Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json)
Hash identifier: RcN+AqIouXgAqpE8PR7C3+keGCev7/L0i7Xor4nObhA=
Subject key identifier: 9D:00:B1:2D:FA:31:AB:B2:39:5C:B1:37:1B:FE:7D:4B:D4:0B:39:32
Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Certificate serial: 019D2E8658958D00B885BDF976D72AAA9CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
Manifest number: 0E8D
Signing time: Fri 27 Mar 2026 09:00:49 +0000
Manifest this update: Fri 27 Mar 2026 09:00:49 +0000
Manifest next update: Sat 28 Mar 2026 09:00:49 +0000
Files and hashes: 1: DhiVgaWvNmOXlh13NZD3ECCC-Jg.roa (hash: YxArlaNhHs1+rEEwwN6ySNTuQKxwubxKRItAAtcuCZs=)
2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: r4Zt3zu3ZDTP3Kxa4ruapiqS0BJcxdM5LUpm+RAZhUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:86:58:95:8d:00:b8:85:bd:f9:76:d7:2a:aa:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b
Validity
Not Before: Mar 27 09:00:49 2026 GMT
Not After : Mar 28 09:00:49 2026 GMT
Subject: CN=9d00b12dfa31abb2395cb1371bfe7d4bd40b3932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:af:63:f6:86:88:3c:ab:89:5b:ab:b2:69:
e9:7e:fa:55:47:d4:10:45:fe:61:9c:5b:83:a3:32:
9a:93:73:0e:df:0a:8d:98:3a:96:46:d4:fa:fa:e5:
7f:41:8e:e4:53:5a:72:1a:75:20:01:5a:70:9c:25:
d6:42:10:c6:51:d1:77:de:e2:ef:e7:ef:c6:7d:b0:
83:d1:dc:fd:aa:2a:e0:95:30:98:d8:0a:5e:27:2b:
03:91:ac:50:e2:31:8a:d9:d3:f9:f4:e6:c0:ce:02:
bc:92:22:5f:20:23:c6:3a:58:0b:4a:da:2f:1d:81:
26:a0:ee:5d:e9:76:be:fc:68:bd:c6:e8:62:5c:e8:
23:ef:23:d4:2b:5f:48:6d:ab:1d:04:57:c3:6a:04:
9c:35:ee:51:64:37:f2:3d:7b:95:0d:b1:68:ae:35:
7e:f2:67:88:ce:c1:fb:92:19:84:7d:90:4c:6e:cf:
20:21:cc:c9:a2:ab:ab:4c:aa:c4:ff:bd:16:d2:94:
de:48:85:56:9c:39:de:c2:96:d6:34:a8:cf:58:1a:
5e:47:5d:4c:1d:88:fb:9f:25:6e:38:8f:87:c9:61:
f7:d2:8d:f8:88:6f:fa:1b:a2:a6:88:83:ad:c4:8b:
53:69:88:3a:c0:05:05:26:c3:54:2a:78:39:d9:3e:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:B1:2D:FA:31:AB:B2:39:5C:B1:37:1B:FE:7D:4B:D4:0B:39:32
X509v3 Authority Key Identifier:
keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ce:f1:1a:d7:53:a7:22:1b:2b:09:0f:8f:95:58:50:e2:93:
d0:67:a1:6b:19:ec:3c:62:d8:5d:46:f8:c6:04:d2:33:d6:81:
5b:d5:6b:b4:84:f4:7e:30:96:57:a7:9d:b9:4c:f7:9b:23:a6:
01:4d:35:a2:07:dd:c7:7e:a7:13:9a:79:41:5f:5b:c0:50:b3:
64:c2:50:9d:7d:ea:63:4b:c9:15:72:95:43:81:d0:25:29:97:
09:90:63:48:2b:ba:04:c6:5a:1c:b8:74:25:a4:89:28:d5:86:
9b:d0:25:46:1f:56:86:fc:96:c3:df:4e:bb:c0:40:5a:27:9c:
38:29:27:cf:15:57:79:41:6b:2c:5a:87:7e:81:d3:ad:5b:7a:
23:46:a9:50:9e:24:ca:19:a6:25:de:ca:9e:6d:73:31:78:7a:
b2:01:ed:ee:08:06:b5:03:b0:64:11:c9:be:04:28:2b:e6:07:
c8:e8:bb:17:a6:3f:77:59:12:ae:fa:48:63:e0:e3:f2:04:f9:
1e:85:c1:4b:58:b2:0a:02:c1:70:0a:89:68:c7:28:05:17:ef:
39:e1:07:bc:0c:56:dd:de:83:36:73:89:fa:f4:cd:dd:a5:e2:
54:d0:36:af:6c:31:1f:3f:bd:d2:01:72:2a:75:61:35:2d:ec:
91:ea:77:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:24 2026 by rpki-client