Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json)
Hash identifier: HPnJe/7YPwzduQD7LtTAi1j5XO4B2BG6itvTHZrVBf0=
Subject key identifier: 7C:2F:06:1B:0F:44:F4:63:47:2D:44:D5:B9:CA:8D:39:BF:2C:09:AC
Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Certificate serial: 019CD0F795773108AD7386CDD4F129774228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
Manifest number: 15F9
Signing time: Mon 09 Mar 2026 05:00:11 +0000
Manifest this update: Mon 09 Mar 2026 05:00:11 +0000
Manifest next update: Tue 10 Mar 2026 05:00:11 +0000
Files and hashes: 1: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: CO1mSlqPnReXwogao8Yt14jKTB8o08n8MGiCu1PXpJ8=)
2: IfURpUgFpbVNvnCEcZgUNhevcZU.roa (hash: 0AGljKEdhAMw7coWxuquiA6Dj1ABe9m7+/a6e4Sbu60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d0:f7:95:77:31:08:ad:73:86:cd:d4:f1:29:77:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb
Validity
Not Before: Mar 9 05:00:11 2026 GMT
Not After : Mar 10 05:00:11 2026 GMT
Subject: CN=7c2f061b0f44f463472d44d5b9ca8d39bf2c09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:9a:74:d5:6e:db:3b:f0:3b:44:d9:d4:2e:
da:69:9c:d4:bb:f1:5c:d1:d9:1a:93:d0:ba:af:6d:
ea:c7:78:37:cd:11:5c:28:b7:c7:c6:7a:6f:ee:a9:
d3:18:13:bd:3f:ea:30:9e:4d:0a:29:da:46:fb:bf:
ac:a3:c1:91:bc:03:a9:81:d0:db:c7:a5:5e:ec:bf:
1a:d8:3c:80:5f:ad:b7:f0:15:d2:a0:49:af:84:a8:
20:12:53:3a:44:2a:db:48:96:b4:ee:76:d8:6d:f7:
1c:9c:c6:c5:a2:5e:9b:bf:d3:a6:1a:9f:7f:75:c4:
93:91:71:36:23:75:62:2a:c0:d8:a1:a6:0a:2b:1c:
dc:8b:3c:7f:0b:76:ab:48:1d:62:ad:8a:19:a3:0c:
6a:45:f7:48:e5:d0:2f:6b:5e:0b:4e:42:a3:d6:b8:
1c:e3:85:31:84:50:ae:8d:1d:dc:3e:c1:da:31:7c:
0e:25:e4:eb:df:45:c7:27:c5:ed:5d:c2:06:23:4f:
7c:47:d7:30:c2:5e:3e:c8:9f:2a:3b:00:d4:c3:ab:
82:f3:fd:5c:80:f2:86:8b:67:70:7b:d5:e5:51:bb:
51:ac:b4:70:b2:66:1d:b9:48:ec:4b:d8:b9:77:d1:
98:3c:4d:f1:70:76:10:ba:eb:62:b5:77:a3:78:6f:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2F:06:1B:0F:44:F4:63:47:2D:44:D5:B9:CA:8D:39:BF:2C:09:AC
X509v3 Authority Key Identifier:
keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:83:0d:67:96:cc:50:b1:b5:13:dc:a0:cd:4e:3d:c3:1c:c2:
f7:6e:22:a3:5f:5a:47:f2:3f:74:be:00:28:0f:0e:e2:4e:b0:
d1:09:c7:c4:e6:35:20:c8:fb:37:24:82:08:e5:8e:9c:73:74:
27:52:3b:03:2f:23:7d:ae:70:a3:f1:4c:a7:b6:03:ef:bd:ba:
9e:3a:42:e3:6b:e1:b1:64:f1:75:8c:fe:b9:4d:84:6a:58:16:
6b:9d:c1:da:4a:d4:5d:31:55:0c:40:4b:5d:ad:d6:29:9e:2d:
8b:cd:a4:2f:55:87:09:8b:6b:f1:5a:6d:dd:6c:b4:62:c5:c5:
07:79:3b:42:aa:5b:e7:80:78:4a:ec:b8:a8:47:86:f4:7a:93:
ad:2c:58:22:f2:9c:e0:e6:0d:3a:8e:de:3d:32:9b:47:f0:cb:
de:ef:5b:bb:13:b0:4e:a2:b8:73:4b:01:90:f1:9f:bd:7e:a5:
76:1f:35:fa:23:db:36:5d:41:63:60:7d:f8:85:66:21:d4:8b:
d1:2f:4e:64:8d:02:7f:33:94:43:7f:3c:0d:dc:ea:50:a6:b9:
cf:40:e8:6c:a9:55:d0:85:e1:14:17:ba:d3:25:16:40:11:de:
c1:e5:20:23:09:be:a8:32:4c:fd:de:f7:43:3b:b7:d3:3e:66:
ed:6a:d5:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzQ95V3MQitc4bN1PEpd0IoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTQ3ODBmNWNkMDdlOTQ4YmU2ZmE0YjQ5MjVhNzMxMzkw
NmQ1ZWIwHhcNMjYwMzA5MDUwMDExWhcNMjYwMzEwMDUwMDExWjAzMTEwLwYDVQQD
Eyg3YzJmMDYxYjBmNDRmNDYzNDcyZDQ0ZDViOWNhOGQzOWJmMmMwOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bCadNVu2zvwO0TZ1C7aaZzUu/Fc
0dkak9C6r23qx3g3zRFcKLfHxnpv7qnTGBO9P+ownk0KKdpG+7+so8GRvAOpgdDb
x6Ve7L8a2DyAX6238BXSoEmvhKggElM6RCrbSJa07nbYbfccnMbFol6bv9OmGp9/
dcSTkXE2I3ViKsDYoaYKKxzcizx/C3arSB1irYoZowxqRfdI5dAva14LTkKj1rgc
44UxhFCujR3cPsHaMXwOJeTr30XHJ8XtXcIGI098R9cwwl4+yJ8qOwDUw6uC8/1c
gPKGi2dwe9XlUbtRrLRwsmYduUjsS9i5d9GYPE3xcHYQuutitXejeG+F+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwvBhsPRPRjRy1E1bnKjTm/LAmsMB8GA1UdIwQY
MBaAFBSkeA9c0H6Ui+b6S0klpzE5BtXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGIt
OTkzMjM2ODYyMTZkLzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGItOTkzMjM2ODYyMTZk
LzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4MNZ5bM
ULG1E9ygzU49wxzC924io19aR/I/dL4AKA8O4k6w0QnHxOY1IMj7NySCCOWOnHN0
J1I7Ay8jfa5wo/FMp7YD7726njpC42vhsWTxdYz+uU2EalgWa53B2krUXTFVDEBL
Xa3WKZ4ti82kL1WHCYtr8Vpt3Wy0YsXFB3k7Qqpb54B4Suy4qEeG9HqTrSxYIvKc
4OYNOo7ePTKbR/DL3u9buxOwTqK4c0sBkPGfvX6ldh81+iPbNl1BY2B9+IVmIdSL
0S9OZI0CfzOUQ388DdzqUKa5z0DobKlV0IXhFBe60yUWQBHeweUgIwm+qDJM/d73
Qzu30z5m7WrVqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:19 2026 by rpki-client