Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json)
Hash identifier: O63mNHho6vNp7mzENJhCFFdEFkkSDZwEpKEPw+1QSBM=
Subject key identifier: 63:89:18:5D:8D:CA:D7:A9:CB:DC:B0:D9:3A:D8:0B:08:A6:D4:C2:C2
Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a
Certificate serial: 019D76691224626BED0D19542205390C4B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
Manifest number: 07A4
Signing time: Fri 10 Apr 2026 08:01:30 +0000
Manifest this update: Fri 10 Apr 2026 08:01:30 +0000
Manifest next update: Sat 11 Apr 2026 08:01:30 +0000
Files and hashes: 1: DErivx0e-6b56vQq7Hodx5LXJgM.roa (hash: Qu7V6jf5xYIpOAX8Mui4oAi/eNqnZVmhkF0lUX59mwE=)
2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: sAJSzJn1/l6594OBmsMd6u30rO0+spmfDSqh9+M74ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:69:12:24:62:6b:ed:0d:19:54:22:05:39:0c:4b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a
Validity
Not Before: Apr 10 08:01:30 2026 GMT
Not After : Apr 11 08:01:30 2026 GMT
Subject: CN=6389185d8dcad7a9cbdcb0d93ad80b08a6d4c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:16:6d:4d:f1:d6:b2:21:ba:53:07:89:5e:
72:7f:df:93:29:4b:8b:7d:48:45:40:ad:aa:e0:f5:
52:36:38:ee:99:4b:0c:f0:b1:5e:df:c7:39:e9:62:
d8:de:fd:ef:c3:95:65:2f:9d:b8:53:df:10:35:f7:
0f:64:12:f8:3d:9b:16:10:84:9e:7a:0e:61:ce:a9:
48:2e:cc:c9:b9:b4:0b:6e:3c:af:b4:ca:33:73:8f:
67:a1:d7:a8:10:96:08:2e:24:1f:5b:71:76:6b:6e:
c8:df:01:09:85:53:7c:b7:fb:1f:2b:98:61:4f:8a:
7e:d4:a9:77:45:2e:1e:47:da:13:8e:fe:0b:41:b6:
e3:65:f9:db:bb:59:00:5b:a7:08:4b:eb:ae:77:28:
e3:14:42:08:61:e3:ac:4e:27:9d:5c:4d:5b:4c:72:
56:56:c8:8f:62:1e:b7:30:97:d8:65:75:6d:18:6b:
4f:f0:18:d7:0e:bb:d2:d9:f7:48:da:08:72:af:e4:
ba:e3:72:94:f8:50:c0:14:18:ab:de:d1:78:f7:95:
3f:ab:a6:f6:02:2d:42:c4:32:73:b0:4b:52:b9:c8:
11:66:93:0d:98:28:50:40:b9:90:87:d1:19:c2:b7:
9e:37:12:1e:94:07:23:9a:16:e7:3b:76:ad:59:06:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:18:5D:8D:CA:D7:A9:CB:DC:B0:D9:3A:D8:0B:08:A6:D4:C2:C2
X509v3 Authority Key Identifier:
keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:68:cb:2b:4d:3b:5b:5e:84:b1:18:62:f0:b9:8c:bf:54:48:
74:66:de:d9:7c:42:36:7a:e5:c8:b0:50:ba:bd:59:d0:91:fd:
5f:aa:fe:89:2e:e4:00:84:5a:53:22:54:0d:da:f8:8e:c8:60:
52:79:16:48:7c:07:30:48:92:ef:2b:27:23:52:91:05:ea:1e:
26:cf:82:4d:33:f5:71:97:b4:f3:2c:78:54:ea:70:8d:6c:0a:
7e:23:75:37:e1:e2:05:ad:3c:71:e6:ae:9d:cd:0f:d1:dc:ac:
7a:04:02:36:bd:4a:e5:2b:9c:6b:cf:8a:9b:ee:3c:c9:b5:a4:
fa:43:20:81:5f:92:80:39:0c:cf:04:3d:f6:a6:3b:61:07:d0:
d5:ab:d4:51:c2:97:21:70:a4:6d:1c:e9:ff:a1:7e:a1:72:51:
3a:f2:f9:1b:1e:cd:7b:9b:67:cc:0f:63:12:34:3e:29:81:c4:
94:50:33:f2:db:e8:53:f5:ac:1b:f9:55:d5:6c:55:4f:d6:3e:
fd:2e:f8:70:9a:f9:23:4a:c9:ea:8e:b7:8d:b1:bd:0c:96:ec:
45:e7:2a:3e:e2:b7:a8:21:86:88:93:02:0c:aa:20:9b:09:d9:
e3:52:5d:39:44:cd:7e:1c:a4:51:9d:d0:0c:70:87:b1:ed:e9:
57:59:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:30 2026 by rpki-client