Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: YDfuuQmUdpdv9EDKWA+2tuL2ddYS43rH2a8e9XKW6As=
Subject key identifier: 93:BE:B0:C5:12:B9:94:DC:66:9E:5A:91:48:4D:72:1B:C2:28:A0:50
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019D7668F669EE8AEABE3110F3993B9F5EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 07A5
Signing time: Fri 10 Apr 2026 08:01:23 +0000
Manifest this update: Fri 10 Apr 2026 08:01:23 +0000
Manifest next update: Sat 11 Apr 2026 08:01:23 +0000
Files and hashes: 1: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (hash: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: Ob2R66lMpk/2uJtHDRCueZFXXsSpvRVzB9m5ifTo5sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:68:f6:69:ee:8a:ea:be:31:10:f3:99:3b:9f:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Apr 10 08:01:23 2026 GMT
Not After : Apr 11 08:01:23 2026 GMT
Subject: CN=93beb0c512b994dc669e5a91484d721bc228a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:06:2d:27:0a:bf:18:0b:c0:1d:f5:3e:64:
4f:23:00:05:24:2d:b0:33:ae:7e:f5:51:2f:8d:ee:
20:de:20:3e:36:5f:03:67:11:67:46:83:aa:ee:ab:
e6:8f:d8:10:bb:a2:7b:82:06:3c:42:fd:ea:78:87:
2b:00:ab:ca:dd:47:00:0f:fb:09:6e:15:af:d8:38:
43:15:95:aa:3e:f6:bf:16:74:be:4d:72:3e:68:25:
28:69:06:66:19:76:73:e9:53:9e:3e:59:63:a2:3b:
8e:44:b1:bc:7a:7e:3f:25:4b:86:92:6f:d2:d1:0a:
89:4b:ec:de:85:6c:62:04:08:1b:b1:db:8f:a6:52:
e7:a5:f3:f6:d8:c4:8d:fe:1c:3a:46:51:cd:4d:fe:
61:85:c1:17:fe:2a:47:8b:7f:70:b9:b2:b5:ed:97:
3e:e2:6b:33:f2:1d:ca:cd:9d:c3:41:25:3f:19:4a:
1d:53:38:98:1e:99:b2:ed:3b:73:f5:ce:d0:48:14:
35:2b:30:ef:ba:44:2d:68:5b:c4:3e:f6:56:d8:5a:
b7:38:f9:af:34:39:c2:a7:f7:13:9d:56:73:4e:ca:
1b:13:1f:07:28:77:e2:b7:88:a1:f5:1d:f2:5c:0c:
7c:be:90:fa:8c:d2:c8:18:d7:cc:6b:e3:f1:5d:75:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:B0:C5:12:B9:94:DC:66:9E:5A:91:48:4D:72:1B:C2:28:A0:50
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:68:36:20:64:57:42:86:af:0c:9f:76:80:76:e1:00:22:8b:
f2:7c:01:69:ad:b6:fb:d0:98:1d:8d:e0:33:b0:e9:1b:96:f9:
2b:5d:ad:20:e1:f0:b6:c8:45:6e:40:21:59:28:07:8b:3e:00:
44:59:33:ab:1a:06:d6:39:27:87:8e:0f:0a:0b:af:89:3d:b0:
39:ba:66:39:06:13:42:e8:de:ab:5c:74:51:35:6a:b4:46:62:
58:36:0e:da:51:19:11:15:21:c5:f5:58:61:71:3e:59:83:88:
3b:bf:10:d1:00:73:ed:86:ed:ac:ac:1e:d5:dc:f7:71:49:48:
d5:50:61:fd:23:0e:00:c2:26:71:2a:0d:54:04:6d:d1:85:86:
89:1c:b0:30:44:47:d1:98:32:4f:c0:d2:d8:7e:4e:26:b4:90:
cf:45:d5:6e:17:b2:6f:a1:6e:8a:9c:ec:be:50:32:68:8e:ca:
2f:f4:17:33:41:f7:ec:bd:5c:10:65:09:44:16:f7:32:a4:d1:
60:b2:05:45:22:b9:52:0e:75:73:e1:26:9f:61:b5:d8:c5:25:
b9:7e:c0:91:a3:d2:92:ee:9b:7c:82:ae:28:9b:61:1b:2d:22:
05:ba:ae:ed:c5:09:e5:ac:b5:af:8d:d6:53:63:af:50:86:a0:
f2:2c:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:10 2026 by rpki-client