Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: XxHkcl8LrbpjsXm440HTkQ16+m3GQC98AUTqFdL4xfc=
Subject key identifier: 4A:EC:A9:86:E2:2C:38:A9:6C:A8:39:F2:3F:BA:68:E7:F2:21:39:10
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 019D47D89448ED1D4B66BECE88B11C712FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 0751
Signing time: Wed 01 Apr 2026 07:01:09 +0000
Manifest this update: Wed 01 Apr 2026 07:01:09 +0000
Manifest next update: Thu 02 Apr 2026 07:01:09 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: qUHhJ+NOnmUnSup2Xz5TH/RTa1pZidAROQP4PG3jhKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:47:d8:94:48:ed:1d:4b:66:be:ce:88:b1:1c:71:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Apr 1 07:01:09 2026 GMT
Not After : Apr 2 07:01:09 2026 GMT
Subject: CN=4aeca986e22c38a96ca839f23fba68e7f2213910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:d1:97:8e:6d:6a:e3:6e:93:c0:56:1e:e6:
b5:ce:e0:58:a8:84:59:a6:b2:81:6f:ba:62:5c:df:
6b:b4:81:3f:61:7f:43:96:78:43:76:78:4d:de:c9:
e0:f2:3f:0c:8a:14:a8:63:77:ae:03:db:0d:28:17:
af:82:22:b9:d7:ef:9a:0e:69:ff:e1:4d:85:0f:2b:
44:d7:22:d9:a9:75:07:e9:a2:f2:17:38:07:51:f1:
27:17:04:6f:f2:5f:72:77:3c:9d:6d:4c:bf:22:f0:
85:c4:d6:09:ca:aa:b9:4b:33:4b:7a:79:f1:68:7e:
a0:d7:54:cd:90:c8:36:ca:2c:0b:d0:f6:1d:e8:50:
a9:5c:25:0d:e1:25:a4:2b:ac:0e:86:b7:1a:d7:91:
f0:66:a1:94:a6:ef:3c:c7:56:da:45:47:2f:21:78:
a1:00:bb:9f:60:36:de:b5:8b:d8:f7:4f:40:bb:c6:
89:c4:55:fb:07:8c:a2:6f:2d:ce:04:2b:5e:c7:25:
0c:aa:6c:6a:aa:80:74:4a:d0:5e:f6:86:ed:57:cf:
9a:f7:e3:bf:d7:15:8d:fd:74:a3:ca:36:dd:21:12:
46:cd:23:b3:b1:dd:c3:e4:7d:5a:35:fb:ac:34:57:
23:87:ea:69:38:e8:78:a7:12:e6:05:df:50:a8:5f:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:A9:86:E2:2C:38:A9:6C:A8:39:F2:3F:BA:68:E7:F2:21:39:10
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e7:ee:7d:35:be:b6:05:9f:5a:47:4c:6a:23:82:d8:8f:03:
71:0d:57:82:4f:07:74:a6:5d:8a:b5:fa:72:22:61:78:e7:10:
4e:4a:8c:54:44:8e:75:66:03:a3:9a:b9:58:87:a7:93:15:9c:
c3:72:78:b3:34:af:96:d4:6d:51:ec:87:1d:c8:05:bb:7f:43:
10:ce:7b:33:e9:ee:52:a8:59:36:d7:b8:4b:5f:e1:7b:52:77:
f2:cf:98:59:99:85:c3:71:6a:14:aa:cb:7c:00:1d:8c:2b:26:
c8:84:28:34:c8:e4:b8:32:53:58:c9:e6:36:47:76:9a:fc:09:
0e:cc:32:c5:0f:af:4b:78:20:d9:21:53:8f:52:75:cc:50:a8:
71:af:b7:cb:41:33:26:5b:4c:ef:d4:8e:0e:b6:cb:d4:cc:96:
b2:0c:e4:73:9e:95:e0:ce:ee:2b:09:5c:b8:7f:e4:95:ce:78:
76:cd:a1:72:2c:a3:3d:1d:ad:44:d4:20:c1:e8:34:e4:0e:df:
ba:ff:09:ee:0e:2e:1a:b5:77:78:ca:9a:83:6d:d3:4b:c9:68:
f6:29:56:2a:1d:59:01:22:70:aa:8f:88:22:2e:43:93:f7:5c:
9b:07:54:f9:c1:69:e0:7a:e7:8a:d2:aa:60:22:fe:09:12:0f:
39:36:94:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1H2JRI7R1LZr7OiLEccS+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTk1MGEzOGI3Mzc0M2IyYjYyZmU1MzFiN2IxMTM1ZmRk
NmM2NWQwHhcNMjYwNDAxMDcwMTA5WhcNMjYwNDAyMDcwMTA5WjAzMTEwLwYDVQQD
Eyg0YWVjYTk4NmUyMmMzOGE5NmNhODM5ZjIzZmJhNjhlN2YyMjEzOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pjRl45tauNuk8BWHua1zuBYqIRZ
prKBb7piXN9rtIE/YX9DlnhDdnhN3sng8j8MihSoY3euA9sNKBevgiK51++aDmn/
4U2FDytE1yLZqXUH6aLyFzgHUfEnFwRv8l9ydzydbUy/IvCFxNYJyqq5SzNLennx
aH6g11TNkMg2yiwL0PYd6FCpXCUN4SWkK6wOhrca15HwZqGUpu88x1baRUcvIXih
ALufYDbetYvY909Au8aJxFX7B4yiby3OBCtexyUMqmxqqoB0StBe9obtV8+a9+O/
1xWN/XSjyjbdIRJGzSOzsd3D5H1aNfusNFcjh+ppOOh4pxLmBd9QqF+wNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErsqYbiLDipbKg58j+6aOfyITkQMB8GA1UdIwQY
MBaAFAupUKOLc3Q7K2L+Uxt7ETX91sZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNTA2YjUtOWY2Mi00ZGFmLWJkNjIt
ZDVhZDZhNDVhZDc1LzEvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNTA2YjUtOWY2Mi00ZGFmLWJkNjItZDVhZDZhNDVhZDc1
LzEvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlefufTW+
tgWfWkdMaiOC2I8DcQ1Xgk8HdKZdirX6ciJheOcQTkqMVESOdWYDo5q5WIenkxWc
w3J4szSvltRtUeyHHcgFu39DEM57M+nuUqhZNte4S1/he1J38s+YWZmFw3FqFKrL
fAAdjCsmyIQoNMjkuDJTWMnmNkd2mvwJDswyxQ+vS3gg2SFTj1J1zFCoca+3y0Ez
JltM79SODrbL1MyWsgzkc56V4M7uKwlcuH/klc54ds2hciyjPR2tRNQgweg05A7f
uv8J7g4uGrV3eMqag23TS8lo9ilWKh1ZASJwqo+IIi5Dk/dcmwdU+cFp4HrnitKq
YCL+CRIPOTaUXQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:13 2026 by rpki-client