Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: IeijL3eWKQenJbyhAi6ZXliAhKTEOYz2JZhUz65z2iY=
Subject key identifier: 41:60:D9:AD:50:58:CD:56:2E:35:BA:04:3E:AE:7D:21:83:5F:43:A5
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 019D75FB0E44CDB688E0DB34024865A5C164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 0893
Signing time: Fri 10 Apr 2026 06:01:20 +0000
Manifest this update: Fri 10 Apr 2026 06:01:20 +0000
Manifest next update: Sat 11 Apr 2026 06:01:20 +0000
Files and hashes: 1: WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa (hash: Ig8sscra5dIX6tBApNExCSn2CMXG+xOTaFttzoauVgc=)
2: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: sGeqWAEkBoQR628B38TgVf3IDtThIJcMOyis5jTQit0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:75:fb:0e:44:cd:b6:88:e0:db:34:02:48:65:a5:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Apr 10 06:01:20 2026 GMT
Not After : Apr 11 06:01:20 2026 GMT
Subject: CN=4160d9ad5058cd562e35ba043eae7d21835f43a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:63:94:59:0f:8b:a0:97:cc:bd:fe:40:06:
c8:ae:d1:9c:64:93:fc:44:9d:68:da:00:0b:a5:3b:
c8:0d:bc:76:fe:a8:d4:9c:6b:bc:72:ac:2f:5a:02:
dc:5e:fb:2b:c3:e9:4f:a4:9e:bf:3e:5c:42:f6:77:
2f:a1:01:5a:d5:b6:92:10:d4:ea:6e:e2:e0:6e:98:
d6:1f:a1:eb:a7:e4:5a:83:5b:e7:60:de:46:60:73:
7d:cf:1d:a2:76:0f:af:6f:40:ba:46:9d:af:c7:db:
05:13:f4:9b:34:b7:9e:6e:3d:fc:7f:1e:5e:c8:51:
49:c5:45:69:c5:27:8d:78:1b:15:b5:99:c7:24:a9:
fc:23:e6:89:be:3d:b0:d5:f1:3b:0a:e5:ce:c5:2d:
bc:74:0c:c2:f1:8b:c8:a3:d1:54:55:b6:8c:77:57:
bc:b8:22:4c:4c:36:ed:02:7b:78:55:be:90:58:97:
24:46:5e:77:a1:5b:8b:5e:2c:9f:2f:8e:e9:c7:c2:
59:13:71:16:bc:3a:39:95:1b:a8:e0:78:6c:2c:34:
38:62:33:cb:24:3f:1e:86:0d:c1:36:9c:60:c3:95:
cb:48:b4:78:ea:3d:a9:15:3e:c9:0b:a9:eb:d1:7c:
35:00:a3:ca:c4:57:7d:7c:0e:98:e0:fb:48:97:4e:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:D9:AD:50:58:CD:56:2E:35:BA:04:3E:AE:7D:21:83:5F:43:A5
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:6d:f1:f5:c3:17:5f:29:8d:60:09:52:7d:c9:7b:8c:ab:
12:a2:8d:4d:1a:16:04:51:ce:77:40:c1:41:be:08:74:3b:8d:
26:94:e1:64:7f:b6:a3:a7:72:30:69:4e:cd:6f:ba:78:55:01:
5e:d1:13:f3:a7:4e:76:cf:9e:50:9b:e0:83:0f:5e:65:32:58:
36:89:c9:ef:41:de:42:04:88:fe:34:42:cf:4b:cb:de:52:f3:
41:9d:ad:c7:b7:55:5c:cd:95:c0:47:3b:4b:bd:a2:41:23:fb:
60:52:9f:7b:42:cd:60:10:62:38:39:45:86:c4:1c:76:18:94:
9a:34:ee:5a:70:bd:37:93:7e:22:97:08:9f:14:d9:28:2b:ba:
e3:13:d4:8f:a0:ca:33:4e:33:06:d2:af:94:69:75:0c:70:49:
e8:58:27:7e:67:eb:b6:41:39:e5:ea:50:7f:d7:ec:f0:b8:10:
95:f8:f3:91:91:58:3e:6e:96:ca:3f:72:1e:ce:c3:70:83:ee:
fb:0f:47:9e:70:78:20:eb:f9:46:bc:e2:db:65:83:a0:3b:8b:
8a:60:43:75:4f:5c:f1:64:fe:97:3f:44:2b:9f:d2:75:50:dc:
a7:17:37:f8:a2:23:69:53:e6:09:c1:13:c2:2f:08:ef:d9:22:
ed:55:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:04 2026 by rpki-client