:fe:4c:dc:df:5c:9c:7b:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Validity
Not Before: Jan 27 12:00:41 2026 GMT
Not After : Jan 28 12:00:41 2026 GMT
Subject: CN=d5913421947973c3a0a7e4f29dc7cddcfb82b603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:65:57:aa:55:50:29:3e:b6:26:2d:97:06:
5c:7a:30:90:fe:82:64:e3:f6:2a:05:5d:0d:69:65:
16:da:3d:d6:01:d4:6d:bd:01:32:61:7e:bc:e7:c9:
36:cb:3b:43:36:87:1a:c4:9a:05:a7:be:03:75:03:
9d:47:45:c8:5e:ad:5c:d0:dc:ab:fe:2c:ad:0f:4f:
6c:d9:6b:43:ec:64:78:12:16:45:e7:bc:77:6d:96:
65:6d:0e:e7:70:11:b6:26:be:fd:29:99:b2:35:bb:
d3:d7:21:c4:b0:17:5f:2b:60:7c:de:1a:0b:22:3f:
7f:7f:0f:02:f7:aa:6f:aa:9a:9b:e7:d6:17:4e:be:
b6:46:9d:b1:fc:61:03:40:14:e7:27:5b:db:33:a1:
fe:06:35:2b:72:f6:9e:24:35:25:cf:1e:a7:f2:95:
e3:d8:1d:6b:f3:13:5f:a4:c7:6b:7c:4a:d2:a5:96:
0f:c4:44:2d:bc:8a:5a:aa:46:ea:79:bd:e0:c6:95:
c1:f6:0e:f4:a9:00:26:06:66:5b:ae:52:b3:71:13:
21:cf:d6:91:78:39:fb:9a:bc:db:91:b3:32:0a:ef:
1a:b2:20:24:d5:54:6e:21:4c:40:46:75:ec:b5:bf:
84:19:15:2f:44:e8:fd:24:2f:7b:48:d5:8d:bc:54:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:34:21:94:79:73:C3:A0:A7:E4:F2:9D:C7:CD:DC:FB:82:B6:03
X509v3 Authority Key Identifier:
keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b3:45:0a:d3:c7:0a:53:23:fe:ba:5a:55:93:6a:27:4d:6d:
36:4a:e3:98:26:86:e1:19:c7:53:51:32:ff:ce:cc:1a:55:a8:
e0:2a:b9:2e:c3:12:31:be:f5:93:9d:13:6d:c3:ce:f2:3d:28:
d0:6f:1e:42:bb:19:7c:a7:da:36:d3:cb:89:bd:a1:d3:09:be:
c1:18:46:7a:2b:b5:ad:1d:e7:6a:26:ad:5e:d9:93:d1:f2:e6:
cc:d2:53:21:d7:c8:b6:1a:7d:fd:a2:2e:be:53:af:42:bb:5a:
91:4e:2e:bc:5c:f1:ee:f3:76:d5:f0:cb:0e:88:ce:a6:cf:de:
c8:d3:d8:cf:63:9f:2a:19:df:68:fa:43:87:52:38:1b:4c:32:
0d:d4:fb:35:4e:ba:e4:d9:25:95:d0:5b:68:69:1d:eb:fe:54:
84:fb:d5:aa:0a:5c:bb:cd:11:c0:9f:78:86:31:b2:0a:68:eb:
bd:94:e8:72:cb:66:a8:01:ea:a6:39:54:3c:50:ef:38:f1:a8:
25:8e:d4:4f:99:c0:30:9e:a7:5c:ae:80:69:56:93:c4:62:a2:
21:a5:80:07:e1:d7:b9:c6:25:62:7c:69:a6:cc:c2:8b:9d:b8:
5a:69:12:d0:0c:ce:a8:8e:82:e2:c2:90:ba:84:35:98:b5:13:
8b:8e:cd:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv/U9AUymxW/kzc31yce/9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0
ODU4NDMwHhcNMjYwMTI3MTIwMDQxWhcNMjYwMTI4MTIwMDQxWjAzMTEwLwYDVQQD
EyhkNTkxMzQyMTk0Nzk3M2MzYTBhN2U0ZjI5ZGM3Y2RkY2ZiODJiNjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVplV6pVUCk+tiYtlwZcejCQ/oJk
4/YqBV0NaWUW2j3WAdRtvQEyYX6858k2yztDNocaxJoFp74DdQOdR0XIXq1c0Nyr
/iytD09s2WtD7GR4EhZF57x3bZZlbQ7ncBG2Jr79KZmyNbvT1yHEsBdfK2B83hoL
Ij9/fw8C96pvqpqb59YXTr62Rp2x/GEDQBTnJ1vbM6H+BjUrcvaeJDUlzx6n8pXj
2B1r8xNfpMdrfErSpZYPxEQtvIpaqkbqeb3gxpXB9g70qQAmBmZbrlKzcRMhz9aR
eDn7mrzbkbMyCu8asiAk1VRuIUxARnXstb+EGRUvROj9JC97SNWNvFSiUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWRNCGUeXPDoKfk8p3Hzdz7grYDMB8GA1UdIwQY
MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct
YmU4Yzc4YzA2ZmM3LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3
LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLNFCtPH
ClMj/rpaVZNqJ01tNkrjmCaG4RnHU1Ey/87MGlWo4Cq5LsMSMb71k50TbcPO8j0o
0G8eQrsZfKfaNtPLib2h0wm+wRhGeiu1rR3naiatXtmT0fLmzNJTIdfIthp9/aIu
vlOvQrtakU4uvFzx7vN21fDLDojOps/eyNPYz2OfKhnfaPpDh1I4G0wyDdT7NU66
5NklldBbaGkd6/5UhPvVqgpcu80RwJ94hjGyCmjrvZTocstmqAHqpjlUPFDvOPGo
JY7UT5nAMJ6nXK6AaVaTxGKiIaWAB+HXucYlYnxppszCi524WmkS0AzOqI6C4sKQ
uoQ1mLUTi47NJw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:15 2026 by rpki-client