Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File: AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier: +5BIgjO4KjXKAz+sir8OaVeL/jkf388HvpoCCaJDjDM=
Subject key identifier: B2:CE:9A:24:11:AC:67:63:C2:5A:B3:1D:0E:8F:84:27:BC:BF:3C:15
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer: /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial: 019C1B7014C40D87CBA3DC6C98928FED29EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number: 0D7C
Signing time: Sun 01 Feb 2026 23:00:56 +0000
Manifest this update: Sun 01 Feb 2026 23:00:56 +0000
Manifest next update: Mon 02 Feb 2026 23:00:56 +0000
Files and hashes: 1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: I3IXkUDbiq84QtGdHwiSLaa8iS9giHpJLjFE9SscOS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:70:14:c4:0d:87:cb:a3:dc:6c:98:92:8f:ed:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Validity
Not Before: Feb 1 23:00:56 2026 GMT
Not After : Feb 2 23:00:56 2026 GMT
Subject: CN=b2ce9a2411ac6763c25ab31d0e8f8427bcbf3c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:c6:cc:cb:e9:97:92:0d:10:bd:07:9c:f5:
51:99:8c:8e:af:50:82:38:10:73:56:b8:52:bc:ea:
1b:03:9e:eb:55:00:57:ca:80:8c:e6:00:b4:32:10:
2a:d4:a2:d7:f4:46:a6:ea:90:22:b0:c3:a8:30:8d:
1b:20:02:6f:1e:b0:57:8a:1b:98:05:d7:ad:4e:3b:
82:1e:73:08:9f:ff:75:66:27:09:c2:de:e1:77:4b:
59:e0:93:3b:a9:d2:27:5b:2f:49:60:c9:f4:c7:f1:
e0:aa:5a:ab:ed:aa:7e:15:b1:a6:c4:c8:4a:91:b8:
d0:9a:50:7f:e3:2f:71:99:ab:ba:cd:9e:32:e3:cd:
fd:35:b2:47:5e:af:9e:7b:92:82:da:12:48:c4:4e:
b3:f7:6a:d9:89:bd:dd:9b:55:19:8d:7f:64:76:ae:
3a:dc:f5:08:fb:27:9d:01:69:86:13:d8:1b:ae:44:
4d:d3:03:58:a1:be:9a:49:c3:c7:bf:ff:8b:67:80:
bb:ea:cd:2e:8a:ca:bf:f2:3c:1f:27:1a:c5:4d:1d:
6f:44:89:e7:f3:f5:d8:1d:de:7a:fe:f2:97:a0:c2:
04:34:8f:68:30:08:2f:15:9c:2d:ed:bd:3f:6d:5a:
5c:7a:1d:9c:0d:1c:c3:b2:fe:7e:a7:d6:c8:c4:a2:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:9A:24:11:AC:67:63:C2:5A:B3:1D:0E:8F:84:27:BC:BF:3C:15
X509v3 Authority Key Identifier:
keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:bc:7c:79:c7:4a:d3:72:c8:37:16:ce:ba:1d:11:0e:56:91:
13:28:31:79:da:03:62:08:da:91:ec:d7:29:58:f7:6f:97:4f:
b8:21:ef:5e:55:a0:4d:5c:25:39:d5:2b:0d:f4:c1:3b:f5:be:
fe:06:d9:4e:f0:ee:c5:84:dc:30:78:cc:b5:ab:fc:62:46:6c:
23:73:0c:46:fe:df:33:ca:8d:3e:43:25:c3:6c:d4:c2:5c:7c:
48:ab:6a:0b:e7:17:d0:95:f9:73:73:6c:98:0c:14:29:1f:a6:
c8:5c:8b:39:52:59:4d:ef:ed:39:ce:b7:01:73:7a:5f:90:7a:
3a:49:fe:58:77:6b:6c:9f:53:fc:89:11:18:f7:81:eb:72:7d:
10:d7:a8:36:eb:f1:a6:44:b8:af:d1:2d:83:0a:c8:d7:7c:c7:
31:b9:ed:f3:35:51:a2:5f:98:fc:11:f9:1d:ea:fd:04:fe:c5:
fb:6c:bc:73:b1:a6:5e:fa:f8:db:42:fb:16:e5:bb:bd:0f:5f:
28:87:57:2b:f2:9f:45:c4:a9:0d:e6:8f:a0:93:ab:2a:82:69:
6a:d6:3a:3e:38:49:33:be:99:c4:d1:96:16:a9:c1:15:4c:c2:
23:4f:4f:f9:11:80:42:4d:ae:84:4f:f9:d3:b5:04:7f:c6:78:
03:47:eb:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwbcBTEDYfLo9xsmJKP7SnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYmU5NzE4ZDRhYmI4NjdkZDA1NDRlYThmYjQ2MmRjMzMy
YjljZDIwHhcNMjYwMjAxMjMwMDU2WhcNMjYwMjAyMjMwMDU2WjAzMTEwLwYDVQQD
EyhiMmNlOWEyNDExYWM2NzYzYzI1YWIzMWQwZThmODQyN2JjYmYzYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gfGzMvpl5INEL0HnPVRmYyOr1CC
OBBzVrhSvOobA57rVQBXyoCM5gC0MhAq1KLX9Eam6pAisMOoMI0bIAJvHrBXihuY
BdetTjuCHnMIn/91ZicJwt7hd0tZ4JM7qdInWy9JYMn0x/Hgqlqr7ap+FbGmxMhK
kbjQmlB/4y9xmau6zZ4y4839NbJHXq+ee5KC2hJIxE6z92rZib3dm1UZjX9kdq46
3PUI+yedAWmGE9gbrkRN0wNYob6aScPHv/+LZ4C76s0uisq/8jwfJxrFTR1vRInn
8/XYHd56/vKXoMIENI9oMAgvFZwt7b0/bVpceh2cDRzDsv5+p9bIxKIeFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLOmiQRrGdjwlqzHQ6PhCe8vzwVMB8GA1UdIwQY
MBaAFAC+lxjUq7hn3QVE6o+0YtwzK5zSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAt
MDJhMjEzNTg0MjRhLzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAtMDJhMjEzNTg0MjRh
LzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Lx8ecdK
03LINxbOuh0RDlaREygxedoDYgjakezXKVj3b5dPuCHvXlWgTVwlOdUrDfTBO/W+
/gbZTvDuxYTcMHjMtav8YkZsI3MMRv7fM8qNPkMlw2zUwlx8SKtqC+cX0JX5c3Ns
mAwUKR+myFyLOVJZTe/tOc63AXN6X5B6Okn+WHdrbJ9T/IkRGPeB63J9ENeoNuvx
pkS4r9EtgwrI13zHMbnt8zVRol+Y/BH5Her9BP7F+2y8c7GmXvr420L7FuW7vQ9f
KIdXK/KfRcSpDeaPoJOrKoJpatY6PjhJM76ZxNGWFqnBFUzCI09P+RGAQk2uhE/5
07UEf8Z4A0froQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:05 2026 by rpki-client