Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: /4kpbjABWBMP+v8OwPUZyGe+tpbdbyl9RTO1TwMn5IE=
Subject key identifier: BD:52:6A:07:FF:51:AE:4B:79:DB:A9:AF:DB:D9:2D:06:E4:9D:13:DD
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019D747B3F60A3A03C1F3336CF3A748CCEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 086C
Signing time: Thu 09 Apr 2026 23:02:07 +0000
Manifest this update: Thu 09 Apr 2026 23:02:07 +0000
Manifest next update: Fri 10 Apr 2026 23:02:07 +0000
Files and hashes: 1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: McJyJoSOkaGWSYBFPmOp7ZjddmpaRENF3bmruATf1DM=)
3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:7b:3f:60:a3:a0:3c:1f:33:36:cf:3a:74:8c:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Apr 9 23:02:07 2026 GMT
Not After : Apr 10 23:02:07 2026 GMT
Subject: CN=bd526a07ff51ae4b79dba9afdbd92d06e49d13dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:02:ee:95:bf:8e:64:97:ec:22:f0:64:70:ca:
88:49:b5:9d:5c:62:63:cf:a7:16:8a:c6:74:a1:32:
55:44:fd:12:2b:cb:be:a6:07:9c:bb:9b:17:fd:ba:
e0:51:77:4a:c9:13:f8:d1:e4:93:fc:1f:87:c2:8d:
45:e1:78:66:0c:6f:66:1c:01:02:ef:e2:0f:d7:cf:
5d:96:58:c3:36:6b:2c:7d:03:71:f6:4a:19:d6:83:
b6:71:41:77:76:45:e5:ad:85:c3:c8:1c:fb:98:58:
59:23:f8:38:74:ba:24:d8:f4:e9:90:8f:6f:8a:a7:
91:1a:b6:9d:d1:c5:f3:b3:63:87:5f:3a:2a:3f:b1:
58:4b:61:a2:60:d1:21:3a:f9:65:56:f2:6c:20:43:
b3:fb:1c:58:07:70:68:cf:68:00:fc:ac:be:64:02:
d2:f3:5d:d8:61:28:fa:c2:10:61:32:bc:28:e1:6a:
4a:0e:f3:d9:34:ab:4f:5d:1d:af:e1:f3:ff:1c:64:
7c:54:89:cc:e7:eb:50:f2:78:43:58:ec:82:5c:17:
20:3f:20:5b:b8:1b:82:4e:91:56:59:21:fe:9a:a9:
d9:3c:eb:92:b0:36:92:05:e8:03:92:4d:91:60:fd:
9d:9e:ff:cf:b5:0d:30:8c:ec:08:f3:e8:81:74:ee:
df:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:6A:07:FF:51:AE:4B:79:DB:A9:AF:DB:D9:2D:06:E4:9D:13:DD
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:65:45:58:bf:f8:63:cf:86:77:ce:d5:b1:fb:60:d4:1d:54:
29:c8:65:1d:ff:d3:18:83:cf:df:86:a9:2e:ba:8c:e8:3a:48:
d1:3f:0b:c3:f0:6a:fa:4f:6b:8d:6c:c9:0e:b6:56:bd:dd:96:
91:90:a5:7f:67:20:cc:bc:3b:b8:df:75:82:1a:cb:5b:0d:08:
74:8c:b2:35:94:3f:10:8c:52:10:79:b3:ec:ce:49:4b:7c:a7:
47:49:97:e3:ee:a0:f4:f2:c0:ed:dc:ae:00:4f:18:8b:20:49:
82:15:a8:33:be:d1:5e:3c:60:ea:29:9e:a5:12:c2:29:52:7c:
3f:c2:f4:d5:fe:65:a5:2e:41:c8:b1:7a:f8:6b:5a:bc:c3:e7:
b4:8e:2b:af:81:38:84:b0:82:db:c1:69:f8:a6:c2:0a:05:41:
df:8d:e2:59:d3:25:f5:b2:3c:b6:83:20:9f:18:e0:7a:43:b2:
c6:f3:93:11:ba:0f:09:c8:a2:10:98:06:3a:01:66:20:b9:0e:
5e:0c:b4:37:8b:bd:18:b6:1e:b3:54:6a:bf:39:ca:7d:aa:6f:
25:62:ff:e5:ff:e8:c4:34:2f:8a:15:77:e7:02:a4:a8:20:00:
d6:b2:5f:9e:5a:a5:bb:64:3a:38:b7:ac:d5:2f:85:53:21:f8:
c9:3f:fe:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ10ez9go6A8HzM2zzp0jM6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5
ZmJlMzkwHhcNMjYwNDA5MjMwMjA3WhcNMjYwNDEwMjMwMjA3WjAzMTEwLwYDVQQD
EyhiZDUyNmEwN2ZmNTFhZTRiNzlkYmE5YWZkYmQ5MmQwNmU0OWQxM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gLulb+OZJfsIvBkcMqISbWdXGJj
z6cWisZ0oTJVRP0SK8u+pgecu5sX/brgUXdKyRP40eST/B+Hwo1F4XhmDG9mHAEC
7+IP189dlljDNmssfQNx9koZ1oO2cUF3dkXlrYXDyBz7mFhZI/g4dLok2PTpkI9v
iqeRGrad0cXzs2OHXzoqP7FYS2GiYNEhOvllVvJsIEOz+xxYB3Boz2gA/Ky+ZALS
813YYSj6whBhMrwo4WpKDvPZNKtPXR2v4fP/HGR8VInM5+tQ8nhDWOyCXBcgPyBb
uBuCTpFWWSH+mqnZPOuSsDaSBegDkk2RYP2dnv/PtQ0wjOwI8+iBdO7fPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1Sagf/Ua5Ledupr9vZLQbknRPdMB8GA1UdIwQY
MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt
Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2
LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2VFWL/4
Y8+Gd87Vsftg1B1UKchlHf/TGIPP34apLrqM6DpI0T8Lw/Bq+k9rjWzJDrZWvd2W
kZClf2cgzLw7uN91ghrLWw0IdIyyNZQ/EIxSEHmz7M5JS3ynR0mX4+6g9PLA7dyu
AE8YiyBJghWoM77RXjxg6imepRLCKVJ8P8L01f5lpS5ByLF6+GtavMPntI4rr4E4
hLCC28Fp+KbCCgVB343iWdMl9bI8toMgnxjgekOyxvOTEboPCciiEJgGOgFmILkO
Xgy0N4u9GLYes1RqvznKfapvJWL/5f/oxDQvihV35wKkqCAA1rJfnlqlu2Q6OLes
1S+FUyH4yT/+EQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:01 2026 by rpki-client