Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: n4dVVgI28Rprbo8WPYAjel0TZMtTvpQHnwv2pyOMPmo=
Subject key identifier: 33:0B:45:CC:AC:FD:80:34:53:DB:ED:46:F0:75:47:DE:E6:74:E2:32
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 019BFE412063A1501BF43BB520F9FAAB5A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 07A5
Signing time: Tue 27 Jan 2026 07:00:39 +0000
Manifest this update: Tue 27 Jan 2026 07:00:39 +0000
Manifest next update: Wed 28 Jan 2026 07:00:39 +0000
Files and hashes: 1: Rzeq7uRqZnk8SYr1S-gNBpMtCtQ.roa (hash: 1VVXryV1Hs/+cZ3mRyBsAdzqa0XA+yJ5M5FF8w4p2MI=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: 0VvryATKAr2GTPkD6jC1kD9M33qlcY+60UJDT9RA/6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:41:20:63:a1:50:1b:f4:3b:b5:20:f9:fa:ab:5a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Jan 27 07:00:39 2026 GMT
Not After : Jan 28 07:00:39 2026 GMT
Subject: CN=330b45ccacfd803453dbed46f07547dee674e232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:09:fa:71:3a:99:71:af:f7:30:9a:df:f1:
31:a3:69:67:0b:8b:54:42:7a:b0:4e:bf:a6:7d:c3:
ba:7b:98:c2:ea:89:8e:d9:da:94:89:2e:70:84:2f:
56:62:cb:ef:5d:55:e6:b1:67:95:da:27:98:4e:41:
fa:76:cf:cf:e3:05:e2:fb:e9:56:1f:9e:bd:d9:c2:
d3:fc:7d:4e:8a:05:6a:e1:93:49:34:5b:26:a1:26:
93:6f:b6:d2:f8:97:92:15:b2:b2:ff:06:96:d9:f5:
c1:55:40:da:a6:8f:cf:92:10:57:ce:46:6f:19:cf:
f5:70:d6:08:c7:16:d3:f7:9e:ea:9d:c9:3a:cd:4a:
90:2e:02:41:b9:40:eb:ab:0b:fc:57:32:07:c0:69:
fd:9c:ef:26:2d:5c:79:10:bc:69:ec:c9:07:45:24:
73:5f:8a:90:7f:53:18:8b:d9:b9:52:ff:6b:84:ea:
4b:f4:84:13:98:48:ad:da:a8:14:8a:ba:49:b6:79:
a7:c3:13:7e:6f:b8:5a:e6:59:de:d2:a9:e6:e7:21:
1a:55:d0:f5:e5:a7:06:67:68:92:6f:71:19:de:c5:
78:d6:24:a9:96:ab:f3:77:44:36:64:f8:18:44:83:
ce:8b:cf:60:8d:e3:ed:3d:3b:b9:0d:78:37:a8:5b:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0B:45:CC:AC:FD:80:34:53:DB:ED:46:F0:75:47:DE:E6:74:E2:32
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:05:20:f2:af:07:e6:20:46:80:d7:f3:53:d1:9e:f0:ed:
5e:fe:16:c7:ab:65:1c:c4:4b:79:f2:b9:13:23:6e:b1:b5:65:
f6:6b:7f:4d:c6:ca:53:d8:9f:fd:be:2f:cb:30:73:46:44:b3:
7f:98:47:0b:30:b6:b4:c1:41:a6:df:e3:fe:75:50:66:96:84:
46:3c:a8:1b:67:bb:85:38:01:f7:53:a1:93:eb:27:22:d9:ac:
dc:81:40:0b:78:8e:20:14:2e:d7:b2:7c:ae:5e:f2:8c:d3:11:
96:4c:1f:4a:51:7a:f6:e0:35:31:d9:cb:cf:87:b7:08:74:27:
68:d1:b8:bc:bc:b9:41:37:21:8f:d1:0b:6c:5f:9e:a1:e1:11:
77:51:a5:e8:db:67:35:5f:68:fb:23:09:3d:83:e8:1b:e8:d0:
62:d2:4f:71:47:19:55:39:9e:da:e0:c1:da:5c:28:bb:84:82:
b7:40:9d:1f:f5:cf:8e:3a:31:8b:71:2e:e5:52:bd:7d:ba:73:
00:56:56:1f:34:39:38:f1:1c:c1:08:cc:1c:c9:ee:72:f9:cd:
f5:b7:77:f1:98:34:6a:6e:69:77:e6:9a:cb:35:68:d4:c9:ce:
9f:33:64:e2:e3:a5:cb:f7:d3:68:0a:f9:c5:db:89:27:89:c6:
01:e5:54:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:43 2026 by rpki-client