Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: rfmz8TAJ4IoblaX9ZR6Uswpn79PZBnzRVc7zg2fWVAI=
Subject key identifier: 65:40:0A:D7:AB:F2:ED:5B:8D:2D:B4:8A:89:81:52:77:9D:B4:9F:DB
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 019B68EA5B2B858F6F81E07FAC9312A077AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0FD4
Signing time: Mon 29 Dec 2025 07:02:27 +0000
Manifest this update: Mon 29 Dec 2025 07:02:27 +0000
Manifest next update: Tue 30 Dec 2025 07:02:27 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: ZVkj25+qLZZFYsuQ/A8KEik5OI+qKPR6PGatOrP9Yzk=)
2: HG7ydsUTNCZ_p5tjqM9MAsrHmMo.roa (hash: YwMcAmzd1JHv5zjJMKIlR+Jtl9zncuOvMBHEZcetMIA=)
3: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:68:ea:5b:2b:85:8f:6f:81:e0:7f:ac:93:12:a0:77:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Dec 29 07:02:27 2025 GMT
Not After : Dec 30 07:02:27 2025 GMT
Subject: CN=65400ad7abf2ed5b8d2db48a898152779db49fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:8d:8a:dd:66:f6:c0:1a:19:5c:96:cc:65:
2a:1a:0d:bb:df:32:98:62:45:db:1d:f8:41:66:d3:
42:be:a2:0f:8a:35:d0:e1:36:1a:0a:dd:80:fe:6f:
82:82:84:a5:fe:cf:79:f4:c0:d5:54:e0:a2:3b:d5:
2f:ff:32:be:80:dc:8b:72:ef:71:eb:93:b2:e3:52:
b5:0b:82:d9:f3:79:a2:60:d7:e4:b4:2b:0b:73:45:
ab:aa:09:bd:c6:7d:5d:6e:c8:ec:16:23:30:ab:b4:
a7:f5:3a:4d:c5:66:c9:aa:ad:6b:70:93:98:6f:06:
c8:cf:b5:3a:81:f9:79:63:0e:8a:5c:a0:fb:6c:d3:
e0:da:bc:b8:6e:12:9d:c7:f0:fc:5c:48:43:34:eb:
ab:a6:b8:5c:6d:9c:05:a4:d2:8c:0c:e3:67:db:a4:
09:cd:3d:61:df:a8:a6:31:d8:d3:48:3d:5f:c5:da:
76:2c:61:e5:71:ad:97:e0:a8:f8:d8:0e:1c:9b:1b:
68:f2:c1:94:14:c6:92:d0:52:7e:b5:37:a4:b7:56:
49:ec:96:91:86:e5:36:8a:69:d6:69:be:3e:6d:f1:
a0:8a:4b:68:07:3e:74:26:b3:61:15:dd:0b:91:78:
3d:9d:ef:87:17:0d:77:7c:78:2d:cd:17:87:b8:39:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:0A:D7:AB:F2:ED:5B:8D:2D:B4:8A:89:81:52:77:9D:B4:9F:DB
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2b:37:b4:c6:c2:5e:b1:34:cb:6f:e5:96:89:6a:51:d0:2e:
96:4b:58:5c:40:ec:a3:8b:93:a8:2b:90:a4:0d:73:16:f4:5d:
45:62:c9:e4:aa:36:57:fb:3d:88:08:a3:29:37:c2:8d:14:db:
fb:b5:72:66:50:c1:82:3c:8e:6f:3c:4d:80:65:08:a3:26:96:
7e:76:80:6c:ca:bb:14:8c:5b:a9:3c:62:7a:ae:de:f8:a6:e0:
fb:6b:d4:de:7a:71:54:00:c1:f1:f4:62:61:33:46:74:d7:c3:
e7:e4:6c:30:67:74:54:c4:0a:d1:f5:12:96:b7:b6:6c:dc:48:
4e:55:18:3a:51:43:18:d5:d3:e0:3a:f7:86:70:c6:fd:2c:22:
02:1b:4a:fb:c9:e6:3a:11:61:6e:88:7b:11:d3:b1:74:48:2e:
f1:cf:cf:b3:2b:18:4d:fd:5f:ba:74:e3:c4:b0:94:91:00:a4:
c7:af:fb:ff:01:54:3d:ba:57:2e:59:42:a2:23:8a:4d:6e:62:
ac:20:e1:6a:69:6c:99:0b:95:f3:71:6b:bf:2d:f3:44:3e:b4:
12:d9:ef:69:cf:01:d6:62:42:72:be:4f:19:bf:6a:af:f1:06:
3e:d9:7c:a6:f2:3c:d2:a5:e2:46:52:e1:81:78:27:60:e9:e8:
a3:6b:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:18 2026 by rpki-client