Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json)
Hash identifier: r8ZeqUOn6brJePTHr6N3njCW8IIlY3nPz9YEl0QuFEY=
Subject key identifier: A7:83:FD:60:EA:43:51:2B:99:26:E6:83:0D:2A:F0:96:15:7F:65:10
Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Certificate serial: 019C4F93ED85E4B7D6D59A6126DC5752DF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
Manifest number: 05C5
Signing time: Thu 12 Feb 2026 02:00:20 +0000
Manifest this update: Thu 12 Feb 2026 02:00:20 +0000
Manifest next update: Fri 13 Feb 2026 02:00:20 +0000
Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: +ST0CMEUeH0fmIVaqgnbrtGwqPvKKxpNdrXO5invOqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4f:93:ed:85:e4:b7:d6:d5:9a:61:26:dc:57:52:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae
Validity
Not Before: Feb 12 02:00:20 2026 GMT
Not After : Feb 13 02:00:20 2026 GMT
Subject: CN=a783fd60ea43512b9926e6830d2af096157f6510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:47:a8:4c:2b:15:bb:e5:f8:e8:0b:be:ff:
f8:90:3f:4b:94:3a:1a:5f:81:a7:87:db:7f:f3:aa:
16:cd:c7:a9:a7:6a:85:19:d1:a2:b6:71:c4:91:e1:
51:d9:54:0f:43:33:43:ec:42:51:80:bc:a9:6d:47:
3e:0f:83:1d:1f:a5:43:04:b4:dd:f9:0b:78:41:2b:
54:a9:b5:c9:0b:81:93:d4:27:1b:03:5f:50:c7:8f:
b9:80:96:fe:22:06:83:46:f3:0d:ea:23:06:0b:30:
74:7c:ab:0a:19:ed:bd:8d:3c:07:03:7c:9b:31:99:
79:74:c5:df:40:3c:06:69:fe:cb:79:1a:7f:95:8c:
d1:41:f3:94:57:2a:39:11:d6:a5:df:22:dd:34:1d:
9c:b2:65:37:68:b8:66:d5:4c:e3:14:c1:59:53:e8:
d2:98:a1:31:02:cb:28:4c:13:41:e0:b1:2b:60:e1:
59:5e:f7:a8:27:1a:e7:6e:b3:42:0e:b3:09:f6:13:
4d:73:75:ad:0d:53:33:ce:42:64:17:1f:ed:2f:cb:
b5:04:c2:a8:cf:06:0b:4a:3a:b2:39:34:6a:dc:7e:
e9:c0:c4:df:23:e0:61:95:ad:2d:6c:ae:88:38:b4:
44:45:ae:ea:82:15:2b:67:fa:a7:8a:24:79:ce:5b:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:83:FD:60:EA:43:51:2B:99:26:E6:83:0D:2A:F0:96:15:7F:65:10
X509v3 Authority Key Identifier:
keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:64:3c:a8:53:b1:7b:d5:6e:8f:cc:8c:51:ed:2f:87:f8:41:
11:1b:a8:15:2d:a6:e4:54:68:d5:81:b2:dd:f0:72:0d:92:c9:
e3:4b:07:6f:ab:77:e7:22:63:67:5d:e4:36:ed:42:a6:61:b8:
8e:c8:2c:3e:2a:e8:d6:66:21:29:c8:9f:77:49:72:21:2b:a5:
52:c7:e9:16:db:b7:29:e5:f9:56:a1:8f:59:d9:e2:ce:6e:b7:
0b:51:bb:0e:32:a6:46:3c:ef:df:eb:82:84:8b:a3:cb:6e:0e:
10:0a:b2:53:65:15:d2:f5:ff:32:76:79:75:72:67:e2:b3:34:
18:ae:68:fa:80:45:f1:b7:12:44:5e:bf:75:bc:59:ca:38:34:
3e:04:35:0d:e2:4a:75:65:b6:b7:ff:14:cf:6c:06:83:34:a6:
27:4d:f9:df:9d:f2:dc:f2:70:c5:c9:96:14:05:71:d2:d2:b8:
8b:b3:8d:6c:8f:b8:d0:f9:68:0b:1d:89:be:e6:83:d1:41:f6:
6c:24:74:46:6c:2d:8e:79:ef:85:a3:1d:2b:82:5c:87:60:b2:
2d:d1:08:a1:6e:50:14:09:7d:41:1d:00:70:a7:11:ea:f0:f8:
45:7b:08:06:81:d2:70:16:6e:75:a6:f2:a9:16:58:8d:f2:63:
7c:0c:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:29 2026 by rpki-client