Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: bvRdb+jHbX7r9N6olczxk8+QDMYKRDuTBZGSu/3WQ+0=
Subject key identifier: 7F:8B:E8:12:6E:E5:92:70:A2:77:74:83:C6:12:74:F3:49:D8:7E:84
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 019C217264AF1E513107A8AA7778D09BBC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0DA3
Signing time: Tue 03 Feb 2026 03:01:10 +0000
Manifest this update: Tue 03 Feb 2026 03:01:10 +0000
Manifest next update: Wed 04 Feb 2026 03:01:10 +0000
Files and hashes: 1: 1PhEt7d2bIZajs7zcFZXSrntDY4.asa (hash: BYzdd5z1dD/0QZaOur8Wom9Qky9ooHw4d1Iq4ijc28Y=)
2: 1QZ2MlTqXygwlnH8Udt0i4cHU2M.roa (hash: yoD+lVhqZgbthHDn2WTTaJtIVkfO54F2E284Wpna3Yw=)
3: 5W18PLtoPDw5A2YFyl-bB0MZPAE.asa (hash: NrXrmKxI1eaX0qZUxOWgMfVIdHhXl2LBUzitNWKA29U=)
4: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: uXiMdZ6AwUOGu5tBI+7k52cHaUWE1Qj3PvzHLsZU5FE=)
5: ZPfnhEjHi4NI36tu0dLcrPzoAig.roa (hash: xvjCHRDS1lEyFHZogtyexGsEZ/ooA4FqTv+iQbKhLEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:21:72:64:af:1e:51:31:07:a8:aa:77:78:d0:9b:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: Feb 3 03:01:10 2026 GMT
Not After : Feb 4 03:01:10 2026 GMT
Subject: CN=7f8be8126ee59270a2777483c61274f349d87e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:fe:c8:80:0e:49:c2:e2:30:72:98:26:81:
d5:63:0d:e3:dd:2d:ac:76:cc:bf:58:e7:b9:f5:26:
97:5e:fa:26:c2:55:81:6f:7a:3e:fd:f5:ea:e9:eb:
01:cc:e3:de:ff:d2:ed:b9:38:26:c8:1b:9a:75:73:
5f:99:07:52:de:f0:f1:67:84:f4:92:ec:fc:2b:d9:
cd:0d:65:78:d9:42:57:4b:2c:a9:99:38:7a:aa:d6:
1a:e8:cb:19:4d:6a:3e:f5:0d:7b:88:cb:0e:a4:00:
3d:8e:34:27:e9:77:cd:73:b0:26:e5:b9:2b:d0:da:
ba:24:b7:83:d5:53:40:bc:10:07:f0:24:dd:ab:73:
23:55:44:88:d3:f7:cb:03:0b:04:e2:94:7d:cf:a5:
75:a0:44:bc:c0:14:e3:14:0d:74:b8:d7:b9:3a:a7:
1e:28:b8:1d:77:1f:1c:7a:9c:b3:e1:04:2c:af:f3:
e6:e4:89:14:08:e0:0d:91:12:1b:86:b4:0c:08:95:
2b:2b:d4:6f:e1:76:fd:ac:4b:38:83:03:7a:ba:74:
20:d3:24:69:e5:ce:e3:b6:14:94:44:19:2c:ac:c5:
ce:7f:28:1e:bb:a2:cc:c8:0f:21:aa:aa:4d:b5:aa:
d3:e6:65:b5:2d:da:85:e8:79:1b:dc:58:71:c4:2f:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8B:E8:12:6E:E5:92:70:A2:77:74:83:C6:12:74:F3:49:D8:7E:84
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:69:1b:17:ea:af:26:70:43:b2:e9:ca:18:83:c9:a7:7b:38:
26:2e:b7:c2:64:98:35:ef:e7:02:5a:b0:bc:0c:39:38:ca:cc:
b5:cf:8d:27:fe:d2:4a:44:10:b2:1c:fb:97:e5:e2:ce:ac:bc:
40:08:2d:9e:89:a9:36:14:56:94:20:7a:53:c9:87:dc:57:6c:
20:91:dc:7a:87:5b:ae:10:6d:95:7f:95:51:2d:99:7a:98:e9:
47:f0:c0:02:26:26:63:5b:d1:09:d4:f0:89:03:c7:2d:9d:87:
d2:3b:f8:4c:6d:02:09:18:13:eb:fa:b9:9d:6c:9f:bc:e8:64:
67:e3:a9:43:a5:56:b4:5c:c5:62:b8:0b:00:47:d5:34:2f:65:
7d:28:68:10:99:d6:92:4a:ad:4b:93:b7:85:8f:80:34:84:27:
a5:7b:66:18:46:9f:e7:c3:6d:94:05:f0:71:06:84:1b:89:c9:
4a:9e:5f:29:88:4f:cf:cb:3b:2c:af:92:33:b3:b3:59:c2:71:
ad:ff:9a:12:34:97:93:1d:ea:0b:a3:93:5f:af:25:65:ea:da:
a0:18:3a:1d:55:d4:25:33:32:17:9f:59:6a:06:9a:d6:47:68:
d8:ec:e5:29:7e:90:0d:57:28:e5:45:71:84:af:1d:c0:9e:17:
78:d6:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:25 2026 by rpki-client