Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json)
Hash identifier: k96jWLOe70X4EC4xx4ROrNldh7zxjUR4C271FuI9+fs=
Subject key identifier: 86:AF:F0:A2:82:71:7D:E0:F9:66:23:C0:FE:F8:5C:51:2A:D1:99:F2
Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09
Certificate serial: 019D679A6D5597E366D20902758334FDBA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
Manifest number: 123F
Signing time: Tue 07 Apr 2026 11:01:06 +0000
Manifest this update: Tue 07 Apr 2026 11:01:06 +0000
Manifest next update: Wed 08 Apr 2026 11:01:06 +0000
Files and hashes: 1: PqQEtcU-9Dj9gvjDdqZbgNTioZU.roa (hash: IqN6OL+5nEUWmHYyOF1lygpuFBpPS3oI5vZnXBqF7kc=)
2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: n0TK2lPvkZTywrfyXwUFyD7svcPXznv++lbF+EXv3bQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:9a:6d:55:97:e3:66:d2:09:02:75:83:34:fd:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09
Validity
Not Before: Apr 7 11:01:06 2026 GMT
Not After : Apr 8 11:01:06 2026 GMT
Subject: CN=86aff0a282717de0f96623c0fef85c512ad199f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:11:93:ce:99:14:95:95:78:23:96:d6:5a:
23:f4:69:6e:66:7b:39:13:29:c4:39:49:a5:3c:73:
83:31:6b:4b:8e:26:c4:3c:a0:14:ac:1a:34:8b:88:
14:9e:fa:2a:50:7f:42:06:7b:98:4e:fe:b4:fc:d0:
52:58:20:41:98:2d:a5:ec:09:c6:de:2e:c3:a0:80:
e6:35:0d:04:73:90:ca:3c:d9:4a:b0:57:32:dd:a3:
c7:ac:2b:f5:d0:17:54:be:1f:61:81:a2:02:3b:7d:
e5:7c:43:57:f6:c1:8d:e1:9c:f1:01:c9:93:61:e5:
e3:07:7c:cc:06:1a:4e:9e:dc:a9:9c:22:5d:30:6d:
4f:4b:c9:fe:73:84:a4:39:5e:f5:c6:03:b1:0b:ac:
a3:08:30:2e:ca:ee:31:35:1c:79:56:1c:bf:c9:49:
a7:3c:b5:a5:24:91:b8:68:eb:b9:38:31:43:9d:9f:
9f:1a:fd:b1:16:6f:f7:85:cc:07:db:a5:3b:57:77:
96:f2:8f:b1:d4:b4:0e:a0:49:65:0a:d3:bc:ec:bb:
d7:e8:bc:be:97:a5:39:74:fa:79:71:c0:03:7c:56:
da:fb:76:96:fb:92:d8:72:cc:96:f7:fb:ff:d1:b3:
16:68:0d:86:6a:ea:51:0b:90:71:36:81:1f:e2:bd:
76:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:F0:A2:82:71:7D:E0:F9:66:23:C0:FE:F8:5C:51:2A:D1:99:F2
X509v3 Authority Key Identifier:
keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ff:02:49:7b:31:6b:5a:af:4d:4d:63:8d:23:95:f2:e6:57:
f8:cc:8a:dd:ee:70:4f:ac:27:8a:1a:63:04:db:a3:82:65:45:
1c:8a:5a:7c:6e:d8:2c:c2:36:db:94:03:ad:75:c1:39:19:81:
b9:c6:50:d8:ec:e0:43:2b:dc:95:dd:d6:18:54:8a:d3:fa:3c:
f6:ec:aa:34:cc:e8:d1:7d:59:8b:35:6b:cd:7f:2f:64:f1:84:
ef:24:6b:83:46:9c:e2:13:79:f3:43:2d:b1:94:b7:2a:f1:2c:
55:cc:ae:89:3f:c2:9b:c1:9f:2f:82:78:95:8c:47:01:d9:f4:
59:a6:64:06:eb:c0:a5:77:2f:8a:b6:18:f5:d7:d0:ce:1c:32:
fe:94:f9:fb:0e:26:f7:09:ce:60:3f:00:41:b6:7b:0c:25:6b:
03:d5:3f:47:bb:c4:6f:40:35:49:bb:f7:35:4b:37:95:aa:b4:
00:6c:e5:26:bb:94:36:ca:1a:8e:ab:aa:77:32:3a:1d:e4:66:
cd:ea:fb:68:91:1c:42:73:84:89:51:78:f0:da:67:b3:9c:37:
98:49:53:48:ff:ba:c2:2e:f9:87:dc:23:b6:d0:7e:1f:af:5c:
81:19:a1:7d:55:1a:75:b5:b3:4b:1d:7e:77:c2:af:ab:e0:f1:
8d:73:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:48:22 2026 by rpki-client