Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: vdRCOggqg/67Fi5u8pVkWeIgWqGSLTUAU6txhZOM5DQ=
Subject key identifier: F7:1E:2D:AD:B2:CD:91:7E:49:5C:74:9D:90:90:1B:48:80:CD:5E:3D
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 019C446C3670560E0CD0E1905D98624F86DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 0BB1
Signing time: Mon 09 Feb 2026 22:01:08 +0000
Manifest this update: Mon 09 Feb 2026 22:01:08 +0000
Manifest next update: Tue 10 Feb 2026 22:01:08 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: WktarqGZ3KF/Nrtpux096bGDfE/0ehNyqhoKn9eBRIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:36:70:56:0e:0c:d0:e1:90:5d:98:62:4f:86:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Feb 9 22:01:08 2026 GMT
Not After : Feb 10 22:01:08 2026 GMT
Subject: CN=f71e2dadb2cd917e495c749d90901b4880cd5e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a5:6e:6d:02:93:d6:bd:ec:75:b8:c2:a0:75:
f2:9a:15:f5:5e:5b:ec:70:0f:f3:33:5b:22:29:5f:
8e:c4:9a:95:65:f1:73:23:57:b2:1e:13:a6:da:08:
8f:f4:59:82:75:a3:0f:af:2b:ff:ab:61:0c:49:fc:
25:9b:85:ab:bf:41:d8:01:af:d2:aa:5d:2e:33:be:
9d:c3:5a:dc:bd:5c:28:95:7a:cf:75:eb:39:d7:0b:
3a:40:3e:7c:74:32:fe:5c:ad:2d:02:0f:b4:87:07:
6f:fc:40:44:92:ab:21:b7:d7:67:7c:2f:13:51:0a:
5a:33:5b:14:3a:fb:b8:5e:ee:76:a0:d5:64:1c:f9:
f2:fd:22:c5:7e:92:96:8c:40:81:fb:d3:d2:fb:7e:
fc:42:74:7c:99:9f:fe:2c:56:d8:c0:5e:c4:d9:e4:
b5:11:bd:aa:45:68:97:b8:62:df:1e:b3:66:6b:cf:
8e:9f:bc:62:a4:82:e9:e1:1a:be:e8:2d:6d:ce:37:
6b:ed:3f:88:38:e5:94:2d:91:5f:af:85:05:09:1d:
56:b1:c6:84:3f:cd:b0:00:46:31:25:de:24:d6:6e:
e6:e1:fc:21:1b:a1:90:eb:d1:b1:f7:3a:8e:b6:e1:
53:32:d6:3f:72:55:0d:6e:af:59:1b:80:69:fb:7d:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1E:2D:AD:B2:CD:91:7E:49:5C:74:9D:90:90:1B:48:80:CD:5E:3D
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8f:7d:14:17:3c:c1:e6:f6:a4:f2:6a:a8:5a:e4:32:84:bd:
d4:61:eb:08:35:1f:42:39:e9:7f:ad:ff:48:ca:14:09:9a:8b:
2e:23:97:c0:bd:62:a5:7b:06:c1:34:bd:30:45:9f:7b:1e:a3:
74:d1:28:0b:d5:e8:e9:6b:9e:4b:c3:b8:96:77:8a:8e:e5:94:
22:92:78:aa:52:e7:28:9c:16:e7:29:d2:8c:68:82:ed:fd:b5:
d8:8e:36:c4:98:ce:30:33:2e:da:97:12:42:6e:57:ff:83:09:
80:fe:98:60:41:de:75:eb:ec:c0:d5:0f:0a:45:a1:47:cd:f2:
c9:92:9f:81:2e:34:c3:68:bd:cf:25:52:5a:af:f9:5b:3e:9d:
c0:75:70:b3:81:ec:09:17:89:31:47:fe:b3:b1:b0:0b:47:26:
fb:0c:fa:a0:37:83:7a:f1:41:39:6a:7b:68:ec:3d:f4:50:df:
89:62:cb:f0:3a:de:60:04:01:4b:0e:f1:8f:b9:f4:02:f9:08:
26:3c:9f:de:23:06:f7:08:d2:6b:45:17:88:e1:96:c5:39:50:
66:2c:d2:0a:f2:ba:a4:86:39:54:33:29:11:73:a6:a0:51:25:
bd:20:78:e3:a8:7a:01:8e:69:3c:77:eb:a6:9c:28:e3:9d:ca:
85:3d:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:58 2026 by rpki-client