Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: sXqPv04wb0HBiSn+ldigM1yGhEVc8+wvpCFaWnbKV4E=
Subject key identifier: 0C:4F:C3:ED:8E:AD:37:04:9B:93:40:3A:02:C4:97:D2:79:B9:D1:8D
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 019BBB4EAEBAF28DC0542DD96EB582204836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 17B0
Signing time: Wed 14 Jan 2026 07:00:54 +0000
Manifest this update: Wed 14 Jan 2026 07:00:54 +0000
Manifest next update: Thu 15 Jan 2026 07:00:54 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: zQrqJx9ncIHXtDv7SNWa4KPdob8Gjwh20nsJ2DIOFNk=)
2: ZGBgmumGzS4ukZFbpYM0d8wUt0E.roa (hash: dGLyIYahkUSxgP0jzsDMCqCq6nclm0OowLDF1vab/L4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:bb:4e:ae:ba:f2:8d:c0:54:2d:d9:6e:b5:82:20:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jan 14 07:00:54 2026 GMT
Not After : Jan 15 07:00:54 2026 GMT
Subject: CN=0c4fc3ed8ead37049b93403a02c497d279b9d18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:0e:e2:cb:0b:30:0b:62:fd:4b:19:aa:6a:
b0:3f:e3:76:5a:ca:ae:76:44:31:4d:ea:fe:27:6a:
37:01:a1:ed:e7:09:70:4c:70:da:d6:af:9b:40:4d:
31:cd:79:ca:8c:61:86:7a:4a:be:52:04:9d:b5:99:
cc:d1:4e:ae:67:4e:dc:64:9b:71:c3:e6:13:f9:d3:
9b:c9:7c:53:9d:c3:68:27:ec:7f:99:d6:9b:fb:f5:
98:fa:6f:de:74:36:9a:37:98:55:20:a9:0e:fe:50:
bd:4e:34:94:05:ec:4b:ee:6f:3c:6c:c2:53:51:5b:
2b:29:69:c9:64:44:33:5d:5a:29:36:3b:15:47:c5:
54:e5:54:4f:93:44:00:6b:9a:6a:3d:ac:79:16:7c:
ca:89:27:b0:5e:2e:70:a4:52:4d:d9:6a:ed:a1:2d:
34:7a:51:08:a6:bb:f1:b4:a1:83:1f:67:1e:ed:80:
63:eb:7e:11:25:ca:52:9f:f2:b2:e2:bb:5e:6a:01:
af:45:5d:49:45:ea:64:8c:84:e8:bd:da:07:01:fa:
70:ae:1c:b8:0f:50:df:df:43:91:a9:ca:36:a7:40:
e0:27:ad:50:e9:a3:ea:08:f1:a0:62:3f:21:89:a9:
85:ae:80:b3:2d:92:42:33:dc:96:34:94:a9:7c:78:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4F:C3:ED:8E:AD:37:04:9B:93:40:3A:02:C4:97:D2:79:B9:D1:8D
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:97:fc:88:c7:b6:52:45:c5:6c:87:7a:be:29:e9:7b:3f:a8:
00:f4:c7:03:ca:3d:48:6f:58:b3:9c:c7:ff:75:68:0a:a3:69:
4a:d6:a5:d6:5a:4d:55:98:dc:5e:44:35:a5:15:7b:9a:72:ea:
72:4e:26:45:56:97:e2:c5:63:8f:50:36:f8:85:b6:d9:e1:1a:
71:cf:79:d9:01:c3:92:bd:dc:0e:ef:0a:fd:d6:ab:aa:c0:0e:
81:2a:e7:e3:b9:c7:5b:06:10:e6:5b:b0:88:6b:15:72:db:8b:
44:bd:0d:9f:65:f7:a3:c9:68:cd:2c:21:ae:85:37:93:ef:6f:
d2:f0:33:fa:d4:60:1c:d9:bb:cb:b4:c6:92:c6:be:1a:df:bd:
ea:47:d7:ca:56:06:69:b2:0d:02:08:49:72:87:2d:09:a1:89:
b1:42:95:0a:d0:4a:ec:cf:7e:3c:0b:d4:28:2b:28:1b:fe:69:
75:10:b6:02:92:aa:0e:7c:48:ca:96:00:e1:7b:78:d8:ce:89:
33:fc:6f:fb:9e:8e:03:61:1b:64:1d:67:15:22:86:bd:c8:0f:
8f:04:0b:a3:64:ad:85:72:f0:2b:78:ae:cc:f1:a3:ca:e2:c2:
88:25:8a:19:97:56:93:26:8b:d1:17:77:ce:1c:45:ef:d0:42:
40:0c:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:20 2026 by rpki-client