Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: 1GauOOD2qitH7WqrJwybxTow2AOV3kONsHSluL/9nlk=
Subject key identifier: 1A:19:C9:2F:D9:08:69:10:64:B8:BD:A0:A0:D5:17:03:C6:FD:4E:31
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 019CC184E9E80B6EFD31B097F7483148783D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 1853
Signing time: Fri 06 Mar 2026 05:00:39 +0000
Manifest this update: Fri 06 Mar 2026 05:00:39 +0000
Manifest next update: Sat 07 Mar 2026 05:00:39 +0000
Files and hashes: 1: ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa (hash: 9Ixv1QcElvaUvLVayAC5q1i8Ay2oyoQHQj5D6wnH7iU=)
2: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: KAcTJDamefxduaENfk3QANWetUk/l+tPQQWtEGIEATA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c1:84:e9:e8:0b:6e:fd:31:b0:97:f7:48:31:48:78:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Mar 6 05:00:39 2026 GMT
Not After : Mar 7 05:00:39 2026 GMT
Subject: CN=1a19c92fd908691064b8bda0a0d51703c6fd4e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:6a:46:6d:b2:b9:0e:b0:74:c4:ef:66:ca:
ab:bd:72:8e:80:7b:22:7d:67:07:eb:12:06:6b:4a:
09:ea:ac:a9:24:e1:3c:bd:cb:d2:61:ec:ce:96:26:
f9:72:1c:f0:c8:f1:1a:23:07:bc:d8:dc:d0:62:0f:
bf:32:14:ac:69:a7:eb:50:41:cd:fd:2d:57:7a:4f:
3d:52:ff:a3:b2:10:97:56:08:48:c9:48:a3:f4:ae:
ad:07:d9:ea:5f:ce:86:35:5b:b0:f1:45:b5:54:c9:
b7:92:d0:7c:7c:c4:ec:9c:d2:80:91:2e:d5:d4:bf:
58:e1:2a:07:4c:92:b9:4d:8d:d4:4b:c2:c5:87:20:
df:77:00:8f:bf:d1:b3:83:ef:46:e1:92:0e:5d:12:
2a:55:08:84:ed:4f:62:56:45:87:ae:49:d3:24:82:
75:52:f8:22:8f:64:83:f7:b0:34:cc:22:20:19:59:
05:ea:88:99:43:58:d1:55:d6:ec:39:ac:14:cb:0f:
1e:7a:0d:f0:33:23:68:d8:56:5a:ca:12:be:66:c9:
43:9f:c4:01:83:43:b5:41:2b:a2:5c:ba:5f:ae:2b:
4f:5d:c9:c2:9d:3d:0f:ac:a5:e4:39:cf:34:28:38:
e4:cc:49:d5:1c:44:40:21:26:ff:bd:f9:1d:2f:08:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:19:C9:2F:D9:08:69:10:64:B8:BD:A0:A0:D5:17:03:C6:FD:4E:31
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:ba:29:46:f0:85:d1:e9:93:47:67:92:0f:39:e8:3f:8e:
3b:17:1d:5a:f5:7d:13:08:09:86:7e:0a:8b:0e:3c:71:cd:e9:
79:22:f1:a2:77:d7:5a:a8:e4:b8:24:77:88:cc:71:e3:fb:be:
b8:e8:36:9f:2f:fe:fa:92:13:d1:2c:d6:20:1a:cf:c0:1c:f0:
6b:05:e0:5f:c8:dc:f9:10:2f:f3:35:49:50:4a:48:c8:1a:a9:
9e:cc:f9:d3:22:18:72:93:7c:e8:48:cd:ed:43:b5:62:a3:19:
11:09:c3:3f:46:9f:b2:60:88:a5:2b:05:a3:5a:4e:96:92:02:
a2:97:e6:63:56:ec:d1:86:bc:5f:2f:7e:49:37:3e:57:37:78:
e2:0e:a5:1d:fc:b1:25:92:a6:45:0f:54:2f:eb:6e:a6:a5:93:
25:5d:40:b7:9c:36:89:fb:ae:5e:3b:95:6b:06:66:94:aa:c0:
ea:0e:16:fd:91:6c:03:03:d9:5b:e5:47:37:b8:55:b8:a9:a1:
5d:af:b4:66:28:bf:07:1a:aa:8d:1a:03:7e:f1:37:4b:0a:cc:
2f:c5:9c:eb:e3:ed:49:dd:b3:ac:50:cc:f4:cc:47:56:36:74:
a4:a2:b3:d5:53:49:9f:b6:55:7e:05:e4:af:64:54:3d:7e:d6:
e6:c4:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:33 2026 by rpki-client