Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: xiWXFnv2WErL5ewTTyzd0h58Szb4pOuhpF2v1Cl7o1k=
Subject key identifier: 56:12:DD:1E:E5:F4:B0:A9:C9:37:E6:BB:F5:4E:06:24:EB:DF:E2:99
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019B97B080E3B96DD946D4176FD72987E64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0F19
Signing time: Wed 07 Jan 2026 09:01:25 +0000
Manifest this update: Wed 07 Jan 2026 09:01:25 +0000
Manifest next update: Thu 08 Jan 2026 09:01:25 +0000
Files and hashes: 1: UkZFoezS0leiI_kWIb9UyHLyBSk.roa (hash: 00IbUIp2whqbo8DVKmdfXvzNpBY/JnPeJjzwUbvBZkk=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: qE+PN+mEnjJlf/8eaaKOsFWU5Oy2cM8eMU5zMqKKGK4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:97:b0:80:e3:b9:6d:d9:46:d4:17:6f:d7:29:87:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Jan 7 09:01:25 2026 GMT
Not After : Jan 8 09:01:25 2026 GMT
Subject: CN=5612dd1ee5f4b0a9c937e6bbf54e0624ebdfe299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:e7:25:cb:ab:40:81:f6:33:6d:5d:5a:b6:
ef:fc:fc:33:4c:68:83:60:40:fc:87:43:f7:81:3a:
81:c9:bb:88:af:38:fa:36:07:07:40:8e:b4:c7:49:
45:2d:02:55:12:05:3a:de:d8:1a:de:38:3c:e6:b2:
11:4e:fb:99:c8:ec:c2:8e:62:4c:e4:74:a4:2f:b4:
55:a1:77:40:b3:04:d1:fd:72:9d:f5:91:ce:31:d8:
a0:84:3c:36:11:30:bf:87:8a:ed:c8:24:83:04:a7:
f6:28:1c:e0:ca:0b:77:6a:f1:fe:28:3f:fe:aa:a4:
17:6d:58:77:d6:06:dd:47:9b:6d:5b:09:77:e7:6b:
2b:bc:75:d3:70:0d:04:43:9a:44:c7:2e:84:7b:c6:
f0:5c:f8:3b:69:c5:e7:07:61:c6:9a:e7:29:74:c1:
c8:93:43:76:25:0f:dc:0e:18:fb:21:a4:3c:9a:44:
b3:ea:a4:0f:fc:8b:21:e0:45:17:79:53:29:0a:12:
5e:f4:7a:50:54:6e:e1:c9:07:46:6c:36:67:89:bf:
75:91:ff:de:34:e7:b2:9d:33:65:90:bc:8e:69:ac:
a0:78:6f:13:62:fb:95:52:54:ab:af:c9:39:93:df:
3e:56:cd:37:c3:17:33:13:43:2b:90:fd:61:e0:92:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:DD:1E:E5:F4:B0:A9:C9:37:E6:BB:F5:4E:06:24:EB:DF:E2:99
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:91:70:b6:e8:4a:95:a5:17:cb:a2:41:d3:c1:6a:7d:89:
68:78:99:67:3b:2c:9a:e1:e1:be:0c:7c:34:82:3c:dd:ca:e1:
e0:98:6c:50:8c:4d:0a:60:1f:88:be:0e:f6:d3:04:5c:ac:b0:
5b:9a:7c:96:bc:f0:0f:95:7c:06:de:ea:fe:d1:97:01:41:32:
9c:ed:02:4e:f0:70:2c:b6:ad:00:1c:8c:f0:f2:14:77:82:26:
84:f1:be:12:25:ad:64:30:23:db:a1:4c:7e:51:cd:04:b5:74:
71:8c:4c:5e:1d:5c:64:17:29:10:a7:82:8b:5f:e9:e9:de:5c:
3c:02:80:ac:66:1d:28:90:d2:93:14:98:ba:d0:eb:a9:38:99:
af:e2:ec:f0:14:4e:c3:b9:79:a2:bd:1a:6a:5b:92:3c:6a:73:
66:62:a7:91:aa:bc:94:4c:03:b2:0a:eb:c4:51:34:c0:29:47:
cf:c2:cb:11:b4:6c:89:bb:8d:bb:1d:b1:f7:11:06:6c:7b:ac:
27:a8:12:2a:c7:b4:93:ca:ae:85:e2:aa:8f:57:d2:0e:d3:8d:
91:6c:7b:f1:59:bd:56:3e:89:1c:03:14:0f:f6:21:b0:67:7f:
c7:90:90:fa:37:61:ea:4f:70:05:70:c5:8e:79:e8:00:b4:ab:
1a:d9:38:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:21 2026 by rpki-client