Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
File: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft (raw, json)
Hash identifier: M2Kuv7CfD467r9UvBovwXBti3YMR+1rfbtrT9Vgofls=
Subject key identifier: 4E:7E:65:55:EB:73:2C:C4:0E:E5:57:3A:FA:9B:6F:A9:89:29:F7:25
Authority key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Certificate issuer: /CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Certificate serial: 019BBA3C1F83C75C1A9044EBF6BDF1C5FF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
Manifest number: 0467
Signing time: Wed 14 Jan 2026 02:01:00 +0000
Manifest this update: Wed 14 Jan 2026 02:01:00 +0000
Manifest next update: Thu 15 Jan 2026 02:01:00 +0000
Files and hashes: 1: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl (hash: teG1KW3kpALsIwuTeYZ8GS3TXhnNMyiD9dZB1P9RsgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ba:3c:1f:83:c7:5c:1a:90:44:eb:f6:bd:f1:c5:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Validity
Not Before: Jan 14 02:01:00 2026 GMT
Not After : Jan 15 02:01:00 2026 GMT
Subject: CN=4e7e6555eb732cc40ee5573afa9b6fa98929f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:b7:89:90:7c:98:99:1b:59:db:01:ad:24:
10:dd:04:01:22:44:90:7a:a0:8c:23:18:11:c3:f5:
d7:83:ce:48:ad:1d:7f:48:12:c7:06:1a:f8:12:cd:
62:e5:89:7a:13:74:79:e8:6c:e7:6d:59:43:cd:c0:
2d:73:7a:8d:ca:25:52:85:c1:05:4e:33:e1:c9:30:
67:49:4d:c1:4a:2c:4d:74:67:ac:be:f2:ac:17:fb:
64:bc:77:6e:2f:ae:e9:fe:d2:60:ff:36:2c:50:e0:
1e:82:be:21:1f:11:84:aa:9d:6d:20:f0:d9:4e:98:
e0:3a:df:5c:02:a4:50:c0:b4:34:ca:60:6a:58:86:
de:a6:99:e0:ef:ef:0e:da:8d:d5:a8:ec:88:67:ff:
37:4f:6c:b5:fe:d5:88:0f:b8:42:8e:a8:21:9a:cc:
0a:25:20:27:a6:88:87:8c:f0:54:66:72:07:d2:e7:
fd:b5:49:ba:71:a8:59:8c:5b:8f:d6:d0:3f:8a:ca:
6c:0c:75:a2:a0:f7:b9:62:c3:0b:c0:44:e8:db:ac:
f4:96:35:21:cd:84:44:3e:5c:58:67:b7:33:e6:f5:
8c:18:73:9c:53:9a:b9:5c:d7:d7:15:28:2a:8a:14:
b2:50:44:6f:4b:51:91:f2:5f:19:44:8c:e3:4a:b0:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7E:65:55:EB:73:2C:C4:0E:E5:57:3A:FA:9B:6F:A9:89:29:F7:25
X509v3 Authority Key Identifier:
keyid:B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:29:c3:79:e1:cd:c4:f2:9f:0c:0a:bc:a2:c3:af:90:4b:
a8:9a:57:e9:c2:cb:a2:ad:f0:6c:8d:57:a2:91:da:4c:29:16:
9b:65:23:8f:ce:87:98:88:ff:e3:55:27:17:06:db:6f:85:cd:
d0:7d:69:3a:f2:cd:d7:42:c8:d8:28:67:7a:81:b7:b2:50:e9:
ed:91:f0:3e:a3:58:d0:2c:38:d1:aa:8a:d1:c7:4c:07:bd:f2:
34:52:77:15:3e:88:b4:83:32:e2:6e:c7:d0:bc:60:2e:b4:17:
86:b0:48:6b:fb:3b:82:a9:69:88:a2:cc:d2:30:4e:23:b4:2a:
86:3b:2f:a6:be:19:42:0f:0b:e1:f2:d3:19:1c:55:3e:d6:09:
9b:87:b3:f0:14:30:26:39:c0:e8:40:63:96:75:dd:c1:ba:51:
21:51:50:a2:2b:5c:52:9a:e5:5c:ca:57:6f:70:36:4b:b9:a7:
c2:0c:35:16:d8:f6:7a:79:e1:72:1d:3d:63:76:8d:72:1a:27:
c6:dc:ee:17:64:fa:23:b0:90:de:2e:e5:14:c4:6d:c1:a1:64:
b9:41:6c:71:8f:24:f3:2f:f7:a3:f1:36:39:2e:ac:8d:cc:ac:
6a:3d:e5:b6:19:d7:6a:88:d3:c4:3c:6d:81:9a:c3:52:4c:6e:
bb:d5:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:48 2026 by rpki-client