Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: w+smFVd5fABZWDs3Ccu9F7SzxLonLdoZD2uLIAKyaoY=
Subject key identifier: 86:24:6F:45:2B:7C:E8:86:33:24:AF:3F:23:57:EA:22:77:FD:98:B5
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 019BD99005B766E7A6FE971378F601CC150F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0DDF
Signing time: Tue 20 Jan 2026 04:00:52 +0000
Manifest this update: Tue 20 Jan 2026 04:00:52 +0000
Manifest next update: Wed 21 Jan 2026 04:00:52 +0000
Files and hashes: 1: XebnCKap0j-NtgbFPdSdKBn3-VA.roa (hash: 2q764mNe/SuQvZ1ES8wUHdfsH5UtBobLUA/sir5K4Ms=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: S6aO2gDE/wrnSo8L5lswWTRPrG236wxImFzih1JXKTA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d9:90:05:b7:66:e7:a6:fe:97:13:78:f6:01:cc:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jan 20 04:00:52 2026 GMT
Not After : Jan 21 04:00:52 2026 GMT
Subject: CN=86246f452b7ce8863324af3f2357ea2277fd98b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:7b:d2:96:6e:94:26:bb:a4:7a:dc:70:3e:
ba:b4:c9:ea:42:82:6f:23:be:89:08:aa:7c:50:bc:
2b:5c:a9:7c:16:a0:ad:be:07:22:9b:e5:fe:18:0a:
1b:8c:5e:c8:a9:eb:4c:5f:fe:6f:f2:3c:da:b2:55:
4f:22:57:8a:fd:49:d6:51:99:40:55:63:f6:79:db:
1d:26:bb:b0:d0:51:e6:72:5d:f7:a1:f8:3e:0d:7d:
41:36:fc:3f:ce:2f:c1:f5:07:35:f9:04:8a:41:33:
11:04:4a:79:63:4f:64:5c:98:b5:a7:51:6a:9d:46:
59:e0:3d:b9:2f:1e:1b:6c:81:27:f1:24:ef:1d:a3:
63:1a:ea:0a:37:21:fe:52:e6:e9:5a:cc:2f:33:4f:
2a:ed:e4:7e:4f:25:63:83:98:cb:3f:7d:18:5b:57:
14:2f:d5:be:ef:f2:a0:3c:63:95:03:4f:8f:5d:ed:
73:0c:07:46:bd:0c:a4:1a:e5:b9:92:9a:c6:c7:76:
bc:4f:a6:3b:2c:e9:e7:00:da:79:be:df:eb:15:6e:
2d:7b:48:07:fd:ae:f8:ca:14:94:28:85:28:08:a1:
84:71:9d:1f:5e:1c:50:88:18:2e:8a:11:c7:42:ca:
7e:52:e0:89:8f:c2:a3:a2:e0:9c:9c:6d:40:31:0e:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:24:6F:45:2B:7C:E8:86:33:24:AF:3F:23:57:EA:22:77:FD:98:B5
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:de:1a:6a:68:7f:1f:d9:cf:0c:2c:b5:35:fa:45:53:de:79:
57:f8:aa:d4:97:b5:22:82:47:f1:86:54:49:57:45:d9:d3:f4:
31:1e:de:d6:e8:1e:91:fd:1b:51:26:d5:a0:c5:d3:b9:8e:8c:
c1:1a:ca:d2:1e:9a:7f:7e:c7:75:5d:30:86:78:04:95:e3:9f:
b4:5c:6e:19:1d:20:1b:3d:1b:81:93:e6:4c:64:db:00:b3:f4:
9a:cf:e2:26:3e:c0:2c:9d:c1:79:a1:f7:5c:8b:92:85:a3:4d:
18:cc:8c:72:db:8f:58:b8:49:55:bb:53:66:17:4d:81:a1:10:
03:e6:bd:be:cd:f2:9f:69:79:17:a9:a0:21:50:e2:f8:87:56:
bd:20:86:b3:b2:65:d3:f6:04:9c:51:10:73:f2:5e:39:5b:61:
57:f2:c7:da:13:8d:e9:ef:e1:78:f7:6d:cf:f9:61:67:33:96:
5d:36:c7:1b:fa:1e:f7:48:2a:ab:52:48:b1:1a:1c:1a:11:3a:
6a:f3:72:68:8c:87:87:1b:39:0e:8a:5f:66:1b:d0:ac:ea:25:
ce:d9:a5:9b:dc:5a:1c:cf:b3:b1:5d:af:65:61:19:59:0e:59:
84:09:f2:5c:a1:51:ef:57:43:89:25:e6:4e:05:6d:5c:45:b5:
0d:8f:a4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:04 2026 by rpki-client