Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier: Zc8c/C2l8wFq9deIvl0PmU+yIAM90V8tljS49tKhuuE=
Subject key identifier: 1B:EC:9B:BE:E9:99:D2:C0:8F:0E:CA:15:9E:30:E8:65:42:0D:18:F7
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 019B7D82226816253D6ED900ECCCD825BB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number: 17BF
Signing time: Fri 02 Jan 2026 07:00:38 +0000
Manifest this update: Fri 02 Jan 2026 07:00:38 +0000
Manifest next update: Sat 03 Jan 2026 07:00:38 +0000
Files and hashes: 1: YOHHT-skEE4yfo6rH0tWQ_cNhPc.roa (hash: UBJvSErxIa7elbojww9MPjtVYVQAonrH5hKrQSaIrYY=)
2: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: 0eAZk12o/ZfUPwhi0qiqOgr47962AuRmi/tUWp8k72w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:82:22:68:16:25:3d:6e:d9:00:ec:cc:d8:25:bb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 2 07:00:38 2026 GMT
Not After : Jan 3 07:00:38 2026 GMT
Subject: CN=1bec9bbee999d2c08f0eca159e30e865420d18f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:55:ef:d7:b2:89:4a:14:65:50:7e:d8:6f:
84:c4:f4:90:32:aa:4a:3c:7d:02:24:a0:3a:29:7a:
e7:c1:6e:e8:da:c8:46:34:5b:87:11:49:91:16:5f:
45:65:58:3e:09:67:73:3d:91:29:1f:1d:68:7e:db:
0c:4f:ab:3a:bd:a2:12:c4:14:14:04:21:5c:2f:a2:
d7:32:79:51:74:72:10:51:54:d6:ad:07:95:7f:af:
c3:f5:ff:a3:33:66:93:9c:ad:c3:35:30:2e:a3:5a:
30:0d:16:ff:c6:e9:b3:c8:f8:d7:33:cb:b8:03:1e:
01:e0:da:02:9f:7b:da:8a:b0:70:27:24:7a:28:cd:
a4:0d:e7:72:74:c0:06:ed:fb:55:b3:26:99:74:3d:
37:d2:66:c6:5a:d4:e1:a7:ef:89:ac:63:8a:c3:c4:
67:bc:47:0a:7b:73:c2:13:86:f2:0e:1e:54:6b:bf:
18:f8:39:d3:c3:ec:a8:e2:ff:08:8a:91:b7:80:10:
45:51:33:4f:78:c5:84:6a:f6:b5:0a:d9:a3:e4:66:
24:86:57:79:64:a0:e3:43:7d:13:0c:99:47:0c:3c:
b4:22:a7:3f:99:73:fd:2c:a5:a7:b8:36:81:f1:86:
f7:dd:9b:6c:d5:e8:41:03:3f:1b:ac:b5:94:71:4d:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:9B:BE:E9:99:D2:C0:8F:0E:CA:15:9E:30:E8:65:42:0D:18:F7
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:01:95:fe:1d:6c:1c:64:03:e6:9f:84:99:de:b6:db:7d:6b:
d2:2e:5a:0c:9a:a1:3d:01:de:af:ce:31:8b:9e:e3:2d:15:47:
44:73:bf:28:78:fe:85:4a:42:5c:88:f3:37:36:02:81:e6:5e:
1a:66:4b:eb:60:a0:d6:e5:1c:e4:a6:99:b6:e2:16:45:98:12:
1b:10:2c:7e:76:16:b3:14:ae:ac:f9:28:65:e0:ad:bd:c9:6e:
02:75:12:57:db:bc:ba:11:e0:1d:94:f3:11:bf:35:14:e8:20:
74:d6:cb:61:0f:9c:20:bb:41:f1:c7:d9:8b:58:9a:8e:2c:05:
62:71:9a:84:43:9e:0d:47:47:04:8b:9f:ef:a5:cd:3e:59:ff:
5e:bf:68:bb:6f:fb:f7:f5:7a:03:3c:f1:7f:42:87:8c:6f:53:
0f:89:62:28:2b:13:34:f6:ff:09:17:00:77:e5:9e:5b:c5:02:
39:35:f4:d9:c4:02:91:e6:76:8e:59:d1:95:e0:ad:f4:d2:82:
30:06:b9:eb:2b:ba:6f:28:53:1f:bd:21:1b:24:a4:2c:1b:4d:
ac:eb:94:28:65:9d:f7:c3:7f:a6:dd:15:1b:e9:89:1d:63:aa:
7a:69:94:71:11:c0:a1:17:90:f7:bc:7f:c5:73:9a:c7:a1:0b:
10:77:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:35 2026 by rpki-client