Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: FxC6i5PBM5PhjurK+iPFT4UPOVfjgE1Bhi+zf3HvHuM=
Subject key identifier: 2D:02:D6:17:C1:E0:C5:CF:57:06:1C:41:D1:90:63:B8:57:46:CB:F0
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019D92A06C47F97CFBEBA9286A5F135C9E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 0AEE
Signing time: Wed 15 Apr 2026 19:31:20 +0000
Manifest this update: Wed 15 Apr 2026 19:31:20 +0000
Manifest next update: Thu 16 Apr 2026 19:31:20 +0000
Files and hashes: 1: ZLl_46Lh9nkqU5_OsPC8plycGUY.roa (hash: O7Bgr6EL1Lg49UOnRcTUe4q3+h1+w1dRqFxJANUXEU4=)
2: lTMr_tmE5zf1a8d0RFV7s8C_F3Q.roa (hash: r9UOMYxpKdYi63IObP/C5aZuW6pYv6q+dCCfoqFrtSU=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: ZmsHMW3I8dU+GtiaXwh2QIAum31Q7fOTzT24LvHiFMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:a0:6c:47:f9:7c:fb:eb:a9:28:6a:5f:13:5c:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Apr 15 19:31:20 2026 GMT
Not After : Apr 16 19:31:20 2026 GMT
Subject: CN=2d02d617c1e0c5cf57061c41d19063b85746cbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:7e:b1:4e:41:4c:dd:77:6f:5e:cf:37:e5:
09:48:4c:fb:6f:d4:ed:86:da:3e:06:7d:c6:6e:64:
cf:a4:38:9a:d5:d3:ab:57:c9:0a:94:80:3a:d7:fc:
43:48:1d:d4:93:ba:e0:80:f3:7f:73:30:bf:d5:be:
74:c7:53:5b:73:e4:60:8d:96:8f:fe:bf:95:5a:1a:
5d:ff:e9:d6:7b:31:bd:aa:3d:6a:ac:41:82:4a:cc:
6f:7d:8b:fc:10:a3:be:ac:b9:4d:99:33:e6:32:8a:
e6:df:fc:5e:be:7d:b8:b2:94:61:d8:e2:48:d2:ab:
8c:b0:19:c7:d4:58:16:ba:0f:fb:81:7f:aa:63:3a:
f5:5b:d9:29:61:d0:62:f7:07:f4:f0:a1:e7:37:b3:
de:37:a2:d5:48:e3:7b:5e:1d:1a:41:81:c5:bc:4a:
3c:c1:95:6f:c0:17:66:06:bf:99:13:56:54:e2:0d:
28:5d:24:38:e5:6e:78:73:9d:4b:0c:86:fa:1d:ed:
93:3d:f3:b1:01:04:ba:11:ec:0e:f4:90:b9:90:1f:
a4:79:86:94:a4:85:a3:24:71:2e:ae:ff:29:cf:84:
44:c3:3b:46:3a:52:e1:c6:bb:f0:78:fa:b3:45:6a:
19:9f:d1:9c:60:76:33:c6:88:22:22:cd:66:de:ba:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:D6:17:C1:E0:C5:CF:57:06:1C:41:D1:90:63:B8:57:46:CB:F0
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a1:9f:39:35:da:d7:8e:66:90:59:61:59:d3:f5:c4:e8:7c:
ac:17:7d:2d:bd:5a:a8:c8:55:f3:f6:ea:73:95:63:dc:dc:18:
c5:b3:38:48:a4:7a:3d:8d:e1:b2:d5:b9:2e:51:63:7f:47:f4:
6b:fc:c0:36:66:27:75:98:54:95:3d:ab:5c:89:11:3e:3e:7a:
4d:7c:93:6d:bb:a9:a2:94:10:72:ab:df:ab:84:04:bd:ca:62:
6d:fc:07:16:0e:f3:ac:eb:75:f1:73:0e:5a:eb:b1:81:3d:54:
2f:1f:a5:f3:92:11:c6:64:03:1a:9d:76:79:d0:a6:b4:26:3b:
12:9b:7e:b3:c8:d7:f1:2e:63:f5:39:19:ae:8b:9b:3e:d0:d9:
93:32:cf:c5:78:e8:8c:9f:0d:5c:ae:bc:72:86:2b:ce:30:4a:
6f:f5:a3:82:ba:ce:e9:95:cf:57:e5:d0:b2:aa:f1:e9:0a:b1:
4e:50:b7:96:2b:10:e0:88:d9:49:2d:7c:e0:7d:0f:33:19:09:
9a:17:93:28:f2:1f:3e:91:96:87:21:6a:eb:1b:33:01:7e:e3:
57:0f:28:4c:83:77:05:65:cb:9b:15:79:46:12:8f:aa:36:67:
e7:a3:20:0d:28:c1:2a:20:0d:90:23:b4:21:7a:12:2a:a2:48:
e4:8a:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:11 2026 by rpki-client