Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: RXOe9/l3H2jcvRVzXFAqaIWHM2VBMu6wFeCLI9d68/s=
Subject key identifier: 7F:3D:8E:5E:71:8C:4B:66:D3:05:B3:6C:54:93:A4:FC:B1:38:49:91
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 019D4BB4BEFE487C3F179D8DEB47D694C4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0D93
Signing time: Thu 02 Apr 2026 01:00:29 +0000
Manifest this update: Thu 02 Apr 2026 01:00:29 +0000
Manifest next update: Fri 03 Apr 2026 01:00:29 +0000
Files and hashes: 1: E7N3AbX4XRe6TtepW4IKz_xhbuk.roa (hash: T0P6XuI3QLOIzu4AgydenL9szcYBu2vZyoMNm8nvA0Y=)
2: HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa (hash: aHBtaErkZmaBHVd9P0AYZA/rEH87fSJk4r+cxPYL8Fk=)
3: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: lejHOshoHghl3wrT8rNkcpIEGsrFgCcsLRFsoKmd4qI=)
4: iTmeATvkhdaQSx1hi5nnHidew6A.roa (hash: IYi+E84wN5bo5fjg0rwOe7narncl8RETFzc0nw+a92c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4b:b4:be:fe:48:7c:3f:17:9d:8d:eb:47:d6:94:c4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Apr 2 01:00:29 2026 GMT
Not After : Apr 3 01:00:29 2026 GMT
Subject: CN=7f3d8e5e718c4b66d305b36c5493a4fcb1384991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:1b:de:7c:90:8c:b7:b9:61:47:eb:a3:5c:
50:36:f4:ae:c3:b2:26:c0:82:91:06:e1:d5:25:a5:
95:d2:69:69:81:7b:3f:78:89:52:63:89:9c:fb:50:
9e:79:15:9b:69:11:78:43:6a:3c:41:b0:ee:4b:a8:
a3:6c:ce:2b:3f:28:0d:58:cb:d7:35:61:f1:7e:82:
8d:22:9b:8a:b4:00:f7:a7:bd:92:23:2c:39:ac:10:
10:66:9e:58:b4:ca:cc:54:7d:c5:98:2c:59:82:c4:
99:f2:15:f6:2c:e4:de:0f:75:0e:92:f4:62:94:80:
97:ce:f3:84:ab:4c:b8:3f:e2:37:85:fa:07:6a:dc:
11:3c:f8:f2:4b:f6:74:d3:d8:36:52:a2:a8:9b:c2:
4c:1a:13:67:1d:9d:3c:c5:8b:ea:1f:49:20:2a:21:
f3:37:a8:e3:71:74:79:ee:d7:82:e1:32:4c:fe:9c:
79:b1:66:3d:f3:bd:52:92:d3:fd:d4:e6:45:08:29:
6e:2b:14:4c:16:11:7a:be:96:c3:a3:19:f6:7a:3e:
f8:0a:c4:e9:1d:b3:31:45:07:db:4a:d9:23:3d:9f:
b4:73:95:f4:ba:1f:d1:e7:44:6f:85:6e:42:03:51:
68:92:76:eb:7c:31:be:0a:82:22:0a:d4:2a:83:f9:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3D:8E:5E:71:8C:4B:66:D3:05:B3:6C:54:93:A4:FC:B1:38:49:91
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:d5:9a:70:0e:db:e7:c7:05:1b:8f:28:07:fb:45:c6:ab:
d8:e0:6a:53:af:b2:86:11:f8:8b:04:5f:d0:1a:d4:20:bd:b0:
6b:15:66:4a:d4:57:50:ef:34:65:7c:9f:51:72:52:a1:e2:6b:
d7:41:ec:5e:91:9c:11:34:e1:9c:c2:5b:43:05:5d:de:e4:21:
54:82:06:d4:52:dc:f9:47:b1:51:ae:07:08:f6:9c:98:e6:80:
04:5e:ea:5b:57:fb:51:60:54:f6:e7:18:ed:b6:c5:42:b3:61:
db:0a:4e:86:1c:64:58:08:22:9d:34:3b:7c:50:b7:91:b5:df:
25:68:a8:46:1d:ab:ae:74:a5:ec:66:75:65:be:0f:e9:9d:15:
ea:79:cd:f4:1d:da:8b:23:9d:24:d8:f6:e6:78:85:e8:af:35:
39:f4:9a:85:6d:65:30:96:1b:98:ba:5e:e7:cd:86:0d:92:e2:
e6:38:50:04:59:2c:23:ab:1d:58:9b:26:fc:86:1c:2a:a8:70:
29:1b:c4:d6:31:8b:2f:b9:fa:fa:5b:b8:62:3f:c4:69:50:a1:
19:2c:bf:93:ce:54:8d:30:9f:a1:ce:62:8f:b2:65:fa:92:4d:
2a:3e:cc:fa:4d:b1:53:95:d4:ac:76:4b:3b:1b:09:aa:e1:df:
68:a9:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:32 2026 by rpki-client