Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: gMHwzHRCNYVC8/BrCr0HiQxzLpICDM/ic9bUSwxMsnM=
Subject key identifier: 54:9C:3F:F2:5C:23:69:BD:F4:FC:3A:52:02:ED:8F:E8:66:AD:9F:A0
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019D6C89B73C765DB827453A4EE3CBC22C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 1353
Signing time: Wed 08 Apr 2026 10:00:57 +0000
Manifest this update: Wed 08 Apr 2026 10:00:57 +0000
Manifest next update: Thu 09 Apr 2026 10:00:57 +0000
Files and hashes: 1: JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa (hash: j/L9is0WBI5ilRI5gTL02OZdlEqkkNv6fyzs7XSwNkE=)
2: PehZxy4eJXOqEW1bQGdH49g9TKk.roa (hash: XVIm5rSukWk090sAzA2TmOJgfDZPjtVxQtvoQb7iTLE=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: rc26I5jvntezGlVfC96TKhsWSlk9buiAO2+RQgO827U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:89:b7:3c:76:5d:b8:27:45:3a:4e:e3:cb:c2:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Apr 8 10:00:57 2026 GMT
Not After : Apr 9 10:00:57 2026 GMT
Subject: CN=549c3ff25c2369bdf4fc3a5202ed8fe866ad9fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:05:6a:dc:05:6b:49:77:f2:ea:af:6b:5c:4c:
fc:09:b1:91:35:46:06:30:1e:24:9e:94:f3:05:a9:
22:f5:14:3a:42:90:14:55:1a:c7:af:18:61:3e:4d:
f1:bb:6b:25:04:80:8b:46:9a:9c:79:76:ef:d8:83:
73:9c:a4:f6:18:0d:b5:74:ab:46:85:19:7d:60:e5:
f5:44:cb:97:a4:3d:ee:ca:91:f3:db:2a:c6:bf:69:
3a:e7:9c:44:da:77:b7:c2:5c:6a:65:49:36:b7:e2:
1d:d4:00:c8:b9:02:10:8f:4a:c0:de:11:f5:01:2e:
a6:e9:3e:b2:92:9f:b3:6f:07:ac:e5:d9:a0:03:eb:
0e:19:61:c7:48:87:a1:a8:ad:d4:6b:8c:7e:33:a8:
c0:54:77:ea:34:1c:9b:cc:95:3c:87:fb:29:b0:2b:
1b:09:34:4e:65:53:75:60:61:a0:a9:67:04:18:39:
4b:46:e7:33:5f:c6:ca:07:12:ff:4a:46:66:be:d6:
14:fa:70:81:d8:38:b9:a3:0e:17:a7:5b:72:9d:76:
30:99:32:2c:47:c9:e0:d7:6b:ba:d2:7b:84:3d:9a:
99:35:54:26:2a:b2:86:1a:10:44:c7:14:e6:89:d6:
46:89:a0:32:3b:37:e2:90:4e:a6:34:f9:1e:7b:76:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:3F:F2:5C:23:69:BD:F4:FC:3A:52:02:ED:8F:E8:66:AD:9F:A0
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:f0:21:4a:cb:6a:c2:22:cd:63:5d:a8:7c:d7:ae:88:c9:
2d:46:e8:5c:80:f4:af:42:0b:cb:00:c8:cc:31:ec:67:94:ab:
48:54:d3:6b:4f:a0:aa:9b:22:e1:7e:1d:8b:6b:d8:c3:a5:e0:
68:50:1d:28:09:23:9a:7e:63:74:95:8a:47:a9:bf:91:f5:77:
7e:6c:7e:5b:69:fc:5a:47:2e:10:a0:11:88:04:45:58:86:4d:
ab:58:e1:7f:5d:f6:3b:84:f7:92:87:d8:8d:ef:96:29:b7:8a:
33:9f:79:f8:7e:bd:79:70:68:0e:5e:df:f4:48:c4:21:85:46:
d8:df:e5:a4:db:0f:1c:e7:96:5c:4e:f3:c4:3c:00:2c:6c:a8:
96:cc:3a:f1:e8:0a:fd:63:2a:c1:33:a4:46:b7:dc:7b:1a:47:
5d:b3:ab:b1:8d:85:49:bc:f5:f3:5a:d5:d4:75:98:e8:13:22:
d3:05:de:e1:32:e3:bb:7a:f5:d5:da:db:98:21:90:c6:61:1f:
4f:2d:e5:d3:22:c0:54:15:9d:1c:b2:f4:2d:98:c8:b4:10:9a:
22:9b:4c:50:cd:b1:0f:41:d2:2f:b3:9a:dc:af:19:24:df:6c:
f3:de:3d:07:d0:88:46:0b:0b:f7:72:4d:3a:d3:9d:47:52:4e:
a2:dd:0a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:01 2026 by rpki-client