Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: 12L32iM4fFKzFRqoggOlifXSiO4b0FhBP8ErHZbNKbs=
Subject key identifier: 59:3C:65:B9:AD:E9:6F:8E:CA:02:8E:9B:CC:66:C2:1B:23:29:0A:2A
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 019D3CE70B7F0BF02B5716FDCB5DE1C58A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 1892
Signing time: Mon 30 Mar 2026 04:01:07 +0000
Manifest this update: Mon 30 Mar 2026 04:01:07 +0000
Manifest next update: Tue 31 Mar 2026 04:01:07 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: hyL6UmADapHGViBuXZahxA8/jsDR2j4LIGlJAiex7AM=)
2: v89NCrFwQeDvFifuIbe7lcr1Vdg.roa (hash: 8lNS9jprfqrQ4KnCohT8hKELj4DY0q7OpHWa2tkRvdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3c:e7:0b:7f:0b:f0:2b:57:16:fd:cb:5d:e1:c5:8a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Mar 30 04:01:07 2026 GMT
Not After : Mar 31 04:01:07 2026 GMT
Subject: CN=593c65b9ade96f8eca028e9bcc66c21b23290a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:10:38:b8:5d:4c:44:8c:6d:72:1b:96:50:
86:b8:a3:eb:8d:15:ee:03:57:8b:57:15:cd:2c:db:
d4:bf:00:0a:7a:a5:ea:b1:af:a2:07:f1:ee:22:5e:
06:1e:1e:8e:f6:21:76:26:25:9e:0e:09:6e:c4:c2:
47:41:4d:f5:57:b2:52:66:18:93:b2:df:f6:2f:2a:
15:00:51:29:ca:7c:f5:b4:6b:e6:6a:25:a4:d1:21:
84:ce:22:b1:99:3d:92:be:bb:46:10:e5:bb:6d:28:
4d:4d:9f:28:05:69:4e:e5:db:29:ba:8b:5b:17:fd:
01:9e:f0:5b:00:95:29:e1:b7:f5:d0:d2:40:9f:25:
30:ec:87:38:d8:e4:f9:7e:b0:f7:4f:0d:df:f7:3b:
68:09:06:cc:d4:f7:5f:d7:ba:f7:c3:c5:31:ff:1f:
55:1e:eb:cf:2f:9d:5b:f7:19:29:ba:68:c5:c4:e4:
35:f3:dc:36:bd:ca:87:50:1b:2b:01:08:d3:da:36:
ee:62:9d:0b:44:24:f3:f4:0a:ab:82:27:2c:70:39:
a3:2d:36:35:29:07:82:2c:ee:9c:c0:e2:cf:1e:a1:
00:08:5b:36:a7:11:c8:d6:92:19:9f:f8:bd:2c:dd:
a9:54:4a:56:8e:fe:4e:a5:19:cd:41:b8:03:47:bb:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:65:B9:AD:E9:6F:8E:CA:02:8E:9B:CC:66:C2:1B:23:29:0A:2A
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:56:5a:db:58:84:dd:d3:ef:76:07:67:d4:53:a4:83:fb:
a9:40:69:4b:e8:61:67:d4:1a:a9:7f:eb:1e:ad:5f:d5:91:79:
ba:87:71:ab:c4:07:e9:26:d1:30:f2:3a:d7:7b:be:2a:c5:e5:
8a:b0:1a:3c:98:c7:13:11:d6:ee:ea:25:1d:81:05:fd:3b:8d:
bb:5c:e3:37:f7:ee:f3:91:58:46:9e:c5:aa:bf:2f:5d:bc:92:
7c:9e:7c:65:d5:e2:89:4c:28:a5:e7:b2:57:66:a5:fe:05:ad:
97:89:f0:12:81:9e:38:f9:27:d2:7f:7c:2e:c5:d9:6a:b8:e1:
2e:65:ae:79:53:e2:8e:f8:b2:cd:74:ac:80:16:bf:19:a9:94:
c9:5a:2e:53:a7:32:a1:06:ea:9f:27:54:4a:9c:4a:33:bb:40:
e1:02:57:5f:3c:14:c9:df:fb:6f:49:da:43:40:f3:cc:94:8e:
2a:00:56:a4:01:d3:7a:09:73:a6:53:6c:14:16:87:5a:0f:95:
2e:c5:3b:d7:ce:dd:cf:0b:0f:28:0b:5a:4d:0d:07:5c:43:ba:
05:79:32:c1:b7:c0:05:9d:a7:7a:af:fa:76:43:10:de:ea:1c:
55:fe:67:ef:2e:d6:9a:57:8b:51:78:99:1b:25:3e:02:a6:33:
78:8f:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:49 2026 by rpki-client