Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json)
Hash identifier: FduxTsK8AYAyCFSkIHf2u9N4nXIL+QJ3hXWYRpdgXh4=
Subject key identifier: 9A:44:44:3A:94:F2:1C:86:63:9A:D7:14:99:55:0F:58:94:39:6E:F8
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 019BC03E18446AC139883515FD29EAA8F4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
Manifest number: 0C1D
Signing time: Thu 15 Jan 2026 06:00:53 +0000
Manifest this update: Thu 15 Jan 2026 06:00:53 +0000
Manifest next update: Fri 16 Jan 2026 06:00:53 +0000
Files and hashes: 1: Xjpgprt-MiRUXHTOkbwNzV8r0fw.roa (hash: K/itoI+NZE9bbCEUvh9ewWIzAihCr0o1PG+M1VaHse0=)
2: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: 5xicHCAkNTUxOim6m3rm9Io9bTmiPeMiqKLEz0j/iOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:c0:3e:18:44:6a:c1:39:88:35:15:fd:29:ea:a8:f4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Jan 15 06:00:53 2026 GMT
Not After : Jan 16 06:00:53 2026 GMT
Subject: CN=9a44443a94f21c86639ad71499550f5894396ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:bf:f9:9b:5e:66:78:70:b4:7f:e3:54:a8:
22:73:14:d5:bb:c4:57:08:c5:97:62:7c:08:ae:82:
fc:be:a0:65:49:72:a3:55:bd:30:ae:18:11:f4:3b:
03:0d:18:72:83:05:07:df:de:4c:86:cd:77:69:ce:
7f:f2:cf:2d:4a:9f:9d:97:90:e3:58:e4:26:bd:99:
94:2e:e2:bd:af:cc:84:51:60:bb:10:f5:f4:ea:2a:
eb:67:7b:74:0a:2a:02:52:5a:0f:07:f4:11:94:b1:
fd:cf:95:d0:df:bb:90:fd:c2:24:28:f4:a3:86:1c:
6e:24:3f:90:57:28:1e:ae:d5:d0:a2:3e:f9:a5:2e:
5a:2f:9e:4b:0c:b9:c5:94:6f:78:6e:93:60:ff:5e:
70:9b:e5:52:af:f4:ba:5f:d8:1d:69:b7:5b:0c:0c:
d4:be:ef:f3:ea:8b:56:98:b0:77:62:f4:74:88:98:
25:c1:2f:84:c8:70:ba:7f:60:98:fb:2e:27:cd:35:
ec:eb:ad:7b:38:ef:3b:8a:07:38:67:85:c9:d4:8a:
73:db:89:5c:2e:c3:8d:b7:ee:10:7c:26:69:1d:7f:
b2:d5:84:70:65:3c:97:69:9a:da:ec:f3:65:80:15:
bf:62:85:f1:68:28:25:8e:7d:a8:f2:0f:ee:52:79:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:44:3A:94:F2:1C:86:63:9A:D7:14:99:55:0F:58:94:39:6E:F8
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:70:70:c1:e1:43:86:cf:9e:ef:08:92:e4:4a:b9:7d:18:6a:
02:2b:70:30:30:ad:4a:16:06:64:9b:4d:15:b1:bc:18:ef:b3:
70:3d:28:96:ba:06:99:0e:3f:5c:e1:6e:a4:6f:93:a0:49:58:
fb:83:03:d7:4f:e4:e7:ef:84:e2:52:f7:75:7e:00:34:e2:55:
8a:26:ae:84:04:c4:90:ac:e9:14:ee:3b:3b:ba:77:50:5a:48:
65:b4:97:e0:b4:17:8f:45:1f:e2:ca:dd:3d:06:b6:4b:72:5b:
30:00:0d:9d:86:24:06:66:5e:d0:17:21:5e:b2:66:6a:d8:e7:
3a:0b:8b:47:8a:24:c1:27:24:21:0d:3c:e2:c5:78:8f:8e:b6:
5d:7d:05:af:71:c9:fc:54:e8:88:7e:ef:48:7c:80:3a:92:6c:
f4:c7:7b:a3:ce:ef:e8:4a:bb:c6:37:c0:23:cc:fd:71:b2:0d:
1f:30:35:4f:e3:16:9a:be:70:12:46:e0:e3:02:7e:54:03:62:
61:38:b4:ed:ce:dc:ef:56:1e:27:7f:2a:c0:be:29:40:44:2e:
aa:ba:d4:28:6c:4e:0d:61:cc:9e:a3:ef:6b:1a:8f:27:cd:45:
47:e7:13:38:59:03:76:76:ce:64:3a:68:57:eb:39:30:22:27:
8b:5c:96:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:31 2026 by rpki-client