Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: EeWh/pr8Bh9ii7EWiXFk6tGjRfBNMQnA9vH9bLPPnzs=
Subject key identifier: 6B:FD:08:15:57:44:06:58:09:EA:29:C8:16:0D:05:96:BB:ED:BE:8B
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 019D99D03FD1933E5C49E540DF8ED9A7228C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 13B1
Signing time: Fri 17 Apr 2026 05:00:54 +0000
Manifest this update: Fri 17 Apr 2026 05:00:54 +0000
Manifest next update: Sat 18 Apr 2026 05:00:54 +0000
Files and hashes: 1: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (hash: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: Ov5scF5ytXkvsFaCGDqTlnktVVElyx1TWIODlqsrkjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3f:d1:93:3e:5c:49:e5:40:df:8e:d9:a7:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Apr 17 05:00:54 2026 GMT
Not After : Apr 18 05:00:54 2026 GMT
Subject: CN=6bfd08155744065809ea29c8160d0596bbedbe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:4b:26:b8:98:cc:29:88:f8:cf:dd:a5:4b:
56:06:79:e3:06:ca:9d:c3:2c:15:27:fb:51:fa:85:
81:53:7c:77:11:91:5e:72:f1:4d:42:30:e2:6d:39:
ac:76:bf:62:50:b1:0f:50:90:51:02:c8:d6:77:c3:
34:6b:13:aa:0f:26:2b:f2:4d:43:28:81:8e:d7:37:
09:e9:f4:3d:03:73:41:bb:19:5a:d9:a3:f2:1b:11:
ef:6d:a2:23:59:c6:ac:51:7c:a7:dd:89:05:ff:db:
bd:2a:3e:dc:bb:b3:26:be:1d:bf:3c:10:d9:30:52:
1a:6c:11:d9:5d:51:79:29:7e:b1:cd:4a:1b:5a:94:
18:81:50:86:68:6d:1d:f8:3b:d6:97:50:3f:e0:29:
40:83:1d:a2:1f:4e:d5:b9:c3:21:0c:99:6e:43:3f:
b7:17:49:63:cc:c5:83:ae:9e:28:40:e8:49:cf:98:
4b:59:6b:9a:f3:0a:ff:3b:8e:ca:81:f2:5f:99:83:
44:3a:4e:01:c9:fb:07:5f:3e:4f:65:0a:e4:98:6a:
c3:35:c5:a7:91:8e:fb:12:ee:03:59:36:8d:4a:0e:
75:8a:7f:8e:a9:96:8c:37:78:59:ea:a5:38:cb:9e:
43:15:11:fb:1a:ed:d9:a8:44:20:49:db:4f:91:bf:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FD:08:15:57:44:06:58:09:EA:29:C8:16:0D:05:96:BB:ED:BE:8B
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:94:54:a8:2f:dd:3d:9f:40:86:34:c3:0b:64:f3:4b:b6:
70:5e:fc:f4:4c:38:08:ae:fd:a3:1c:a0:f1:88:58:9d:69:32:
c9:2f:e1:d9:1b:89:46:44:48:e0:13:b6:e8:d5:f0:a1:1a:82:
61:24:ff:15:8f:61:fd:7c:26:06:ae:6c:f8:9d:29:a4:03:8d:
b1:2f:c5:1a:3f:39:b3:8e:51:4d:2e:19:3d:0e:18:12:6b:8a:
fb:17:5c:ed:0e:a6:5b:fe:14:19:2f:27:f9:9c:9c:de:c8:27:
e6:77:00:75:26:af:af:c1:18:21:37:e1:98:c7:9e:2b:1d:e6:
a3:f3:30:31:ab:41:83:1b:97:f4:bc:54:76:8a:ef:e3:59:df:
67:cb:3a:79:43:12:9a:90:58:ef:c1:64:2c:86:b9:92:f3:32:
57:d5:da:1e:cc:94:94:94:df:9c:34:dd:34:79:87:87:50:aa:
cc:ba:0d:7d:d9:d1:5f:70:3c:66:21:91:35:8c:58:e9:34:b4:
7e:1f:0e:6e:54:0e:f0:1f:c1:50:4d:60:e7:d4:16:4b:4f:70:
3f:8c:23:b1:ee:dc:1d:cb:09:00:9c:6d:70:00:0d:c2:d0:87:
5c:32:02:d7:a8:20:e7:60:91:2e:22:00:12:6c:f7:2a:43:e1:
22:33:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:36 2026 by rpki-client