Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
File: RFc3PhpobWtZ7oXcN4mdBlMThuU.mft (raw, json)
Hash identifier: eoHjxHYKvPODre6hdFS6THZUfgXijxHNstJx+KkK51I=
Subject key identifier: 6E:6F:F4:64:57:90:B9:F1:D3:5C:A7:E3:22:80:82:16:DC:43:A1:C7
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 019C08572744C157E68A986703F410EC7AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
Manifest number: 0572
Signing time: Thu 29 Jan 2026 06:00:55 +0000
Manifest this update: Thu 29 Jan 2026 06:00:55 +0000
Manifest next update: Fri 30 Jan 2026 06:00:55 +0000
Files and hashes: 1: RFc3PhpobWtZ7oXcN4mdBlMThuU.crl (hash: kbySJW9hTHPWzPZf1Sit9EzZUTmK0nLaQtxi+VDssV0=)
2: ttScyk0nEJvj6B9dbcRTLoD0eDc.roa (hash: 88OBT/soYdFP6btKziYk7b6XdT5PNfcTrPxPNTk8amc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:57:27:44:c1:57:e6:8a:98:67:03:f4:10:ec:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Jan 29 06:00:55 2026 GMT
Not After : Jan 30 06:00:55 2026 GMT
Subject: CN=6e6ff4645790b9f1d35ca7e322808216dc43a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:b8:d2:45:84:d4:9f:92:62:95:97:18:d0:
d6:e5:62:e2:a9:3d:69:e6:66:11:a6:ac:ba:c8:ac:
98:55:f4:c5:f6:fd:2c:39:41:ca:5b:e9:78:b1:f1:
b2:e1:ec:49:f0:cb:be:43:73:eb:d1:e5:21:eb:83:
65:b4:36:5c:ec:90:4c:47:9d:16:0c:7d:6a:ae:81:
b3:e7:cf:62:5f:6f:56:21:04:7a:43:50:3b:8b:37:
70:2f:6f:4f:dc:24:1d:28:df:be:aa:ba:7e:56:11:
38:33:bd:3d:b2:22:15:a9:dd:54:82:e1:8f:3f:f7:
60:6d:f8:d2:87:72:81:eb:6b:5d:bf:a4:9f:1e:ba:
00:cf:bd:04:40:73:f1:0b:1c:82:a5:46:78:b1:10:
6a:df:10:72:65:fb:d3:7a:a2:b3:99:80:72:3e:f7:
84:88:28:39:71:44:0b:cb:50:26:53:ab:9d:2b:69:
ed:40:7a:58:30:66:52:1d:96:e4:a2:62:40:5f:75:
17:8a:07:bb:5a:0b:64:8a:5f:94:cf:4d:92:12:86:
a0:f7:41:c6:59:2a:3a:7a:48:4d:b6:87:9e:55:77:
08:18:7f:c9:b5:c7:cc:65:17:8d:1c:b9:f1:d0:61:
d2:17:66:0d:cf:45:a8:83:b1:94:f9:7e:10:93:12:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6F:F4:64:57:90:B9:F1:D3:5C:A7:E3:22:80:82:16:DC:43:A1:C7
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:b2:2e:18:78:45:69:08:c2:ec:71:23:42:a7:b7:de:f5:
a7:78:90:0a:e5:a5:7c:b5:b9:75:2a:f8:3d:12:10:7e:7f:31:
23:3f:44:75:db:ce:3b:8b:e0:82:08:28:07:e9:4c:85:00:a8:
3f:10:39:b0:c1:60:c2:e5:2e:ee:e3:49:3f:ea:b8:e6:7b:ba:
73:a3:71:a9:6d:bd:59:3a:3f:ee:d8:b0:a6:54:20:bf:5a:87:
69:69:1d:9c:d0:29:c7:a2:ed:a3:54:30:01:f6:5e:79:8e:b0:
4b:03:6c:9c:5b:37:85:fb:db:13:20:36:eb:9c:f1:83:2c:2e:
fe:37:3b:87:ae:20:2c:52:5f:1c:f3:25:1b:c9:2b:8f:f7:3a:
d8:a3:67:86:ce:fb:61:cc:c8:01:c9:7c:4b:df:3d:17:8b:26:
6e:25:7a:31:98:70:55:00:dc:8b:b5:4e:18:61:2a:7c:63:10:
83:f0:ff:1f:1d:59:ad:d4:d6:07:df:05:61:14:57:6b:cf:1a:
bb:90:8e:76:c0:d3:a7:f9:7f:75:c1:31:c0:32:23:89:c4:53:
84:52:a5:3d:be:97:d2:39:f3:a7:35:d5:10:f3:99:41:60:74:
ca:51:0d:39:c1:41:a2:6b:55:70:2c:0a:2f:55:62:95:d5:f6:
fb:26:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:44 2026 by rpki-client