Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: kylK/3sXZRfn24HxtuRlnFsKzjLttPiO4ld5SWiYsUI=
Subject key identifier: 1A:B4:18:5E:AF:86:8A:80:92:62:5C:5C:25:E0:82:A6:D5:DF:2F:E5
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 019D6687FD772BCCAEFBA87930BA730594F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 18A6
Signing time: Tue 07 Apr 2026 06:01:21 +0000
Manifest this update: Tue 07 Apr 2026 06:01:21 +0000
Manifest next update: Wed 08 Apr 2026 06:01:21 +0000
Files and hashes: 1: T058Dc8nzyJj1QE-i4OrtGwn4aQ.roa (hash: zcRDL/MU2cEJIkxNEFip0E/KypuWn835uLEU6Antv/M=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: gZlqBufCWhZX21avLrNOiM1DcyBQW0t24nxvfcsycgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:87:fd:77:2b:cc:ae:fb:a8:79:30:ba:73:05:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Apr 7 06:01:21 2026 GMT
Not After : Apr 8 06:01:21 2026 GMT
Subject: CN=1ab4185eaf868a8092625c5c25e082a6d5df2fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:b4:86:ea:a1:09:32:fd:c7:2a:d5:1d:ac:
9b:e8:49:86:0d:66:2f:91:25:3a:8d:b9:6d:3d:b3:
1d:cd:b1:f2:59:b2:52:56:f1:00:bd:7e:4e:9d:70:
f2:d7:19:fa:95:10:24:b2:11:b1:af:a5:5c:19:6f:
a9:0e:91:dc:eb:1f:33:66:50:9d:14:0e:e6:d4:d2:
38:7c:a6:f1:92:ce:90:64:33:4c:bb:27:f8:2f:fc:
88:fc:6b:2f:0e:98:ae:67:57:fe:a7:31:f6:1f:5f:
9c:ba:b6:a5:75:b6:c6:91:65:3f:f8:f6:d4:97:d1:
5b:08:18:a2:b8:39:42:27:00:8a:23:b5:fd:11:42:
b1:46:35:ed:97:8a:ef:79:c5:e4:28:37:9b:0f:17:
ea:84:86:d3:3e:b6:2d:e1:5c:da:8e:40:dd:b1:93:
bd:7a:9c:35:63:37:d5:ea:58:c0:a9:df:3c:d4:44:
a3:c4:c3:08:26:e6:69:7a:13:07:89:51:67:0c:20:
d4:45:ed:7a:be:a1:c4:d9:fc:94:c6:46:c9:2d:04:
1e:49:cb:ad:5d:c2:72:cf:8b:b7:c3:04:d4:bf:fa:
70:9d:f9:7e:9d:86:b7:cc:8f:d2:37:95:ff:b2:2b:
dc:3a:46:60:b4:41:74:65:2a:51:7d:35:77:7c:e6:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:18:5E:AF:86:8A:80:92:62:5C:5C:25:E0:82:A6:D5:DF:2F:E5
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:3b:fb:44:b2:6b:38:e7:5a:3d:ca:14:4f:8f:a9:ac:ad:
42:a1:d6:18:ac:94:d9:2e:ee:ed:45:94:d2:94:3a:2c:46:69:
5e:31:9e:35:9c:95:ac:14:f2:32:e6:9b:70:06:45:35:0f:ca:
48:99:da:e6:7e:64:5a:fd:aa:f8:8b:4a:ad:a1:72:27:d7:96:
d0:c2:ee:f4:e1:ac:1e:2c:c3:f1:ca:c4:7c:b9:ca:57:4c:11:
26:f4:3b:42:eb:c6:e5:41:00:6e:f5:23:44:87:7a:83:ad:e9:
fe:aa:25:44:8c:54:d3:11:15:20:04:62:1b:19:73:d3:18:0d:
4d:fc:68:b4:cc:50:e1:f9:37:0d:fb:bf:63:aa:c6:d4:27:a6:
11:e2:e2:71:01:42:72:1a:df:b1:5a:7d:46:80:48:6e:b2:3d:
39:7f:fe:a7:ea:30:da:cc:87:5e:72:dc:9c:58:7a:03:c7:73:
85:3d:11:47:a6:85:2e:66:1d:c9:5b:a4:7f:7d:a9:28:fd:05:
81:e3:68:e4:d9:12:5d:ad:47:62:f4:0f:a9:89:08:ae:ae:93:
bd:8f:b6:9e:91:e5:be:2e:20:38:95:ce:36:cb:bb:50:bd:4e:
0c:39:62:5c:2f:9e:44:94:f4:c9:f7:2e:ec:18:68:36:1d:f1:
5c:22:90:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:36 2026 by rpki-client