Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: bCiQHg/w8swJ5S9ZSZOwjtwMteFmEFqSKyNTO/EuQIg=
Subject key identifier: 5B:3B:F9:FE:E4:CA:79:99:DA:61:50:10:D4:49:B5:2E:43:91:D2:B8
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019D74B192577D840A104D8E051D17FE4FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 07C2
Signing time: Fri 10 Apr 2026 00:01:27 +0000
Manifest this update: Fri 10 Apr 2026 00:01:27 +0000
Manifest next update: Sat 11 Apr 2026 00:01:27 +0000
Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=)
2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: sp5e1YmtW6GXquo5yk/+gJsJ6Slqts7yIdqfzeUF/5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:b1:92:57:7d:84:0a:10:4d:8e:05:1d:17:fe:4f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Apr 10 00:01:27 2026 GMT
Not After : Apr 11 00:01:27 2026 GMT
Subject: CN=5b3bf9fee4ca7999da615010d449b52e4391d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:48:01:29:8b:97:41:23:f9:b9:09:a0:9d:
7a:22:fa:22:cd:13:a9:66:7a:4e:22:f4:dd:36:d4:
7a:dd:f8:77:72:d0:75:b8:08:eb:08:ba:86:0f:07:
d2:51:5d:ae:ea:25:46:72:6d:3b:09:20:fd:cf:78:
32:e2:3b:33:eb:63:6c:a1:0c:0a:5e:1b:e2:ab:db:
5e:9b:c8:26:21:4a:1c:af:15:70:82:e3:b8:7f:70:
df:89:4c:c0:d2:c4:83:b8:f7:58:9c:65:1c:05:c1:
78:ff:fc:16:24:5e:e4:cf:f5:d8:f6:00:03:06:2e:
e0:26:f5:d7:e9:bb:5a:0f:a1:59:7b:ff:f0:20:c7:
4c:58:71:f9:29:64:7b:77:0f:23:ce:78:23:d3:25:
08:2a:65:a9:79:54:34:a4:1b:99:eb:4b:57:75:e6:
2b:85:0b:b3:6e:51:66:e3:ac:bb:16:88:93:e0:32:
c2:75:eb:fa:03:70:fd:4f:6c:6a:a0:33:9f:1a:1b:
fd:80:7d:e4:78:1d:e0:a9:6d:13:45:94:52:19:8f:
9b:a1:19:fa:2c:2b:c1:27:76:ab:16:b2:3b:cb:4e:
ac:b4:c7:06:bc:e9:cd:52:79:5c:fe:39:d0:6f:0a:
37:a6:d1:12:b6:90:9e:94:7f:12:7b:95:dd:43:0e:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:F9:FE:E4:CA:79:99:DA:61:50:10:D4:49:B5:2E:43:91:D2:B8
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:01:dd:7e:02:18:fc:97:f3:5c:02:58:a0:e0:13:93:4a:56:
d9:9b:50:2c:17:8c:56:e8:8b:8e:a0:86:02:c5:a3:2d:42:81:
c6:c4:b4:93:d2:24:bb:9b:34:c6:f5:d2:b3:8e:dc:94:e5:b6:
65:e0:24:79:00:19:29:a7:6d:31:4f:84:8d:a4:bc:74:6a:f9:
3f:64:f4:5c:a8:b6:00:c7:35:e0:fa:87:e4:57:d9:87:65:18:
bf:75:00:31:31:e7:1f:bd:d2:fa:0b:bf:6a:05:f2:2b:50:86:
78:ae:b5:5c:00:9f:08:e5:fe:65:3d:c2:56:71:d9:be:49:cf:
04:e6:3c:e3:1c:0c:c9:6b:c2:66:37:fd:52:2b:20:fb:c6:d0:
4b:82:c1:15:0c:ee:a1:d9:16:3a:c5:8f:3e:14:80:f7:0f:5b:
4b:05:8b:9b:a5:cc:3f:2a:b8:31:79:8a:68:ed:80:82:30:82:
49:14:9f:4e:d6:99:53:8d:9a:ce:6c:36:d4:3d:41:71:0d:76:
6d:e0:d6:12:10:dd:9d:35:4f:6c:40:a4:9c:96:29:0d:c2:76:
03:2a:6f:7c:9c:22:c1:78:b7:42:ae:82:f5:8f:9e:65:71:91:
ba:34:13:39:89:80:0c:61:2c:3d:06:e8:71:e7:21:23:ea:9c:
9c:25:2e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:00 2026 by rpki-client