Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
File: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json)
Hash identifier: RB8DPPAcrPyqQHIFiYTWyalGgNuTTDNjF2q1qqmTAcU=
Subject key identifier: 98:01:29:E2:CC:4F:63:50:25:CF:5B:4E:36:AB:C4:34:46:60:7C:1A
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 019B97B03257EB423DF5F7BE39B1B45712DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
Manifest number: 17E4
Signing time: Wed 07 Jan 2026 09:01:05 +0000
Manifest this update: Wed 07 Jan 2026 09:01:05 +0000
Manifest next update: Thu 08 Jan 2026 09:01:05 +0000
Files and hashes: 1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: 0NmS5luLwYV29eMoamssEN/dstnXie8RLx/UjyZ5f98=)
2: QIrfruKOgcCdeLOxo1gjef-8ctQ.roa (hash: ygxie1MG80d/ES3srEdL/VIbkXpaU3ge6t4lQo5emFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:97:b0:32:57:eb:42:3d:f5:f7:be:39:b1:b4:57:12:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 7 09:01:05 2026 GMT
Not After : Jan 8 09:01:05 2026 GMT
Subject: CN=980129e2cc4f635025cf5b4e36abc43446607c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:f7:2d:c9:d8:ad:c5:33:5c:77:4f:06:9f:
64:59:0b:cb:3d:19:58:28:e7:cf:c8:2b:da:ca:a0:
56:73:81:ad:90:4c:06:20:43:e8:37:53:4b:6d:5c:
16:e9:41:a1:ae:4a:30:bb:bb:3b:95:56:00:dc:43:
1b:22:af:ab:f0:94:79:78:dd:01:01:07:9f:fc:c6:
53:00:43:ce:3d:d3:26:12:a5:90:b1:bc:a8:17:88:
5f:2f:1f:36:54:2d:4b:74:a2:9c:5c:4a:aa:cd:d6:
c8:32:f9:e0:d3:c1:63:cf:c7:52:f5:be:c5:0a:d8:
d6:9f:a6:c1:da:98:cb:71:1a:33:c7:81:21:52:21:
1d:05:65:4a:ee:f3:75:77:f6:b4:2b:a7:78:ee:8b:
04:d1:3d:df:39:91:d4:86:6b:8e:6f:47:b7:77:63:
80:0a:7c:5e:c5:a7:54:9d:ad:b9:92:92:7c:d0:cf:
a7:ca:f9:64:01:e7:4a:11:12:cb:c7:80:90:f5:5b:
f1:9c:ad:2f:2d:c3:ed:45:65:e2:5b:12:0a:76:cd:
4e:91:87:f9:70:71:37:69:52:e5:29:a0:05:0a:a2:
b2:0e:66:5f:e0:9e:78:c0:a6:a8:cc:ca:05:18:af:
0b:fd:7f:56:af:c3:25:e2:8e:cf:9b:d0:25:6c:a2:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:29:E2:CC:4F:63:50:25:CF:5B:4E:36:AB:C4:34:46:60:7C:1A
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:a0:43:c4:d9:2d:c9:0c:83:99:f5:8c:9a:28:48:28:12:
44:76:58:74:e9:67:7a:7d:d6:fa:95:62:67:3c:cd:c2:06:b8:
d4:1d:81:bb:ed:3c:f9:cc:2e:29:44:5d:19:ed:43:1b:c9:9b:
30:94:96:f7:4d:ec:07:e6:87:ae:db:36:67:32:b9:95:3d:1b:
58:2b:2b:e5:89:a5:34:06:b7:76:1e:a6:8f:3b:af:11:fe:34:
23:22:43:c1:23:02:22:40:5a:39:0e:5d:27:46:98:6b:9e:9b:
0f:3d:09:cd:30:4d:5d:cd:cd:90:9d:fe:95:91:5b:a2:5e:91:
3e:c9:26:89:55:5c:00:66:2c:b3:7a:0c:ab:f3:67:7d:d1:2b:
fb:95:24:8c:a7:26:22:a8:47:33:f5:03:d6:16:38:c5:c9:89:
fe:bc:bb:d1:e5:4b:a9:03:aa:fb:3d:2b:a5:66:8f:d2:5b:b7:
94:93:5b:c7:79:60:68:a1:c7:39:26:50:67:78:cf:82:6d:a5:
a2:0a:4c:11:fc:57:de:d2:fb:06:54:dd:9c:74:bb:18:2f:50:
21:17:64:d0:62:2e:f8:5e:b0:88:1a:cc:0f:94:c9:f7:0e:b5:
4c:1d:67:e5:69:8f:9b:4f:9d:04:b0:06:12:48:b7:ba:ba:19:
e0:fa:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:03 2026 by rpki-client