Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
File: 9rG5O-fUO4bWT4tLljvJFWJfI_I.mft (raw, json)
Hash identifier: JB0SXqld2LUT808XIwV1IxtNYM0I1dJ/x+niqKN9mgM=
Subject key identifier: 90:E6:B0:39:AF:DA:E3:44:7C:DB:A3:AC:00:9A:34:0D:C8:CF:2F:22
Authority key identifier: F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
Certificate issuer: /CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Certificate serial: 019C88A8A593F6279D7D5F778F7BA7C02DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
Manifest number: 04C5
Signing time: Mon 23 Feb 2026 04:01:19 +0000
Manifest this update: Mon 23 Feb 2026 04:01:19 +0000
Manifest next update: Tue 24 Feb 2026 04:01:19 +0000
Files and hashes: 1: 9rG5O-fUO4bWT4tLljvJFWJfI_I.crl (hash: vgiISGfDVPRStrkt5mlpU+ur8g2Jb/Vlgi4yJc6dKEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:88:a8:a5:93:f6:27:9d:7d:5f:77:8f:7b:a7:c0:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b1b93be7d43b86d64f8b4b963bc915625f23f2
Validity
Not Before: Feb 23 04:01:19 2026 GMT
Not After : Feb 24 04:01:19 2026 GMT
Subject: CN=90e6b039afdae3447cdba3ac009a340dc8cf2f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:2a:de:77:59:3b:da:51:2c:47:66:61:a5:
f1:97:8f:a0:4a:75:e6:54:8b:e1:a2:33:1b:8b:2f:
cd:cc:4d:50:fe:d3:d5:78:fc:e6:ba:c9:a1:3d:e7:
db:5f:81:e6:7b:be:47:e8:9b:a4:36:ed:d0:f2:c0:
fb:2c:17:69:bd:1d:b5:bc:0a:80:6b:bf:56:c1:5b:
a6:09:e9:0b:9a:d0:a5:18:1b:03:97:e6:3a:38:be:
c4:c2:e3:f9:67:10:1f:e1:ec:75:67:98:09:45:cb:
c5:51:5c:36:a7:d2:ae:eb:88:74:6f:f7:56:4d:2f:
f5:61:06:84:c4:5b:d4:72:e7:75:36:ec:e9:d4:51:
09:ac:66:35:c1:1e:e1:f3:93:07:80:93:7c:ec:a4:
4d:aa:1a:ed:09:76:43:ef:e0:fc:f4:f6:79:71:d6:
ab:cf:73:7b:7c:3c:be:8e:11:ff:be:10:0f:2a:f0:
57:07:53:1e:04:d0:82:85:f8:fe:b8:76:60:53:47:
47:db:da:50:86:8b:8d:99:88:46:f8:8a:c6:93:d4:
04:cd:c0:cf:67:42:69:e9:0f:19:ab:ba:3a:4f:be:
ea:e2:54:3e:e1:fc:36:80:9b:61:c8:c8:09:1b:c8:
62:84:aa:e7:c6:02:68:61:d9:ed:87:9b:26:fd:98:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:B0:39:AF:DA:E3:44:7C:DB:A3:AC:00:9A:34:0D:C8:CF:2F:22
X509v3 Authority Key Identifier:
keyid:F6:B1:B9:3B:E7:D4:3B:86:D6:4F:8B:4B:96:3B:C9:15:62:5F:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rG5O-fUO4bWT4tLljvJFWJfI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b729cc-754e-4aea-85f2-0ac2cd3fe008/1/9rG5O-fUO4bWT4tLljvJFWJfI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c8:ed:db:e7:da:bb:44:f8:c8:1e:ae:47:af:79:dc:7b:55:
cf:91:61:37:ef:b0:99:27:08:f3:49:33:2c:f0:2a:9a:b5:b7:
17:b9:9d:cf:44:32:30:c9:c2:09:c1:37:1c:08:6a:52:a2:7b:
d0:fa:d1:bc:8f:61:50:f3:99:88:e4:40:9b:c2:80:51:4a:98:
84:21:ae:c1:f4:7b:92:b5:38:7f:2e:11:b8:96:8c:d1:5b:4f:
16:c8:ca:d8:8b:82:1c:31:e9:99:93:3d:99:a4:07:64:a7:8b:
27:2b:8d:63:5b:70:4c:3b:21:d0:db:2f:f8:99:61:39:79:1c:
ca:3b:aa:28:dc:d9:6b:0a:0d:68:68:48:4c:ab:b7:93:6d:de:
de:dc:9d:8c:5a:3f:ca:18:c7:42:72:dc:f4:c4:a8:5f:10:32:
b0:40:c8:c9:dd:76:db:97:2a:c9:13:04:cc:17:7c:d6:bd:d9:
6d:86:cc:d4:5e:3f:6d:6d:73:d8:51:9a:68:c6:4e:2b:80:9e:
95:5e:dc:1c:16:af:4d:6f:c7:7d:8b:69:1b:99:91:5e:54:36:
ec:2f:40:87:2a:29:a7:fc:ed:ce:db:06:a5:5d:90:96:91:64:
9d:53:be:6c:eb:b8:a4:5a:e3:12:e5:42:e5:09:35:95:8f:2c:
85:95:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:55 2026 by rpki-client