Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File: TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier: sm07iYYaFKm6DhffqPtmO7A99DUA8m5iuxo/JqxD8eM=
Subject key identifier: ED:6F:5F:20:8F:D5:2A:E2:3C:67:7A:0B:B5:94:79:E2:DF:66:F9:B4
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial: 019CDBE9386AF588A39DA1500A147F44C398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number: 1863
Signing time: Wed 11 Mar 2026 08:00:20 +0000
Manifest this update: Wed 11 Mar 2026 08:00:20 +0000
Manifest next update: Thu 12 Mar 2026 08:00:20 +0000
Files and hashes: 1: ECKViBV7wRLHTav2jF-AfG9JxzQ.roa (hash: ObO6UXIOSmhNDyTyxoQq4HbBjcMNfcy2i3MVlt06RT0=)
2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: zv35ZKrL6N5MQwBPZEldMwAlou/rWWU49t3MGsCqpD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:e9:38:6a:f5:88:a3:9d:a1:50:0a:14:7f:44:c3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Validity
Not Before: Mar 11 08:00:20 2026 GMT
Not After : Mar 12 08:00:20 2026 GMT
Subject: CN=ed6f5f208fd52ae23c677a0bb59479e2df66f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:67:12:64:64:fe:13:13:42:b4:d4:2c:0a:
24:07:2a:ee:9d:ef:f0:c5:2d:38:42:69:ba:4e:08:
13:ee:78:c2:13:6c:d2:d1:5a:a2:a6:e5:b2:d0:f0:
48:55:10:91:84:01:95:65:62:90:a0:a0:aa:41:07:
7e:dc:9c:77:bb:22:d9:d4:5e:4a:56:de:8e:c5:bb:
23:f0:81:6a:a6:44:1e:86:59:91:06:f2:18:4e:9f:
09:d4:3b:15:76:7e:73:0a:13:91:aa:40:cf:27:ea:
0f:86:6f:65:5f:d9:e3:59:7e:e8:09:fc:0e:43:97:
69:54:5d:08:10:20:99:ed:66:03:7e:6a:76:5f:7b:
3a:7c:36:85:c4:73:b9:ca:0a:d1:bb:c9:b1:e1:c0:
ff:a8:4a:f7:94:6a:27:c3:37:6d:98:06:5e:5a:45:
43:6a:67:4b:2d:a1:df:d4:8e:d6:96:cb:95:4b:82:
33:07:30:ac:d0:62:ef:a9:7a:f8:8f:00:02:e3:b6:
44:64:de:13:c6:c4:87:47:78:44:8d:73:89:e4:0f:
6e:83:d0:b1:bf:1a:c4:36:db:9a:19:01:ad:19:74:
3d:a1:60:f2:07:be:d9:d7:68:0f:11:45:9c:32:6f:
24:64:9a:dc:50:f3:c1:ca:87:fd:93:b3:ac:d6:8f:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:5F:20:8F:D5:2A:E2:3C:67:7A:0B:B5:94:79:E2:DF:66:F9:B4
X509v3 Authority Key Identifier:
keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3d:8e:39:3b:71:c6:9b:e2:c9:21:2a:66:0c:21:0a:ff:d8:
ea:c5:dc:a4:3d:33:9b:53:cd:4c:28:f1:6d:46:96:64:04:dc:
ec:7e:df:b8:1c:3d:b0:0e:75:cb:37:d3:ee:74:3c:29:82:31:
f5:27:7c:d0:f4:80:2e:7c:88:2a:8b:3a:05:c1:4e:b5:ed:a8:
e0:59:9e:1e:a8:9f:41:89:93:29:84:4d:fe:00:a6:c0:f2:21:
ef:b8:97:04:08:a4:10:96:84:c4:02:79:d7:8e:9a:20:51:ee:
f0:57:3d:8b:c0:a2:06:d7:4f:a0:e6:c8:2a:06:45:93:20:3b:
9a:be:9a:10:d8:a3:73:d9:62:77:e8:c2:c1:51:88:4d:aa:8f:
b5:61:30:b8:97:9c:a8:21:d1:31:f9:38:41:40:ca:3c:03:e9:
d5:1b:ee:50:ab:a3:1b:7f:f2:c4:29:e7:60:2f:00:1a:40:d6:
f1:54:a0:30:46:2c:c8:51:83:22:c6:d3:b4:3f:a1:52:70:32:
af:74:e8:dc:09:7e:bd:dc:75:3a:78:85:86:67:ec:5c:b4:0d:
e2:8c:ca:1a:c7:b7:d5:be:e7:8a:ed:74:dd:e3:67:3e:a8:e1:
a8:37:5a:ef:90:4d:6b:39:0c:c8:cf:0e:8f:4a:cc:2d:0f:e4:
1a:31:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:05 2026 by rpki-client