Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File: Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier: g2iDK7ALcvu1PWNID1N6S9/V4gHpa/DTL/r0Aa4pFV8=
Subject key identifier: 4F:0B:AA:9A:88:FD:4B:8D:21:8A:24:92:53:9C:31:36:B1:09:E9:25
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer: /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial: 019BDB7F6C369D30CB9B7772C9B7F933C356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number: 11A9
Signing time: Tue 20 Jan 2026 13:01:59 +0000
Manifest this update: Tue 20 Jan 2026 13:01:59 +0000
Manifest next update: Wed 21 Jan 2026 13:01:59 +0000
Files and hashes: 1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: bvwYkLoF/kJZ0txHq9P/junR7SO+wGc+g8Ti3+EaMaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:db:7f:6c:36:9d:30:cb:9b:77:72:c9:b7:f9:33:c3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Validity
Not Before: Jan 20 13:01:59 2026 GMT
Not After : Jan 21 13:01:59 2026 GMT
Subject: CN=4f0baa9a88fd4b8d218a2492539c3136b109e925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:38:12:c9:16:79:39:b8:c1:a9:96:7a:e7:a6:
a8:d5:7a:7f:99:ee:da:e5:45:97:c3:6a:11:6c:81:
4c:bd:53:69:22:20:6d:19:0a:c7:9f:2b:4f:04:94:
0f:68:66:8c:72:58:a7:37:f9:2d:34:60:4b:77:7b:
0d:e9:b7:32:4d:f8:bb:13:1b:c0:c8:a5:46:6f:b7:
8a:5a:85:63:2b:7b:9b:e1:ff:a2:75:01:e1:84:0d:
91:01:18:e2:ee:83:2c:2c:d5:57:05:7c:e9:9a:2b:
71:b3:ad:90:9d:3f:68:b9:8f:16:94:96:c9:d6:34:
d1:ae:23:99:16:36:28:90:56:c1:68:25:82:48:42:
40:cb:1d:37:c7:9f:e3:81:63:31:76:78:49:8f:71:
40:f9:7a:ab:93:dc:6b:78:63:07:af:5b:f7:4b:9e:
18:e8:81:74:77:90:f2:2f:2f:17:c9:43:7e:ea:81:
62:b3:50:11:b2:6a:4c:5f:64:4b:77:05:6e:e6:db:
ad:3a:66:f5:93:0e:70:ad:38:36:9b:80:2e:35:75:
77:c1:bf:63:da:b0:f7:93:a2:24:5c:98:15:a5:9c:
18:5a:84:04:c4:32:73:66:2f:f8:1f:20:95:05:51:
a9:5b:be:b5:e4:9f:dc:8f:62:86:ab:d0:79:b1:e8:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:AA:9A:88:FD:4B:8D:21:8A:24:92:53:9C:31:36:B1:09:E9:25
X509v3 Authority Key Identifier:
keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:43:48:e7:31:4a:10:d2:df:b8:a9:f5:c5:66:67:50:0e:
03:85:b9:35:53:d4:c5:26:dd:81:c2:24:ed:02:52:ad:d0:67:
7b:14:ac:cc:a4:8f:ce:b6:aa:73:15:f2:7a:ee:14:40:d4:ef:
a0:57:b2:fc:6d:ff:80:b0:f0:55:92:ed:3a:fd:a1:f9:00:39:
e9:b5:a6:60:3b:c1:36:da:66:93:a2:1b:8e:6a:44:0a:4c:68:
b2:61:8a:40:01:88:13:90:b3:6d:00:10:b2:e3:43:18:f1:eb:
3d:07:8a:a3:0c:4d:7d:c0:c6:88:c0:6e:eb:9d:0c:6e:55:11:
78:ee:90:33:6e:fa:40:f5:e0:d5:56:36:8a:4f:b4:ed:49:a4:
18:23:25:8d:be:5b:48:4d:a2:c6:95:88:79:88:fe:4a:96:cf:
a2:17:42:24:f3:98:c7:87:a6:8f:40:62:56:12:6a:39:6f:2b:
09:78:9f:e9:c5:a5:90:92:9b:d9:b6:3e:18:35:57:a8:6a:62:
03:bc:7e:42:56:6f:63:d7:f7:77:0a:b9:25:c2:7b:ed:2a:06:
b2:a0:f8:f2:64:6d:6e:66:7e:7e:25:56:2f:98:15:eb:91:89:
5c:57:cb:4f:e2:5a:fe:91:d5:9e:fc:1b:69:5e:e6:df:b7:95:
32:fb:ca:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvbf2w2nTDLm3dyybf5M8NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZmVlNTYwMWNmMjM4ZTFkZDc5MjFhYzlkODgyOTZlMmNj
Y2RlODgwHhcNMjYwMTIwMTMwMTU5WhcNMjYwMTIxMTMwMTU5WjAzMTEwLwYDVQQD
Eyg0ZjBiYWE5YTg4ZmQ0YjhkMjE4YTI0OTI1MzljMzEzNmIxMDllOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujgSyRZ5ObjBqZZ656ao1Xp/me7a
5UWXw2oRbIFMvVNpIiBtGQrHnytPBJQPaGaMclinN/ktNGBLd3sN6bcyTfi7ExvA
yKVGb7eKWoVjK3ub4f+idQHhhA2RARji7oMsLNVXBXzpmitxs62QnT9ouY8WlJbJ
1jTRriOZFjYokFbBaCWCSEJAyx03x5/jgWMxdnhJj3FA+Xqrk9xreGMHr1v3S54Y
6IF0d5DyLy8XyUN+6oFis1ARsmpMX2RLdwVu5tutOmb1kw5wrTg2m4AuNXV3wb9j
2rD3k6IkXJgVpZwYWoQExDJzZi/4HyCVBVGpW7615J/cj2KGq9B5sehGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8LqpqI/UuNIYokklOcMTaxCeklMB8GA1UdIwQY
MBaAFBH+5WAc8jjh3XkhrJ2IKW4szN6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEt
YzQ2ZTAwNzhlZGY3LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMGFhMTgtMDQyOS00YmFiLThlMzEtYzQ2ZTAwNzhlZGY3
LzEvRWY3bFlCenlPT0hkZVNHc25ZZ3BiaXpNM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0dDSOcx
ShDS37ip9cVmZ1AOA4W5NVPUxSbdgcIk7QJSrdBnexSszKSPzraqcxXyeu4UQNTv
oFey/G3/gLDwVZLtOv2h+QA56bWmYDvBNtpmk6IbjmpECkxosmGKQAGIE5CzbQAQ
suNDGPHrPQeKowxNfcDGiMBu650MblUReO6QM276QPXg1VY2ik+07UmkGCMljb5b
SE2ixpWIeYj+SpbPohdCJPOYx4emj0BiVhJqOW8rCXif6cWlkJKb2bY+GDVXqGpi
A7x+QlZvY9f3dwq5JcJ77SoGsqD48mRtbmZ+fiVWL5gV65GJXFfLT+Ja/pHVnvwb
aV7m37eVMvvKeQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:35 2026 by rpki-client