Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: 9R2hzcR4hXhjM9R8DsOrEBrYZO8loe1ReReHYpxiCY0=
Subject key identifier: F3:85:DB:B1:C5:E0:2C:4E:5B:D3:76:3E:74:E2:6A:24:32:86:10:50
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 019D18DA755F4F378959D93862B4EB3C4BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 07E6
Signing time: Mon 23 Mar 2026 04:01:03 +0000
Manifest this update: Mon 23 Mar 2026 04:01:03 +0000
Manifest next update: Tue 24 Mar 2026 04:01:03 +0000
Files and hashes: 1: 4LvgqQnRm-5wgkIxb2YREs-b2RY.roa (hash: OXbW7JLQRI/gw7tyjauy/Oxf9k522sPNsWVSUNOr3ok=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: j+brxxY6PHiKqXVLPtTPjylTvYds7d2Qo1YLELDbnHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:18:da:75:5f:4f:37:89:59:d9:38:62:b4:eb:3c:4b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Mar 23 04:01:03 2026 GMT
Not After : Mar 24 04:01:03 2026 GMT
Subject: CN=f385dbb1c5e02c4e5bd3763e74e26a2432861050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:9b:21:24:13:22:7c:01:ca:a0:7b:3a:74:
8f:25:9a:3c:17:5f:40:56:bb:03:a2:bf:f2:04:7b:
8a:99:a1:94:c8:61:c1:c9:66:3f:8f:ea:e5:51:4f:
54:f6:f9:31:25:c5:47:a3:33:78:94:60:fb:95:4c:
51:62:1d:d3:c8:83:e8:a3:3e:4c:7b:20:69:63:81:
df:4a:97:8d:9e:81:b3:85:d2:85:f1:c4:bd:f0:d6:
71:c1:df:02:29:65:0b:93:e1:e9:29:2e:00:cd:87:
af:1e:db:c1:ab:79:bf:17:9e:f6:c4:00:11:12:61:
04:96:58:20:f0:ad:aa:eb:8c:8c:70:62:23:dd:75:
bc:90:23:33:7a:4e:70:af:7c:ba:30:05:f1:8f:f4:
7f:99:9d:19:29:3e:19:48:53:bd:32:e0:b1:a9:16:
2e:c1:b8:40:af:cf:e9:d7:ef:77:ff:7c:97:bc:2f:
1a:9a:e2:42:17:14:b8:4f:d3:74:7e:01:8d:02:a7:
45:a6:16:44:eb:c2:10:30:33:74:61:40:1c:78:02:
1b:c3:86:c9:22:19:13:97:89:cb:2b:ed:e3:1a:44:
23:87:95:64:2d:b3:7f:bb:95:1e:41:57:40:87:a8:
45:84:d0:50:88:6e:fc:bb:14:63:f6:b3:04:5c:8c:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:85:DB:B1:C5:E0:2C:4E:5B:D3:76:3E:74:E2:6A:24:32:86:10:50
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:c4:7d:ba:ef:7c:e8:a8:d1:e3:61:82:58:a5:d9:a2:07:
89:07:d5:bd:83:2f:dc:a1:d3:b5:89:e2:c7:6f:41:d4:dc:da:
99:22:11:d6:6c:75:bb:73:98:0a:ef:0d:eb:a3:fa:a4:db:ad:
bf:e2:32:b0:f2:cf:b2:a6:74:aa:b7:00:c6:15:46:d9:8c:2a:
73:fa:37:dd:b8:24:43:bc:13:f2:b9:47:99:2b:3b:d9:02:cb:
8f:c4:db:25:68:88:40:16:1d:b7:33:06:e4:3a:ab:e9:15:72:
93:e7:21:7a:07:54:25:e0:65:f2:bc:59:8a:7b:da:c9:5f:f8:
d5:16:e5:dd:5b:73:b2:77:18:55:54:90:b3:a5:2a:94:5d:88:
64:45:bf:a1:05:ce:21:62:eb:6d:75:78:8d:a3:ae:2a:29:ee:
61:b4:7f:d9:08:36:79:20:b1:f1:90:84:9a:e3:2b:3a:e3:f1:
d4:87:b7:ce:84:b3:f6:cf:c3:6e:b4:d0:99:98:d5:b0:8a:07:
b5:85:87:a4:2f:c7:60:ea:fc:88:1a:2c:41:f8:ce:e8:6a:69:
74:23:25:65:20:66:3c:84:3a:3e:58:72:50:27:4a:12:dd:b4:
63:89:76:86:73:62:4a:ef:6e:1a:50:68:69:19:73:df:6d:97:
33:b3:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:06 2026 by rpki-client