Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: WHwduoMbBfKAkqPtiURHbu7VC8l4skz/NrNTo43MDU4=
Subject key identifier: A4:72:E5:CE:B7:E6:22:BB:A3:93:36:0F:21:5C:7B:67:B2:61:63:13
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 019C1E71553BE8B88E2BC1B2B7C547F3BC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 0A99
Signing time: Mon 02 Feb 2026 13:01:09 +0000
Manifest this update: Mon 02 Feb 2026 13:01:09 +0000
Manifest next update: Tue 03 Feb 2026 13:01:09 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: acixg3RLv6oMXmIE2GzUIGHqZ5eMZYxBgJ2xCQCyf74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:71:55:3b:e8:b8:8e:2b:c1:b2:b7:c5:47:f3:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Feb 2 13:01:09 2026 GMT
Not After : Feb 3 13:01:09 2026 GMT
Subject: CN=a472e5ceb7e622bba393360f215c7b67b2616313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:76:35:f8:6f:df:5c:57:13:cf:a4:8f:13:
51:e6:55:b4:11:5d:07:51:8f:cf:72:6f:ae:e7:5e:
c1:be:06:5d:14:f5:46:3a:16:f9:37:b2:c0:31:b4:
ee:da:10:6f:5d:57:66:2c:60:2f:29:f0:65:71:dc:
41:57:95:a2:48:77:1a:d2:6c:34:b2:8f:4e:4a:96:
a1:e3:b2:34:ac:92:27:e9:cd:48:f7:6e:30:a9:b3:
63:9e:f3:3d:f0:90:f4:cb:5e:bf:6c:7d:fb:d7:63:
4a:c5:4c:e2:2e:0b:f5:85:81:5c:65:8c:51:d9:fc:
41:85:dc:07:19:a5:71:8a:5d:e8:58:36:c5:63:af:
16:b3:9a:75:ea:2f:dc:fd:7f:ff:1f:87:32:4d:6d:
52:82:40:d9:2f:3b:ed:c8:e3:47:ce:a9:28:6b:70:
f5:bd:fe:cd:2d:d2:3b:4b:fb:2c:96:fe:a9:e7:2a:
fa:9e:3c:b9:4e:b0:5a:61:9e:cb:30:32:d6:00:59:
0d:bd:d7:9e:14:bd:fd:6e:e2:da:01:5a:e3:78:43:
ae:a9:9c:1d:02:f0:ce:a6:bf:4f:d1:26:d4:e8:4e:
bf:92:99:35:a4:eb:6e:23:97:26:a5:63:ac:6f:19:
7a:25:26:61:9a:0c:95:e0:a0:f5:f9:90:68:93:6a:
22:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:E5:CE:B7:E6:22:BB:A3:93:36:0F:21:5C:7B:67:B2:61:63:13
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:42:ea:52:83:69:e2:44:26:9c:30:1f:4a:01:60:4c:fa:13:
aa:84:1d:90:02:c6:e5:ab:42:d6:61:4d:a2:0d:d3:3b:ae:15:
c1:e0:82:72:9c:20:5a:d6:57:b9:6d:16:28:e2:f0:68:1c:55:
85:e4:06:18:c3:c9:d9:ca:9d:52:b6:d1:97:f5:6e:a6:4c:30:
ba:ba:0f:a3:f1:cc:7d:e5:be:87:8c:e8:bb:d9:53:93:12:9d:
e3:c2:68:28:5b:62:82:9b:c9:e2:3f:a6:52:1a:51:a8:d0:b2:
c4:b0:0e:fb:91:08:5a:6a:40:5a:75:31:b9:c9:89:c1:f6:ff:
e9:40:5d:66:ca:87:18:08:fb:e6:af:53:3c:9a:ae:27:2b:a2:
2a:57:ca:ee:b6:6b:05:9a:a9:cd:d3:e5:3d:74:c0:49:a5:17:
90:7d:38:32:b1:c3:49:27:dd:cf:7a:03:3f:09:8e:e6:bd:10:
bc:28:b9:e6:a7:f3:fb:13:1d:a4:f9:5d:95:eb:fa:18:8e:61:
33:b4:4f:52:ce:98:86:c8:42:04:20:7a:32:19:27:96:6c:21:
79:7e:b7:e5:79:12:53:52:4e:74:ff:7e:4a:93:19:56:62:b4:
c4:c2:73:6a:9c:c2:e0:70:d4:f5:19:e4:7f:e4:4b:5e:d6:2a:
a5:87:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:26 2026 by rpki-client