Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
File: oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft (raw, json)
Hash identifier: NX470f17N+OlxKNa/qROtE113K3hPOap+zxlhHkanM4=
Subject key identifier: 87:15:17:5A:B5:60:9B:BA:2C:DA:9E:2A:E4:0B:B7:CF:17:BA:CD:C4
Authority key identifier: A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
Certificate issuer: /CN=a02bb11d019557e12f5fb6eb903837421160d009
Certificate serial: 019C985254C6AF828846B3C5C0A4F3F3268D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
Manifest number: 183D
Signing time: Thu 26 Feb 2026 05:00:58 +0000
Manifest this update: Thu 26 Feb 2026 05:00:58 +0000
Manifest next update: Fri 27 Feb 2026 05:00:58 +0000
Files and hashes: 1: 3aZ_Y120xYc6CEmOhZbrvnboKI0.roa (hash: WGi3p+H5OVMwM3oevEHkpaxeWVXP2pcs5LEa2vedhN4=)
2: oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl (hash: mPqCTFCcbjzCGYO0yujlTpnp3ps+WuqW1/bISPSMeKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:98:52:54:c6:af:82:88:46:b3:c5:c0:a4:f3:f3:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a02bb11d019557e12f5fb6eb903837421160d009
Validity
Not Before: Feb 26 05:00:58 2026 GMT
Not After : Feb 27 05:00:58 2026 GMT
Subject: CN=8715175ab5609bba2cda9e2ae40bb7cf17bacdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:62:ca:0f:83:ef:36:9b:d5:f3:9a:11:24:
3f:9a:62:54:30:1f:93:b4:59:38:62:72:14:7e:b0:
f6:75:ab:97:b8:49:5e:69:39:9f:71:cd:69:75:79:
a4:63:44:69:50:35:2d:59:71:a1:d0:96:0f:17:4f:
fd:71:4f:0e:93:de:73:df:fa:64:f4:bf:3d:7d:1c:
02:78:ee:a9:f7:dc:d0:aa:de:e6:b7:25:c3:82:49:
9c:ff:52:3b:46:63:f6:7f:2c:a3:f9:73:eb:5f:82:
b7:55:7c:dd:f9:59:3a:05:3a:22:77:bc:53:27:41:
2c:a6:f9:a5:8d:b5:8e:56:ab:7e:b5:0e:0e:86:50:
48:37:7f:10:e7:a2:4d:63:a2:7e:72:47:29:e1:b7:
1a:a5:f2:6d:e4:ea:f9:1c:1f:73:34:57:2f:5d:68:
f6:90:b0:d4:96:2a:47:3b:da:82:60:df:73:3a:5d:
cc:9e:ef:26:6c:95:c4:e8:06:d1:48:87:f2:54:d7:
b0:fa:85:e9:ad:be:f9:5f:bb:ff:c7:8a:df:99:78:
2c:df:5a:e6:cd:59:a9:5f:35:57:70:5c:98:85:37:
65:9f:9d:78:a7:e7:48:10:74:e1:a1:c9:3b:37:d5:
35:89:36:54:0d:9f:1e:5f:b9:e4:f6:32:59:c7:a6:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:17:5A:B5:60:9B:BA:2C:DA:9E:2A:E4:0B:B7:CF:17:BA:CD:C4
X509v3 Authority Key Identifier:
keyid:A0:2B:B1:1D:01:95:57:E1:2F:5F:B6:EB:90:38:37:42:11:60:D0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCuxHQGVV-EvX7brkDg3QhFg0Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9d6ca2-0dac-4597-80f5-7bd3ab73e172/1/oCuxHQGVV-EvX7brkDg3QhFg0Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e2:53:52:12:e2:a2:6a:0b:c4:2f:d3:cb:bc:d8:4a:3e:23:
4d:31:02:d0:b0:a1:52:8a:be:2c:6a:eb:1b:55:0e:3f:57:11:
f3:82:36:87:d0:db:c4:38:ef:af:15:aa:7c:e1:f1:16:bb:cf:
f6:41:8f:e1:bd:29:b1:46:41:12:c9:40:83:05:fb:f2:66:a4:
06:a5:77:fa:84:73:dd:17:2b:30:f2:38:84:b0:1a:2e:2d:98:
a9:a2:7a:af:36:70:3c:41:b0:8e:7d:20:cd:76:1d:64:95:c4:
2f:9d:74:4e:d9:1c:68:13:cc:5d:8f:ee:39:b0:11:0f:2b:fe:
d7:64:ec:d8:fc:35:25:d1:eb:f9:1a:81:1a:18:90:ad:af:07:
18:5f:af:cb:d6:4f:1c:ec:06:77:04:1d:c9:f1:fa:b0:c7:f3:
26:ea:fc:e7:1a:7c:31:2d:32:d5:70:28:1c:69:ac:47:06:10:
41:71:f6:d7:4c:b9:36:ac:f6:61:76:1b:f9:82:3e:a7:8d:5e:
64:8c:22:1a:57:50:a8:02:9f:6b:1f:0a:68:e8:07:a3:1b:46:
bf:dd:9e:4b:97:76:25:35:a2:34:89:43:a0:3b:00:f7:d1:84:
01:f7:43:c6:5f:64:b6:1d:21:1f:a1:4a:dd:87:15:1a:51:56:
d9:23:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:39 2026 by rpki-client