Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: cZ4J+b+2ibnimyMmPu15N6LGnAiUUYp1SWut/sokTxg=
Subject key identifier: CB:F8:34:92:04:56:BB:00:F7:4C:2E:BA:B0:E7:7E:76:B6:EA:D1:56
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 019B7D147D7493B3AF866FFD4C1EE5CF1337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 17AC
Signing time: Fri 02 Jan 2026 05:00:53 +0000
Manifest this update: Fri 02 Jan 2026 05:00:53 +0000
Manifest next update: Sat 03 Jan 2026 05:00:53 +0000
Files and hashes: 1: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: WanJHAiyurCayJAdkihFYJHI2a8VkvuL0iJdEvdr3Ps=)
2: uJm_7hDGpmhYTWwQ2YPrurLOWrE.roa (hash: +Rfv4uPZRuyPLmvGs5hzMdcgFavU6d1XxdChLjbHF1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:14:7d:74:93:b3:af:86:6f:fd:4c:1e:e5:cf:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Jan 2 05:00:53 2026 GMT
Not After : Jan 3 05:00:53 2026 GMT
Subject: CN=cbf834920456bb00f74c2ebab0e77e76b6ead156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:d2:62:d7:40:0e:3d:85:cf:9e:78:93:75:
f8:8b:ba:02:18:0b:9f:82:52:12:33:aa:f0:9b:d6:
ec:f4:ec:4a:ab:f1:70:52:63:35:a5:2f:bc:1d:69:
15:bf:0a:e3:3d:d6:cf:50:bf:c4:56:09:1e:1a:15:
f9:8d:1d:52:e1:27:7a:43:71:db:f3:a7:d4:36:91:
cd:81:2b:6e:be:2c:7d:78:c1:a1:4e:4b:36:3a:81:
40:02:79:13:a6:04:46:5d:4a:b6:a3:ed:00:96:dc:
38:35:8a:31:dd:72:7a:93:ad:a1:c7:31:f3:5e:fe:
8e:35:26:a3:a6:3f:34:ff:f7:2d:5b:65:13:87:08:
54:99:4d:b5:a6:23:54:72:16:95:38:11:77:f4:e2:
02:5a:32:a8:b6:34:0a:ad:f3:ea:2b:13:a2:18:c9:
5a:b8:98:5f:b4:3b:2b:89:f9:b7:9c:67:b6:6a:af:
33:40:48:b0:4c:c7:92:67:51:6d:04:83:2d:c2:43:
44:6f:50:94:5c:90:b9:69:a6:cf:cc:37:26:fd:25:
97:7f:32:c7:ff:59:51:82:b2:59:45:c7:1e:4b:5c:
5e:fd:51:cc:d4:61:ed:7b:6b:b4:d5:bb:a4:df:46:
4a:04:ba:5c:a9:9e:a1:84:d5:88:7b:63:48:24:ac:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:34:92:04:56:BB:00:F7:4C:2E:BA:B0:E7:7E:76:B6:EA:D1:56
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:98:1f:eb:59:55:0d:83:2a:47:79:57:2b:a5:03:8b:55:fb:
a8:c7:73:ac:85:1d:5c:1e:18:53:f7:23:07:fb:0e:ac:96:1c:
5e:e2:a5:ac:a9:e0:8d:2c:c0:a5:65:bf:b8:c3:32:94:b3:13:
ac:55:c5:b2:c8:44:7e:b2:43:5b:95:ca:18:6e:2d:dc:40:a1:
9a:5f:5a:16:c7:ac:5b:2c:a8:71:b3:13:26:cf:52:ed:87:54:
68:c7:4b:97:fa:3a:d7:e4:04:f1:71:22:86:69:af:76:03:1c:
13:b3:5f:30:22:21:35:89:40:a7:ab:55:26:91:e9:ec:ce:93:
54:25:79:22:0f:7d:0d:40:48:b9:8d:09:41:7c:81:4c:b0:a0:
c4:19:b0:b5:33:43:a6:27:b6:ca:ce:1d:e0:1d:a3:34:10:86:
b0:d1:c3:3c:a9:44:5d:c8:19:bc:a8:50:fe:5f:16:07:94:13:
7a:7c:85:fe:c9:35:04:ed:00:be:0d:73:da:7e:2a:95:15:cf:
c7:d3:2e:85:ba:23:33:f8:60:5e:da:48:50:4e:77:c7:81:40:
79:43:71:2e:1c:f2:ec:53:a6:25:fb:b5:df:18:19:ed:da:60:
b7:0c:b0:a9:da:0c:82:d9:39:38:09:a1:ae:c6:76:5c:c8:52:
9b:11:eb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:04 2026 by rpki-client