Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
File: kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json)
Hash identifier: DL+wPwh9n9i5AI3vMGdWtv2RsL5K+LIW7kf5x+qrVFk=
Subject key identifier: 1A:A4:FF:63:85:F7:FA:B6:31:28:90:79:4B:F1:AB:86:C0:46:48:F4
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 019BA158DFFEA957A541B9C7E51B7FB1F651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
Manifest number: 17BB
Signing time: Fri 09 Jan 2026 06:01:54 +0000
Manifest this update: Fri 09 Jan 2026 06:01:54 +0000
Manifest next update: Sat 10 Jan 2026 06:01:54 +0000
Files and hashes: 1: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: SH+oIw8rPyR/q3lVHoH9UKaBvW6DlrZvYXjHudfDw1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a1:58:df:fe:a9:57:a5:41:b9:c7:e5:1b:7f:b1:f6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Jan 9 06:01:54 2026 GMT
Not After : Jan 10 06:01:54 2026 GMT
Subject: CN=1aa4ff6385f7fab6312890794bf1ab86c04648f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:28:0f:4f:a0:8e:9a:9c:45:22:84:a8:7e:
0d:69:a4:df:e2:41:f5:a9:ac:f2:5d:64:55:bb:7b:
57:e2:2c:b4:8a:b4:71:33:31:96:58:4a:04:3c:b1:
7d:8d:ae:9d:83:f4:3e:07:f8:db:af:49:28:2e:d1:
0b:f3:a9:66:3f:11:8b:df:93:20:8b:a2:f6:08:19:
23:a4:ee:7c:3f:64:7a:ab:34:15:be:19:48:e4:4e:
bc:b0:8f:e1:20:b9:95:09:a6:62:27:a3:a6:77:79:
bb:ef:f4:b3:16:ab:35:41:c0:dd:fb:7b:09:f8:8f:
16:4e:08:32:74:65:85:9d:f9:15:4b:1b:7b:22:ff:
a6:03:b8:61:33:bc:dc:f2:c4:34:20:63:a4:be:6c:
41:a9:41:43:21:c9:4e:f7:6b:20:5f:c7:a5:d3:7b:
73:6a:37:f5:2a:82:ea:77:d5:8d:74:97:a9:96:30:
f5:f3:eb:eb:cd:4b:0c:80:1d:ab:8e:01:ad:15:a6:
c4:95:66:a6:12:09:37:92:5e:68:18:ce:cf:6c:db:
a1:6f:38:5a:c8:f4:3f:50:3a:b1:d7:72:d3:24:6d:
74:70:a5:e5:9c:c2:6c:38:5c:00:d3:2b:78:30:1e:
3c:2e:3c:c4:1d:0a:54:38:bc:61:0d:c0:59:43:dc:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:FF:63:85:F7:FA:B6:31:28:90:79:4B:F1:AB:86:C0:46:48:F4
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:62:28:82:6d:7b:b1:ff:f0:36:75:3d:a6:37:6a:86:52:4b:
38:b7:2b:a3:6b:2b:08:07:df:99:99:ad:89:a6:1c:ba:8c:f5:
9b:a8:03:cf:03:6e:a9:6b:2d:9f:1c:2d:9b:ca:67:dc:5b:04:
f5:e6:c8:3f:ec:cf:c3:bb:3c:d4:e4:db:75:54:8a:5e:c2:86:
81:f3:5f:b0:b2:98:e7:86:b7:d1:b5:d4:53:c0:36:a1:e1:43:
18:7c:60:f9:d5:c0:e5:0f:b0:ab:c5:28:f1:62:3c:68:7d:75:
6d:d2:a0:33:6b:55:78:c3:1a:0e:d8:c8:22:0a:69:52:b9:63:
1d:7b:22:e4:7f:47:8a:9f:02:ce:c8:a0:c7:b1:08:a4:63:c2:
b3:ef:ba:2d:d2:51:c9:ba:a5:99:95:25:8a:53:d6:96:da:83:
5e:cf:0f:33:4d:18:7e:29:13:c3:0e:1e:4e:30:21:78:6d:70:
dc:6d:d3:83:c3:1e:78:ec:e6:0d:be:f1:9b:83:24:33:fb:2f:
65:bc:2c:77:c0:22:21:c9:80:4f:19:38:fa:39:d4:88:7b:76:
8e:d4:81:eb:8c:23:8e:dc:92:40:40:89:d9:44:8a:99:19:6f:
e3:2c:fb:5c:1f:18:30:e7:dd:fc:d6:99:85:99:f0:71:c9:a7:
d4:de:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:30 2026 by rpki-client