Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: fiw5JnFmv9SkHumozOr4yD+d2ajaJUS/bd/tK78B49I=
Subject key identifier: 0F:5C:D3:32:19:8B:FF:C5:B9:D5:56:42:1D:0C:D7:14:AC:C0:63:A8
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 019C8CF3B24FB2D8825F453813D1977BFEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 183B
Signing time: Tue 24 Feb 2026 00:01:46 +0000
Manifest this update: Tue 24 Feb 2026 00:01:46 +0000
Manifest next update: Wed 25 Feb 2026 00:01:46 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: UbFhA1cyxITIh9+3DLxxLMrT2W0SGsGa8qnzPz9iGQ8=)
2: ZGSlEL3ZsYkMJbVBMvhKW9bkacI.roa (hash: GGqHD6czDexP5GBUgnHHO7EZlQS3Oh/AerMKhihhJ9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:f3:b2:4f:b2:d8:82:5f:45:38:13:d1:97:7b:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Feb 24 00:01:46 2026 GMT
Not After : Feb 25 00:01:46 2026 GMT
Subject: CN=0f5cd332198bffc5b9d556421d0cd714acc063a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:01:d8:c5:a1:31:81:61:dd:e7:e3:32:bd:
4f:f3:e0:ac:8d:35:f5:31:3f:4e:aa:6c:ca:16:0a:
51:9a:d2:7b:83:50:5a:de:ac:7c:83:ba:2c:e0:82:
b0:52:9e:9b:eb:2e:d1:1f:91:07:03:9e:dc:e8:a8:
04:b4:9c:92:37:bc:12:6a:cb:46:47:ca:b4:69:f5:
19:b5:a9:54:26:7a:9e:9d:79:4d:46:50:60:82:45:
d4:71:45:52:ba:cc:c7:a4:78:4a:ac:f6:7f:0d:87:
8f:20:84:93:28:74:00:a4:cd:97:b1:61:e0:5f:83:
87:00:a3:2d:e8:10:df:76:0a:ac:74:d7:9f:44:96:
dc:74:ee:b8:9f:c3:40:ed:cc:7e:3f:38:aa:75:ba:
26:04:ce:25:3a:79:57:03:f0:92:1b:76:fc:e8:99:
7c:30:52:2f:dc:d5:b7:78:94:d7:37:72:e8:d8:26:
b8:8c:6d:c9:b7:4c:1c:33:b5:a6:f5:d3:2e:0d:a7:
d4:fc:b6:1d:dc:6f:13:f1:b3:9c:fa:9d:56:e9:f7:
23:9e:55:5d:85:df:d5:21:88:6d:e2:5f:55:4e:47:
ff:7c:8a:62:78:f2:cb:14:32:18:d5:2d:b0:c4:07:
96:49:be:e3:ef:27:fd:3d:fe:ac:87:bb:9d:97:a8:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:D3:32:19:8B:FF:C5:B9:D5:56:42:1D:0C:D7:14:AC:C0:63:A8
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:67:04:cd:13:83:b9:86:80:6d:86:89:50:a2:34:c2:cb:f4:
57:ca:de:cf:66:11:44:2f:11:ae:df:e4:fa:96:01:c6:c7:5e:
ee:24:99:91:c1:ef:1c:45:d5:aa:50:52:82:4e:44:66:ac:a6:
e7:65:e0:22:10:a1:fc:8d:49:62:29:e6:16:51:40:ca:69:04:
99:69:21:3b:09:b8:9b:bd:72:7e:e7:58:98:69:9f:74:2e:72:
98:91:f5:48:bf:f9:61:c6:4d:e6:b6:61:93:96:af:ea:27:9b:
15:76:c2:37:d9:89:e8:4e:ff:ac:bf:63:34:5c:44:17:59:dc:
88:1f:1b:b3:cf:1f:05:7e:d1:65:d4:6d:ab:dd:71:98:96:db:
21:13:12:aa:ca:37:85:53:01:67:7c:87:f1:a6:64:01:3b:05:
42:a7:d0:5a:8f:15:82:25:2f:0f:0a:09:f6:4e:66:da:70:7e:
bb:15:36:bb:d5:c7:38:48:4b:19:2b:f0:ec:96:e1:71:b5:b0:
1a:d9:d8:3a:f0:ad:bc:fa:2c:8f:1f:9a:4c:99:1d:f7:df:73:
cc:6a:59:b6:93:cf:22:a6:bf:78:92:15:8b:9c:2f:43:66:61:
9f:6e:8a:18:1f:e0:18:cf:79:af:2f:8e:36:5b:b2:75:a0:f9:
01:2d:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:38 2026 by rpki-client