Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
File: OExnnLr4wq171-FZCG_fCifSooQ.mft (raw, json)
Hash identifier: v5GX2fTmHWMXvP+b8SC0n8SNz+/5c5QanUE+qiMeEKg=
Subject key identifier: 6D:3D:B7:BD:20:CA:7B:20:14:AB:39:60:51:22:1C:7F:7A:08:A5:5F
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 019BF91B7FEA131A342079A880B225F73A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
Manifest number: 0DD8
Signing time: Mon 26 Jan 2026 07:01:27 +0000
Manifest this update: Mon 26 Jan 2026 07:01:27 +0000
Manifest next update: Tue 27 Jan 2026 07:01:27 +0000
Files and hashes: 1: OExnnLr4wq171-FZCG_fCifSooQ.crl (hash: EIH1XofYVeSbi24BYSkQJKLi9X8G9nR5IWB/cKrg0kM=)
2: T-KhfHsksj8KeU37bSUX8ZMkZ8A.roa (hash: Wa/258R5lna23OSS02qeNtEmsr6N24HsS4xUIHcerP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:7f:ea:13:1a:34:20:79:a8:80:b2:25:f7:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Jan 26 07:01:27 2026 GMT
Not After : Jan 27 07:01:27 2026 GMT
Subject: CN=6d3db7bd20ca7b2014ab396051221c7f7a08a55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:db:9a:82:00:56:24:69:33:39:fe:5f:ae:
25:ed:95:d3:64:75:dc:4e:c2:d1:a4:c3:b9:99:0d:
c4:22:7f:fe:bd:de:5e:7a:ca:09:44:a5:81:a1:4f:
8d:5f:48:e1:73:f6:31:fe:a0:83:58:c4:f7:72:7a:
86:30:d3:66:4c:8d:db:0c:4b:0d:6a:58:90:16:68:
54:fe:a5:bd:4c:96:d4:1f:e7:f6:ee:47:bf:a0:b4:
49:c9:5e:78:26:9c:42:ff:bf:d4:00:a2:4f:99:95:
f6:c5:0c:4b:9b:b0:c6:19:1e:cf:d3:93:1b:4b:e4:
8c:3c:d3:d9:b4:66:51:0f:33:2d:15:0b:11:5b:fe:
7a:92:cb:2f:fb:53:6a:65:98:78:63:2e:68:f5:e0:
9a:78:57:81:ec:ae:b9:ae:21:9d:c6:9d:43:8f:99:
4d:d2:49:e1:a8:79:41:c0:66:b2:13:32:40:f8:43:
8c:eb:99:54:58:07:cb:36:48:e0:97:5d:cf:ef:5f:
ca:bf:08:4a:65:9a:97:2e:48:4e:e6:4c:ea:db:dc:
cf:b0:22:46:6d:5e:f9:e7:e7:9d:6e:d1:ad:a7:27:
61:b8:46:aa:56:d4:51:68:e2:36:5b:93:a4:6f:cb:
bf:2b:7d:6b:92:25:fb:2f:c3:3d:c3:a3:71:04:fa:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3D:B7:BD:20:CA:7B:20:14:AB:39:60:51:22:1C:7F:7A:08:A5:5F
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:40:dc:21:a0:f0:ab:d9:e8:d9:ab:19:1a:09:7f:46:2c:98:
d1:f7:08:1b:35:9a:00:80:bb:6b:66:f9:a2:2d:22:66:f9:46:
a9:c8:2d:db:10:f4:e4:58:cd:ca:c3:83:69:00:75:7a:bd:c1:
7d:0a:96:e0:6e:84:65:b5:5f:fe:38:55:d2:5a:af:52:5a:59:
6e:2d:83:a3:5c:4f:69:7a:da:c1:a3:e3:ee:c3:a8:37:05:7b:
55:0b:03:a2:17:48:fe:ff:c6:39:a1:4e:e4:6f:54:c8:cf:8c:
15:47:b8:45:74:3e:d8:e5:c7:26:d1:ee:40:8f:b6:c5:8e:25:
13:1f:7d:d4:03:54:18:9c:f5:a3:5a:0b:de:24:10:b9:75:17:
e2:46:97:73:3f:40:f2:8f:ae:20:4f:a2:22:78:0a:ad:11:6b:
d3:ee:12:3e:7e:5a:f2:7f:a5:9f:ba:50:5a:8d:80:00:cd:7c:
5e:22:50:21:af:74:bb:40:bd:39:c1:f5:17:76:02:53:bd:1c:
76:9d:56:56:55:e7:40:44:5e:e1:b6:49:54:c5:58:66:72:de:
39:64:4b:20:0b:81:11:3e:b6:43:21:79:e0:84:a1:c0:92:23:
02:ba:74:b8:5f:5b:ea:b7:60:8b:cc:0a:d1:33:17:5d:55:50:
bf:66:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:49:38 2026 by rpki-client