Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: k0+dNMjeNJH0wLhqlnDaaU4BkEdHVC0hQHCiAXKYP/4=
Subject key identifier: 73:7F:0F:60:16:06:17:79:7B:1B:96:7B:0D:46:51:C3:AC:FC:81:F8
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 019B8D63130E91F6B67FF177499C91705D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0BD7
Signing time: Mon 05 Jan 2026 09:00:38 +0000
Manifest this update: Mon 05 Jan 2026 09:00:38 +0000
Manifest next update: Tue 06 Jan 2026 09:00:38 +0000
Files and hashes: 1: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: OlfIxuXblv5UvNOp6hfGY7Rn35zmbZl4sfafAFs/c+I=)
2: wfA1-n1KmPSEcwLGYpJOTB6Es2U.roa (hash: x+tJbK1Sq4Tg8VU3dFjZkDXjxkuG/yYBBM7ZgXSL4dY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:8d:63:13:0e:91:f6:b6:7f:f1:77:49:9c:91:70:5d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Jan 5 09:00:38 2026 GMT
Not After : Jan 6 09:00:38 2026 GMT
Subject: CN=737f0f60160617797b1b967b0d4651c3acfc81f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:80:fd:ec:85:73:e0:8c:58:0b:99:ed:8a:
8e:97:b7:15:50:ee:15:87:d4:68:f7:9a:dd:c6:4c:
76:f0:df:8d:83:11:29:0f:a0:62:1c:73:04:b8:d0:
fd:8c:cd:56:e7:f1:f4:54:c3:7f:ca:f0:c9:af:e9:
28:b5:1a:bf:01:15:d9:20:c4:f1:32:d9:28:64:31:
e1:89:76:f4:ea:7b:70:c3:0a:40:32:53:e4:70:af:
8d:df:5f:09:32:db:97:02:05:8c:e6:5e:d8:37:01:
aa:1b:eb:26:f4:e8:68:c0:a4:b3:a9:74:60:5d:47:
cd:a7:7b:7c:33:65:dd:69:66:8f:a7:18:cf:38:a9:
89:f4:17:b3:a7:f9:8c:71:c3:8a:cd:0f:eb:44:09:
11:de:b4:1c:03:1c:b3:bd:e8:ff:91:3d:74:b9:01:
e2:c3:b3:ad:ee:87:f8:ec:c1:fb:31:69:93:7d:fc:
89:5d:63:be:ca:b4:a5:99:f4:79:b5:65:03:c3:d6:
f2:f9:36:a7:93:97:74:17:a6:a1:60:53:29:8c:07:
77:26:40:84:50:cd:ef:89:3b:05:cf:b4:2c:69:7f:
b8:7c:9d:1e:79:fa:15:9c:b7:38:17:a2:24:bc:b6:
b0:32:fa:39:f0:73:12:51:b5:7b:46:ff:d1:f7:b3:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7F:0F:60:16:06:17:79:7B:1B:96:7B:0D:46:51:C3:AC:FC:81:F8
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e9:86:37:42:34:56:c8:dc:e1:46:ed:fe:7c:17:9e:b3:1e:
35:74:ee:fa:1a:96:a3:02:a1:b6:55:3d:e7:ae:3d:c9:9d:85:
ae:7c:d6:7e:47:a1:e5:a2:a8:8e:96:ca:71:90:db:1e:b5:b0:
c6:ce:e7:50:21:df:a9:2d:bb:bb:bb:e0:9b:e6:cd:6d:85:a4:
5b:33:66:9a:4e:ce:01:f0:b2:7c:8e:7c:5d:21:25:88:b5:dd:
ff:03:00:4c:a8:04:48:07:3d:42:4c:ed:bf:d3:84:e1:57:d8:
03:0a:06:89:d1:c5:4e:4e:13:87:f8:47:72:08:67:dc:f1:c8:
89:a9:d0:64:e9:fb:ee:95:98:a1:48:7e:79:d1:df:f6:44:33:
54:99:c4:91:e4:58:ba:bf:ef:d9:0f:04:67:26:8d:ba:92:ec:
70:47:7a:44:f3:69:4c:2a:3d:a7:50:6f:41:fd:5d:10:52:77:
92:30:bb:a2:c6:a0:2e:8b:c4:f6:e0:d9:4d:e6:94:61:9e:06:
8c:82:59:5a:2d:4c:2c:e2:38:5c:8f:c6:a0:04:bf:bb:52:59:
7f:27:30:0e:fa:5f:fd:ba:d7:bc:96:ad:4a:a8:65:1c:66:bf:
ea:3f:25:03:2c:66:81:b0:81:4a:83:5e:12:9b:10:3e:6f:ac:
df:20:f5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:17 2026 by rpki-client