Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: lxz6usEPGH+Hx0o00nX6Nd0+CfcDOdgFZeA7uWqNf4M=
Subject key identifier: 1B:A9:49:30:8C:C2:53:64:67:D4:0F:A2:C2:22:75:DE:BE:A3:85:AF
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 019BFF1CFBB43522583A8D5B853CD39DC608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 07A6
Signing time: Tue 27 Jan 2026 11:00:48 +0000
Manifest this update: Tue 27 Jan 2026 11:00:48 +0000
Manifest next update: Wed 28 Jan 2026 11:00:48 +0000
Files and hashes: 1: Hpv4xwFO6u4QS-nBnH1t1WRth_4.roa (hash: m4AC2VvXldFMWOlhO68mmbck7Bkc5gI0KSADkqRSPsY=)
2: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: En5TQqw0QMN+JZgfUJX5v2cfSZUsrD7JcCS+f4QNm64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:1c:fb:b4:35:22:58:3a:8d:5b:85:3c:d3:9d:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Jan 27 11:00:48 2026 GMT
Not After : Jan 28 11:00:48 2026 GMT
Subject: CN=1ba949308cc2536467d40fa2c22275debea385af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:6a:37:e6:7b:12:c1:d1:10:df:d2:d5:e1:
94:b6:e5:95:ca:ff:90:1f:42:78:98:24:74:81:82:
ed:c4:b2:63:7f:40:6e:cf:aa:82:23:5d:43:d0:b9:
88:11:61:49:5d:56:e4:02:82:1f:c1:36:26:d2:6f:
5c:51:74:c9:b9:5c:f9:ce:67:a1:76:17:59:17:bc:
c8:d3:cb:b7:48:bb:42:4b:cb:01:5e:0c:e9:0a:b9:
2e:d5:f5:bc:06:40:5c:b0:7a:90:d9:6b:d9:dc:d4:
09:13:c9:73:b2:d2:0e:2c:76:84:14:af:10:12:27:
f1:22:fe:7a:54:c1:b2:8d:4a:f3:01:20:5a:76:0e:
5d:68:54:3c:f6:da:d5:f1:e2:4c:74:87:39:ee:f8:
5b:9f:4a:61:0e:d6:49:83:01:84:d4:6e:0d:03:58:
1a:47:21:60:23:76:80:c4:0e:1b:d3:e6:b2:8a:40:
58:6b:87:09:99:03:69:46:5e:60:04:5c:1d:36:7b:
68:9c:e6:87:06:9f:ec:73:4a:7b:c5:0a:ff:a4:c9:
ea:90:5f:de:66:ba:a5:57:ae:8f:ac:ab:b2:d0:30:
fb:6e:9f:aa:2e:ae:fa:64:28:63:e1:b3:25:7d:54:
66:29:51:81:c3:ff:ef:37:48:f3:96:07:27:3c:45:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A9:49:30:8C:C2:53:64:67:D4:0F:A2:C2:22:75:DE:BE:A3:85:AF
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:a1:e2:77:75:ea:0a:4f:8f:1b:83:41:16:a9:36:19:c7:
42:e7:22:35:b3:dc:8d:58:53:38:58:22:c9:58:ad:64:b0:2a:
f0:b8:34:c9:98:b0:a9:78:73:75:ff:4f:f6:6b:b1:dd:82:79:
4c:50:77:9c:fe:77:f2:a5:ab:0a:2d:fc:27:eb:8b:26:ce:44:
c9:35:71:3f:fa:16:73:1a:bb:d9:b5:03:b4:fd:a8:8d:1f:58:
22:53:b3:39:13:94:49:75:c4:10:a8:a5:3e:13:4c:94:fa:09:
7a:ed:73:83:7d:3e:65:97:db:bd:be:c1:5e:03:08:4a:3f:8e:
8c:fe:2e:6c:f6:f5:ca:2c:f6:1f:e0:22:f6:6f:45:e8:4c:6b:
be:d6:44:3e:31:b2:0c:79:45:43:4e:19:d8:94:42:ee:79:c9:
e3:d9:ff:0e:13:37:b5:73:1e:b5:21:3b:2b:7d:31:5d:40:8e:
28:02:8e:ce:7e:88:6f:19:d9:2f:ef:93:fd:f3:d3:33:c7:5a:
cf:ed:5f:d7:16:a3:18:e9:2b:89:de:a7:f4:ae:9c:ba:f2:0b:
32:20:93:a0:66:8b:25:b2:68:1e:d4:2d:30:91:a9:9e:32:45:
eb:b8:9e:d2:c3:8e:30:b3:e0:ef:57:f5:68:45:b8:b8:6f:24:
06:d3:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:55 2026 by rpki-client