Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json)
Hash identifier: QUXkVSymxwfQYX3HpcqFGkGhAvcLMrrIoPXijboSKsE=
Subject key identifier: 20:D7:34:88:55:2A:64:F2:D0:18:74:B7:42:DE:39:2B:F5:50:35:0A
Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f
Certificate serial: 019B4FCEB32B72C04965FBBD2B7221724310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
Manifest number: 1792
Signing time: Wed 24 Dec 2025 10:01:44 +0000
Manifest this update: Wed 24 Dec 2025 10:01:44 +0000
Manifest next update: Thu 25 Dec 2025 10:01:44 +0000
Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: iEpdxLrys2kAdiD9TKqoym6ywGdlh6pSi3kUMrNkgss=)
2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4f:ce:b3:2b:72:c0:49:65:fb:bd:2b:72:21:72:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f
Validity
Not Before: Dec 24 10:01:44 2025 GMT
Not After : Dec 25 10:01:44 2025 GMT
Subject: CN=20d73488552a64f2d01874b742de392bf550350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:7d:84:f4:0c:22:03:8d:b9:bd:fe:a2:a0:
a1:21:99:f3:b4:d3:0d:3e:39:f8:59:cb:96:4c:0e:
0a:3d:a5:d8:0c:ca:3f:a1:97:c1:c4:32:8c:d5:d4:
1d:94:37:9d:5d:0a:40:fb:4c:70:2c:12:3d:b1:2f:
22:5c:37:83:81:93:8b:f0:99:03:a3:16:6f:b7:39:
e3:62:47:11:7a:fb:12:d4:f1:ff:01:5e:9e:b7:8c:
c8:a8:db:8b:90:5b:94:95:8e:90:74:d6:c3:8a:37:
ce:37:a9:6b:e4:49:8c:ac:f4:d9:e7:b4:a0:58:a0:
80:c1:b5:0c:cc:07:4f:bf:2c:ed:39:e6:da:59:79:
44:4c:91:39:46:20:5c:f6:82:af:37:d2:5d:bc:4f:
38:f5:89:71:59:91:42:42:74:ce:3c:d0:ba:7c:7f:
8d:08:a0:66:bd:36:b5:82:7b:01:2a:e8:63:a6:34:
1e:58:49:da:46:1b:94:a5:f9:aa:ea:5a:b9:f6:19:
d1:50:95:81:29:c0:16:27:ca:c5:b8:22:33:6b:04:
ed:23:e1:be:c8:4a:db:58:31:18:ce:ce:19:ea:4d:
2f:77:df:31:99:28:34:59:2f:28:14:2c:1f:04:5b:
55:20:89:8d:f3:f0:d8:7b:84:c5:7f:c8:fe:02:b7:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:34:88:55:2A:64:F2:D0:18:74:B7:42:DE:39:2B:F5:50:35:0A
X509v3 Authority Key Identifier:
keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:5a:7b:5d:f0:78:37:dc:c6:c8:73:1f:c7:be:7d:f3:08:
8b:5f:65:7d:c9:7b:72:ff:89:d3:4e:b2:3d:fd:15:ae:75:86:
a4:62:f1:83:11:3a:0b:4d:1c:76:8b:06:51:c9:3c:dd:42:35:
10:be:00:f4:59:88:0a:8b:e9:e3:4b:92:2d:db:45:b8:3c:4c:
e4:e6:dc:91:41:9b:5e:35:7d:16:13:ce:f7:3b:a2:c5:93:7c:
ef:75:e4:1c:4e:c6:0b:24:43:32:de:1f:6b:6c:ec:57:1c:e8:
fc:a4:08:b2:33:47:e2:b2:70:80:51:98:c8:b0:6a:9a:5c:56:
33:64:33:5a:3b:e5:4a:10:a8:72:12:08:ce:fe:4d:b2:f2:2a:
3f:5f:69:9a:81:90:18:fa:4c:17:10:d1:94:e3:c0:f7:f5:02:
7e:54:0c:f4:5e:b5:6c:db:99:da:ff:ca:63:fe:8d:73:21:4b:
74:a3:dc:1f:79:79:14:4e:04:b8:b7:65:8c:a9:20:3e:c0:12:
27:9a:2c:84:3c:ae:fc:3e:24:7e:ce:06:eb:d0:dd:66:a6:85:
16:39:62:ec:88:80:f2:1a:2f:23:37:8e:c7:20:52:5e:ff:a5:
bd:2d:20:e5:db:fe:f0:f0:8f:65:21:3f:a7:24:50:fd:55:dc:
4a:ec:9c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:22 2026 by rpki-client