Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: OhiuvH88KM1qExs9M5cyWCqA8WYB1OcRO+KGz/EXIyg=
Subject key identifier: 2E:17:88:78:6F:38:18:A1:71:CD:45:8A:B9:BA:39:F7:55:15:4D:1C
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 019D6687E36BB3CAFB2F8823EA132044121D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 18AC
Signing time: Tue 07 Apr 2026 06:01:14 +0000
Manifest this update: Tue 07 Apr 2026 06:01:14 +0000
Manifest next update: Wed 08 Apr 2026 06:01:14 +0000
Files and hashes: 1: 3UvocN8YemmoOwL53sgwSszmnzc.roa (hash: RJjvrheXtGevJ6D0OMvxOIdvCPxuFznkOJ4LPhI3QMA=)
2: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: zYZqwhnbZJcpEbli38950vWn6GiKJEwBkPfgzh5SNaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:87:e3:6b:b3:ca:fb:2f:88:23:ea:13:20:44:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Apr 7 06:01:14 2026 GMT
Not After : Apr 8 06:01:14 2026 GMT
Subject: CN=2e1788786f3818a171cd458ab9ba39f755154d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:b4:de:02:44:04:cf:e4:8b:9b:97:28:15:
02:d2:23:8c:9e:a4:d4:d1:03:92:9c:06:2b:02:e7:
6f:68:8f:f6:0d:5b:d4:19:47:9a:83:48:06:31:3b:
77:94:c0:95:bb:0f:5c:e2:70:3a:f1:16:e5:cf:25:
96:0b:29:1b:31:34:e4:0c:54:ae:51:32:7c:77:1c:
79:c0:de:18:48:e8:99:57:3b:ea:67:c0:c9:49:dc:
ba:5f:44:b8:95:66:e4:ed:c3:91:38:17:ac:fd:b0:
bd:7f:6c:2a:f2:48:e0:0f:bf:ed:98:2f:02:35:f7:
75:b9:55:e0:c9:d5:13:2c:ce:41:c8:4b:e5:93:67:
d4:01:d1:23:15:c6:e6:0c:80:2f:dd:a5:cb:1f:0f:
27:71:22:35:c1:b5:d5:e9:fe:af:72:05:50:52:08:
2a:fc:37:e8:fe:45:8e:30:81:ca:c4:30:da:86:db:
4c:c9:cb:9d:e8:e5:f2:69:40:c5:2a:a1:48:a5:29:
71:91:a6:31:7f:0e:65:f5:19:d5:39:b8:e2:59:d8:
ba:9a:30:71:6e:01:62:92:07:01:06:bd:1f:86:50:
58:6d:c6:59:da:1c:94:f6:e9:96:7b:de:8b:96:e4:
d8:0b:33:d4:a0:70:64:7b:4e:bd:60:38:f4:ec:8f:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:88:78:6F:38:18:A1:71:CD:45:8A:B9:BA:39:F7:55:15:4D:1C
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e2:5d:da:8e:43:b6:bb:69:67:3a:3c:c8:94:3d:a7:9b:a5:
dc:c9:ff:d9:56:f7:ca:82:85:04:d4:4b:a4:8f:64:e9:4f:b8:
e6:73:5d:16:52:c6:93:c7:1f:a9:86:69:d5:1c:79:50:f6:73:
3a:cc:3d:81:f0:aa:ae:ec:8f:79:19:26:e1:b1:38:ba:ef:9e:
32:91:04:34:0a:8f:03:aa:db:45:7f:1d:c2:e8:19:76:55:90:
73:61:db:aa:30:72:f0:6f:67:3e:86:1c:40:ac:b4:f9:01:d9:
08:2c:07:42:64:f4:81:ca:65:3a:92:fc:9e:52:c3:7e:47:cb:
be:e3:68:7d:9e:90:47:b8:3a:1d:23:c6:44:58:75:52:84:d1:
d6:8a:90:32:81:02:e8:76:df:9a:6e:83:85:e6:33:2c:28:a5:
80:d1:73:27:d3:20:b6:d9:2a:6c:88:b5:5e:e4:30:98:1a:6d:
7c:f4:fc:97:9d:1d:ca:b2:09:78:8a:a2:46:04:ee:01:36:f7:
48:a8:ab:db:a6:a7:8f:77:4b:3c:70:1e:21:bf:80:e5:51:d6:
84:a8:69:f9:c5:f8:c0:69:cc:28:de:86:ee:a6:4e:fa:65:c4:
dc:2e:0f:99:6a:7a:aa:c3:c7:5d:ed:3c:af:21:c6:56:e0:05:
33:a6:dd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:47 2026 by rpki-client