Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: o8s/e3u5Zp4HGmCdicXCi6Ur0uhVEMGmrsfJLizdskU=
Subject key identifier: F0:3F:43:2D:0A:CA:25:83:A6:A2:CB:6E:AB:DF:A1:C1:7F:7B:A6:E6
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 019CD731B9573851C4FF6511A30703960CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 04B9
Signing time: Tue 10 Mar 2026 10:01:25 +0000
Manifest this update: Tue 10 Mar 2026 10:01:25 +0000
Manifest next update: Wed 11 Mar 2026 10:01:25 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: rf54ORKDdW9coromKkijjMzAq7N3Prvv8ZtnPAJxHYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:31:b9:57:38:51:c4:ff:65:11:a3:07:03:96:0c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Mar 10 10:01:25 2026 GMT
Not After : Mar 11 10:01:25 2026 GMT
Subject: CN=f03f432d0aca2583a6a2cb6eabdfa1c17f7ba6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fa:73:d2:f5:c2:bc:d6:c6:8d:04:7c:26:9f:
2b:40:60:63:f2:a4:62:df:cb:bf:cb:61:8e:02:28:
c5:87:04:15:bd:d0:13:62:e0:67:08:63:05:a9:07:
eb:6d:13:ba:f0:9e:3d:85:b7:8e:bc:6c:e6:ee:48:
d2:3a:4d:e7:b6:23:5e:27:b5:19:2c:cc:f6:76:59:
6f:27:4a:32:41:5c:1f:04:4c:d2:9a:19:f6:18:5e:
1c:ee:5a:6d:50:c1:4d:cc:29:d7:4f:ac:b3:3d:46:
ab:6e:e1:dd:de:34:45:89:08:7e:50:4c:70:d7:cb:
bb:91:b6:c0:cb:dc:6f:44:50:95:fe:5a:23:c1:6f:
ac:9d:62:24:63:db:e8:19:b3:18:a9:db:2e:97:7c:
b0:3d:d5:9b:ba:92:43:01:23:72:47:86:a6:a0:4a:
e1:6b:94:d1:82:3c:b9:6f:be:28:d2:a6:5d:aa:d6:
ea:42:c4:90:b9:48:ae:32:a2:54:b0:a3:51:0b:e4:
51:ce:6e:4a:03:43:38:0d:a9:bf:d8:00:17:a0:fc:
4f:29:1f:24:6d:6f:08:63:bf:11:58:4a:e0:e1:47:
4b:b8:42:d1:f4:fc:b8:af:09:12:53:e6:cd:2c:74:
2c:0d:e5:e6:43:b5:63:31:a2:c2:1c:d0:c2:f8:74:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:43:2D:0A:CA:25:83:A6:A2:CB:6E:AB:DF:A1:C1:7F:7B:A6:E6
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9a:44:8e:0f:10:8d:9b:03:d8:86:87:59:9c:a2:9c:47:24:
37:88:83:32:1e:2a:a6:4c:93:f5:de:2a:d3:a2:cf:7f:dc:29:
77:8c:b3:97:13:ca:d0:07:81:34:8d:75:f3:f6:10:d0:08:63:
2b:a3:e5:51:32:95:25:01:ae:61:b6:b2:e9:df:05:31:66:51:
39:78:0d:b6:ce:75:60:f5:31:a5:90:33:c4:1c:77:7a:6d:a5:
5d:14:cd:38:bf:94:76:2e:3b:a8:bf:25:a2:aa:6d:7f:9a:3e:
a0:8f:97:9d:63:c2:d8:e5:10:ed:e2:b7:0c:07:e6:6c:a9:96:
56:e2:eb:0b:5e:61:42:24:a5:3e:92:04:68:42:d3:8a:c3:3d:
20:02:a0:c7:7b:89:d6:60:cb:a0:24:35:9e:b0:d1:b9:d3:29:
3a:c7:f6:13:59:66:3f:91:58:e9:18:f2:a4:34:1e:7d:ad:7e:
86:97:36:7f:cc:44:21:14:6d:1b:85:91:cf:5e:e3:d0:68:b4:
ad:2e:19:96:17:f5:c4:88:e6:63:58:95:69:ef:46:9c:db:46:
73:33:cf:50:43:31:9b:71:48:8e:fb:50:fd:34:74:12:af:41:
1f:36:2b:03:34:7a:ec:e9:dd:cc:6d:92:61:89:f5:df:05:52:
cb:b0:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:42 2026 by rpki-client