Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier: H0OJ3lSDRKJWc9DUnE78f39QccEr6+IPFB4vK68HrkA=
Subject key identifier: DA:43:FA:2F:FB:C5:8C:B3:D3:46:0D:EB:F9:1D:A3:E0:B5:8B:B8:E9
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial: 019C8D979EA155AF819492214E9464231212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number: 0792
Signing time: Tue 24 Feb 2026 03:00:49 +0000
Manifest this update: Tue 24 Feb 2026 03:00:49 +0000
Manifest next update: Wed 25 Feb 2026 03:00:49 +0000
Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: iSzS9NsNLX2MfYtudm0jnNEWFxKbGC4mSLp6up5OMR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8d:97:9e:a1:55:af:81:94:92:21:4e:94:64:23:12:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Validity
Not Before: Feb 24 03:00:49 2026 GMT
Not After : Feb 25 03:00:49 2026 GMT
Subject: CN=da43fa2ffbc58cb3d3460debf91da3e0b58bb8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:fb:df:df:f3:f3:9e:f1:9a:be:3b:1e:53:
2a:34:f6:1b:9f:a3:46:f3:fb:a9:5d:7b:1b:8d:d2:
a2:75:49:62:0c:27:04:ae:0c:da:90:91:aa:4d:e5:
49:fb:61:e9:d5:7c:3c:4b:55:a6:30:a4:e6:c0:fc:
d2:07:44:87:c9:3a:35:e2:81:2d:46:63:3f:2f:88:
7f:07:a3:01:74:92:ea:79:38:34:ca:2a:ab:80:e4:
b6:19:44:72:78:af:b5:b0:46:33:73:8b:81:1a:8e:
0f:ff:6d:eb:61:01:05:41:11:f6:34:a5:f4:8e:16:
76:23:44:9e:79:f6:c4:2f:b6:1c:61:f3:45:31:23:
24:7c:38:7d:ac:42:85:0f:69:25:bb:b6:fc:9d:f6:
05:b6:ed:01:32:2a:f7:82:ef:00:4f:27:42:0c:6a:
de:bc:2a:43:d2:02:c8:dc:ec:a0:e7:e6:3b:c9:e9:
ea:18:5e:16:f0:32:8c:db:05:82:75:a7:88:38:cf:
02:7c:b8:22:43:5b:80:6d:f2:48:d9:cb:e5:6c:55:
3a:d0:34:42:75:a6:5e:07:9e:51:a3:ec:4d:dd:67:
cb:83:53:e3:29:be:34:d9:46:6d:75:f3:7c:c8:00:
3d:5c:ee:b0:1e:69:70:ac:db:83:f6:20:05:ec:b6:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:43:FA:2F:FB:C5:8C:B3:D3:46:0D:EB:F9:1D:A3:E0:B5:8B:B8:E9
X509v3 Authority Key Identifier:
keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f8:d4:09:87:b4:38:bf:2d:4e:fb:27:fe:73:18:fc:cd:7b:
4e:66:a0:7d:0d:e7:46:1b:cb:28:6e:b2:05:6e:f2:e9:2b:bb:
c0:33:30:04:1f:83:67:a4:ea:65:8b:5e:4f:2f:2c:9d:b4:f3:
30:27:9d:76:f5:a3:b0:25:88:63:75:9b:66:0d:a7:86:e8:52:
5a:2a:ca:28:d6:58:5f:e6:3c:b1:55:83:39:ca:1b:54:d5:9c:
f0:23:7d:ba:6e:ff:2b:85:a8:00:19:88:c6:7a:43:06:b4:65:
6b:ac:61:fc:e5:0a:2d:83:ea:73:93:cf:91:27:ea:af:3f:a1:
45:8a:d9:65:69:70:6c:fa:08:71:38:1d:de:42:ba:39:31:5f:
6d:b3:17:4a:c5:89:ef:07:a0:e7:dc:47:d7:fd:2c:31:cf:3a:
1f:8c:42:e9:72:42:73:1a:2d:9c:fe:39:ad:d4:3e:90:cb:e3:
e1:c7:c2:ed:97:db:7e:2b:a0:0c:d5:90:b1:5c:88:38:6b:73:
be:1e:84:10:ab:d6:5e:3f:cc:aa:f7:50:7a:c4:5a:30:47:ff:
40:ec:70:38:97:04:36:52:ef:5d:ae:92:1c:16:60:7b:45:8e:
fe:b3:d2:1d:31:96:c6:ac:08:67:29:08:c3:67:41:2a:31:76:
7e:2a:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:14 2026 by rpki-client