Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier: Si5icVKIaBZ1+n6dwjH3w1ojsjRxjJozTMvz5HwUpaA=
Subject key identifier: CD:41:4C:8E:64:59:93:11:DD:F9:1B:72:FD:52:06:FE:EA:EF:A3:A9
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 019BD54697E1BE14D3C0B97377D729584196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number: 0885
Signing time: Mon 19 Jan 2026 08:02:11 +0000
Manifest this update: Mon 19 Jan 2026 08:02:11 +0000
Manifest next update: Tue 20 Jan 2026 08:02:11 +0000
Files and hashes: 1: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: uvYNSvhA9s5C7wc3qs2GbvUZTJgNr4kUTRbhTiW4Rac=)
2: et0ANPD0xEvteuT6Ln0R8Mv5CDM.roa (hash: x2TO++GW8kYzLHgkxyjphk6fVr1Iv1BidAMSiHgZblg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d5:46:97:e1:be:14:d3:c0:b9:73:77:d7:29:58:41:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Jan 19 08:02:11 2026 GMT
Not After : Jan 20 08:02:11 2026 GMT
Subject: CN=cd414c8e64599311ddf91b72fd5206feeaefa3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:1a:7f:9a:06:a1:62:84:1f:b9:ed:d7:c2:
ed:96:cf:c7:87:e6:58:aa:ec:41:c4:6c:c0:2b:b7:
e4:9a:e9:5f:f3:cc:e4:76:8b:ca:df:8e:76:3f:d3:
56:c3:2b:bb:e6:d3:3a:60:c3:a5:5c:6e:eb:7a:80:
f6:b3:4e:26:c7:c3:f1:5c:d3:3f:e0:3d:ca:13:52:
5d:e2:e5:93:89:7a:01:73:77:e5:1b:5e:ec:a7:cb:
e0:76:17:68:53:39:4b:c9:be:e5:9d:7f:db:54:ef:
f4:82:05:2a:c2:24:00:eb:11:ac:3d:8f:93:6a:8e:
5a:10:73:03:86:d2:f6:f9:46:88:d0:ff:48:e5:ec:
cd:c9:31:c2:ec:2d:35:22:f5:02:24:70:a5:0b:37:
0e:32:65:d3:de:52:e8:fd:32:7d:65:20:7e:18:d5:
ae:37:ac:d2:e1:85:4a:21:c4:1c:9e:80:e2:dc:a8:
81:50:5c:70:3f:7c:bb:f1:0a:4e:d8:aa:b8:71:34:
32:a7:c4:3e:fd:6b:e6:22:40:67:a2:93:77:4c:20:
2f:53:d0:8c:5a:e1:ec:16:a4:f9:03:c4:94:b2:6b:
a8:82:02:b5:a6:06:ea:a5:2b:3d:cb:d9:a3:e4:fc:
b9:86:4f:43:28:b2:36:d2:fc:fc:6b:05:e4:75:55:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:4C:8E:64:59:93:11:DD:F9:1B:72:FD:52:06:FE:EA:EF:A3:A9
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:16:3a:b3:2e:31:b2:09:4b:89:09:5c:b2:9c:e1:f8:0b:21:
cb:db:ee:dd:c3:13:d8:80:59:e1:21:91:7d:bb:ff:60:13:f1:
2e:f0:4d:09:28:f6:3f:39:26:be:f8:08:8b:f8:ae:72:9c:9f:
f8:71:ea:3c:68:70:31:20:70:93:fd:da:fe:43:02:8e:7b:84:
1d:41:34:33:6b:14:2a:ad:1f:18:51:58:25:4c:47:b7:97:0d:
e3:a7:aa:a5:f4:11:60:e2:c0:a1:a1:fb:f7:95:1b:53:cc:21:
93:8a:18:e0:24:eb:9c:14:1e:e9:f4:e7:9d:3b:dc:aa:46:37:
b0:f0:12:4b:48:d1:4a:36:26:7f:c8:ae:fb:6f:ae:c5:51:6f:
4d:c8:02:77:5a:98:38:b6:51:6c:41:27:4e:e6:52:79:98:42:
8d:a7:e9:53:8a:dc:9c:f0:8f:d4:9b:be:40:21:d6:4d:97:d3:
88:87:78:27:ba:76:1e:fb:65:ae:9a:e8:66:85:42:96:43:dd:
4e:52:14:fd:35:fe:16:e5:a7:39:bd:a3:9d:43:1e:38:d2:1c:
ce:55:6e:aa:e4:77:01:f2:14:34:e3:4d:23:4d:29:33:ad:c3:
83:7d:46:49:ee:43:9b:17:49:df:20:f0:4f:73:1f:27:51:68:
28:bd:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:47 2026 by rpki-client