Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: xO09ZZUbafh1XwgB9Cp7soB4Uoo5jN9afGjXy9tzm1o=
Subject key identifier: C5:ED:9D:5D:3F:C9:69:34:0B:57:79:3F:44:A9:D3:6B:6B:8E:FA:F1
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 019CBCCD2BABFE248A7D0FE07A08B567BD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 0833
Signing time: Thu 05 Mar 2026 07:01:28 +0000
Manifest this update: Thu 05 Mar 2026 07:01:28 +0000
Manifest next update: Fri 06 Mar 2026 07:01:28 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: GxOtuJoS+SezhT9m4zx3s3qFwLTdmrAXqp4fx99zIOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:cd:2b:ab:fe:24:8a:7d:0f:e0:7a:08:b5:67:bd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Mar 5 07:01:28 2026 GMT
Not After : Mar 6 07:01:28 2026 GMT
Subject: CN=c5ed9d5d3fc969340b57793f44a9d36b6b8efaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:79:8f:25:97:e5:71:77:2e:0f:d2:68:d0:
53:cb:17:7f:d9:1a:61:f2:8b:86:c1:5f:87:0a:b4:
fa:32:40:a1:3f:ec:30:4d:03:d8:92:a4:7d:d9:92:
07:ae:46:88:b6:2c:8c:7c:63:cd:27:a0:cd:66:3e:
32:93:4a:67:6f:95:d2:20:70:1d:21:65:42:e9:85:
96:eb:9d:5a:09:4f:ed:70:41:f9:8f:72:88:8f:e2:
9c:e3:57:77:33:45:7e:f1:9f:67:57:d1:86:3b:72:
93:76:e0:e1:5d:cf:26:3a:57:58:18:9f:87:9b:63:
ef:8c:cf:16:e0:ce:dd:f0:ea:d0:00:f6:81:d5:33:
6f:f7:6d:55:ba:1b:1f:19:34:03:ec:3c:ae:dd:b3:
b0:65:ed:28:28:b9:93:ed:8e:e7:d4:6b:5e:6c:6d:
94:cd:43:b2:45:46:21:58:19:03:d4:3a:d3:89:85:
c9:8f:e5:d1:ea:f2:cc:c2:9e:11:2a:bf:88:ac:bc:
8b:9b:d7:9e:3c:60:5a:c7:35:f4:b2:a1:7a:1a:ab:
c0:7d:dc:98:42:f4:2a:03:62:ad:ea:10:b6:c7:dc:
73:2a:dc:0b:c7:f5:22:5e:9a:90:c8:ff:27:df:86:
94:c6:c9:99:02:5a:86:e3:c6:e5:c9:03:e5:5d:91:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:9D:5D:3F:C9:69:34:0B:57:79:3F:44:A9:D3:6B:6B:8E:FA:F1
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:26:c5:89:c8:81:21:71:c2:7f:67:18:56:32:3e:c1:a9:36:
52:22:6d:f3:84:bc:df:43:58:2a:a9:d7:73:16:06:3b:8c:26:
41:76:f1:da:0a:83:e0:5e:a1:2f:5f:86:c4:21:05:67:aa:19:
21:90:79:7a:0b:fb:61:28:56:ce:d4:62:24:b9:43:1b:98:77:
f6:dc:72:ad:36:bc:80:d8:cd:8b:7e:1d:02:38:46:b5:d9:23:
ad:4f:61:0c:b6:72:48:6d:84:39:20:d5:51:b2:a1:60:17:34:
13:f0:3d:27:4e:de:d8:28:83:43:38:2a:df:c9:82:f1:3f:90:
bd:fa:7f:74:f8:54:ae:ea:84:e4:4c:83:2e:eb:c3:8d:98:78:
de:39:4f:bd:0b:0d:b6:77:4f:70:68:94:2e:35:41:0b:7d:d2:
8c:82:4b:d1:19:fd:3b:9f:76:2f:46:53:a5:c6:42:6e:68:dc:
fa:2c:22:fc:4c:8a:59:6b:02:9d:04:8e:4a:e6:f8:12:2f:ba:
18:dd:44:7c:f7:f4:a7:f6:eb:df:f7:fd:69:fd:d0:53:9e:77:
f9:53:7a:c0:6c:7f:f0:83:1e:68:55:0a:c5:9b:f9:30:b3:d7:
27:c8:10:aa:00:58:ed:66:79:03:eb:31:c8:e8:15:e7:aa:6b:
ee:f8:07:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy8zSur/iSKfQ/gegi1Z70DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGZlZjg0MjRkYmJiODdhODlkOTM4OTg0ZTBlMmIzZWQ5
YWFiOGIwHhcNMjYwMzA1MDcwMTI4WhcNMjYwMzA2MDcwMTI4WjAzMTEwLwYDVQQD
EyhjNWVkOWQ1ZDNmYzk2OTM0MGI1Nzc5M2Y0NGE5ZDM2YjZiOGVmYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP15jyWX5XF3Lg/SaNBTyxd/2Rph
8ouGwV+HCrT6MkChP+wwTQPYkqR92ZIHrkaItiyMfGPNJ6DNZj4yk0pnb5XSIHAd
IWVC6YWW651aCU/tcEH5j3KIj+Kc41d3M0V+8Z9nV9GGO3KTduDhXc8mOldYGJ+H
m2PvjM8W4M7d8OrQAPaB1TNv921VuhsfGTQD7Dyu3bOwZe0oKLmT7Y7n1GtebG2U
zUOyRUYhWBkD1DrTiYXJj+XR6vLMwp4RKr+IrLyLm9eePGBaxzX0sqF6GqvAfdyY
QvQqA2Kt6hC2x9xzKtwLx/UiXpqQyP8n34aUxsmZAlqG48blyQPlXZHY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXtnV0/yWk0C1d5P0Sp02trjvrxMB8GA1UdIwQY
MBaAFCrf74Qk27uHqJ2TiYTg4rPtmquLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUt
MTFhYTExMTNlOGQ2LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUtMTFhYTExMTNlOGQ2
LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJybFiciB
IXHCf2cYVjI+wak2UiJt84S830NYKqnXcxYGO4wmQXbx2gqD4F6hL1+GxCEFZ6oZ
IZB5egv7YShWztRiJLlDG5h39txyrTa8gNjNi34dAjhGtdkjrU9hDLZySG2EOSDV
UbKhYBc0E/A9J07e2CiDQzgq38mC8T+Qvfp/dPhUruqE5EyDLuvDjZh43jlPvQsN
tndPcGiULjVBC33SjIJL0Rn9O592L0ZTpcZCbmjc+iwi/EyKWWsCnQSOSub4Ei+6
GN1EfPf0p/br3/f9af3QU553+VN6wGx/8IMeaFUKxZv5MLPXJ8gQqgBY7WZ5A+sx
yOgV56pr7vgHDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:24 2026 by rpki-client