Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: iBun/64YHeH1VbhkewnsXLRupD0GzbI1xm7BM8YPfzQ=
Subject key identifier: B0:4D:67:FB:71:E8:22:E2:D1:04:84:03:AE:36:66:BC:E0:21:45:90
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 019B7D5DEBE98E79076DC49BDD4F3EACAE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 17AE
Signing time: Fri 02 Jan 2026 06:21:05 +0000
Manifest this update: Fri 02 Jan 2026 06:21:05 +0000
Manifest next update: Sat 03 Jan 2026 06:21:05 +0000
Files and hashes: 1: JesPQuP-Iktm2nGZyYVeZ_qfyaY.roa (hash: Q50eQQX809OefT9RrMlLvZME6Loqe3vFMCNilJuylKE=)
2: UQGgaTEQbuDjYQQbAsMW9WKRgTQ.roa (hash: AVlL2dW2bkOAkAcYoyRAum1H0Qm7voVSUVm9hVXjpb0=)
3: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: nKOlJ8TEwVCT3mTJex2m01QIPAkH7htI8iP+DalGjKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5d:eb:e9:8e:79:07:6d:c4:9b:dd:4f:3e:ac:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 2 06:21:05 2026 GMT
Not After : Jan 3 06:21:05 2026 GMT
Subject: CN=b04d67fb71e822e2d1048403ae3666bce0214590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:be:5e:a9:ba:4c:98:0b:c0:15:81:fd:f4:
80:82:f4:7c:42:e5:5a:df:5c:31:fd:45:7c:17:d6:
2a:d2:99:c9:c8:11:f1:db:35:4d:e6:6d:bc:2b:d6:
80:69:3f:f9:84:96:0a:36:fd:78:09:b2:65:73:43:
cd:7b:16:3b:01:7a:9d:94:a5:85:07:c6:66:ff:b6:
1c:5c:e2:f4:f7:93:16:83:6d:c9:35:42:19:aa:7d:
70:29:82:ac:78:31:e9:9b:b8:fe:7b:c0:0b:e1:5b:
1e:55:2f:6e:71:48:51:78:07:6c:13:3b:b9:cd:5a:
ea:c5:d7:86:9a:a9:5c:20:cd:87:f7:60:d1:2f:b5:
d9:70:7c:c3:d6:ce:e7:00:2d:43:b2:fb:ce:e5:bc:
9e:cb:fb:13:ad:fd:9d:33:26:03:ba:13:0e:e7:72:
47:e8:ce:cc:ca:f4:4b:6f:b9:5b:95:0b:3a:cf:7d:
25:68:92:62:0f:60:ae:e5:8e:74:d8:6d:bc:f6:f1:
3d:65:e1:0c:74:60:85:52:2a:29:a1:83:f9:7b:1a:
11:32:2f:d3:81:57:30:e5:f6:d1:56:1e:8d:64:2a:
e4:06:f7:14:73:a8:b4:8e:f5:dd:da:7b:d4:1f:8b:
02:6e:3d:c2:29:4d:8b:0d:15:ce:0e:c2:65:de:00:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:67:FB:71:E8:22:E2:D1:04:84:03:AE:36:66:BC:E0:21:45:90
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:f9:d2:ee:ba:1e:e2:92:5b:eb:f4:f1:2c:1a:c3:d8:d3:
a3:fd:99:dc:1e:df:20:9d:3a:2e:21:6e:ee:20:eb:bf:90:8e:
3f:62:32:e7:42:87:94:5c:98:f3:59:5f:90:9a:4a:6d:ad:18:
9d:d1:dd:f8:a8:56:bb:8c:45:47:76:81:ff:ba:62:19:08:a3:
c7:a4:5a:fc:68:7b:bb:f4:3c:4e:5c:f4:38:59:25:f3:04:a8:
2f:58:5b:1d:d9:93:08:63:ee:a2:67:13:8b:0a:90:b8:ad:38:
89:31:89:24:1b:21:ec:c7:d8:fd:a6:cf:03:8c:59:3f:c3:fd:
2a:ea:42:32:d1:4a:01:85:e8:8a:c3:b1:4f:5f:6a:e7:4f:42:
61:f3:60:a1:ed:69:73:9c:04:a1:04:76:f7:b7:65:e5:79:51:
2f:7d:ca:b1:27:dc:1e:c1:8f:0c:92:3e:c6:f0:2b:14:ff:d2:
64:55:c3:77:c6:39:4c:a2:4c:c8:45:8b:67:2a:17:f6:8f:f9:
b8:3b:60:6d:5c:4a:96:cc:bc:26:53:de:2e:a5:4e:6c:5c:fe:
20:03:e8:9f:10:02:3e:10:54:f1:1a:13:7a:4d:25:da:35:a6:
95:2a:ca:6a:b1:9f:45:18:44:96:24:fe:16:25:db:08:f7:22:
82:79:b8:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt9XevpjnkHbcSb3U8+rK52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWQ2YWZiOGRkZjhmOGMwZGQ2NjA3OTBlZGNiYTFmM2Iz
NzBjNjMwHhcNMjYwMTAyMDYyMTA1WhcNMjYwMTAzMDYyMTA1WjAzMTEwLwYDVQQD
EyhiMDRkNjdmYjcxZTgyMmUyZDEwNDg0MDNhZTM2NjZiY2UwMjE0NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+q+Xqm6TJgLwBWB/fSAgvR8QuVa
31wx/UV8F9Yq0pnJyBHx2zVN5m28K9aAaT/5hJYKNv14CbJlc0PNexY7AXqdlKWF
B8Zm/7YcXOL095MWg23JNUIZqn1wKYKseDHpm7j+e8AL4VseVS9ucUhReAdsEzu5
zVrqxdeGmqlcIM2H92DRL7XZcHzD1s7nAC1DsvvO5byey/sTrf2dMyYDuhMO53JH
6M7MyvRLb7lblQs6z30laJJiD2Cu5Y502G289vE9ZeEMdGCFUiopoYP5exoRMi/T
gVcw5fbRVh6NZCrkBvcUc6i0jvXd2nvUH4sCbj3CKU2LDRXODsJl3gDCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBNZ/tx6CLi0QSEA642ZrzgIUWQMB8GA1UdIwQY
MBaAFHWdavuN34+MDdZgeQ7cuh87NwxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUt
MjU0YmNiY2VjMDM3LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUtMjU0YmNiY2VjMDM3
LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1P50u66
HuKSW+v08Swaw9jTo/2Z3B7fIJ06LiFu7iDrv5COP2Iy50KHlFyY81lfkJpKba0Y
ndHd+KhWu4xFR3aB/7piGQijx6Ra/Gh7u/Q8Tlz0OFkl8wSoL1hbHdmTCGPuomcT
iwqQuK04iTGJJBsh7MfY/abPA4xZP8P9KupCMtFKAYXoisOxT19q509CYfNgoe1p
c5wEoQR297dl5XlRL33KsSfcHsGPDJI+xvArFP/SZFXDd8Y5TKJMyEWLZyoX9o/5
uDtgbVxKlsy8JlPeLqVObFz+IAPonxACPhBU8RoTek0l2jWmlSrKarGfRRhEliT+
FiXbCPcignm4cQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:28 2026 by rpki-client