Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier: JzD3FA6cUOMWvyTRIZzKdVnkV3ujIpalurCTfZB4xBc=
Subject key identifier: 1A:5C:3F:0F:2C:66:CC:AC:EE:FF:C4:EC:01:39:FC:10:D0:32:E5:0F
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 019AE25F48D1FD771AAAA051A5AA625F14DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number: 0CD7
Signing time: Wed 03 Dec 2025 04:01:26 +0000
Manifest this update: Wed 03 Dec 2025 04:01:26 +0000
Manifest next update: Thu 04 Dec 2025 04:01:26 +0000
Files and hashes: 1: 8D0SgcE22-jKRyHTI51t7V8NcjA.roa (hash: ZXV9vvWvbV2B2BZGTQ3fbU0rYCU11Zmayta/6q9b25w=)
2: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: T/Y39JhGCqw2bttokE03ejedVQdqkRHcs5crWGmyvkk=)
3: JB9Y7wnJwFNh42qjbGzSSoW0uhI.roa (hash: idOHiv8xfyir4aZA/b0dlRbG2HOO8hhEFkrMoBmk7Eg=)
4: mDXhl4dprarAsNvti4q46_kKZpM.roa (hash: nO7loNJnNWEy7qYEFwacKqwIKjogQXV6dHPxMdw1y3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e2:5f:48:d1:fd:77:1a:aa:a0:51:a5:aa:62:5f:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Dec 3 04:01:26 2025 GMT
Not After : Dec 4 04:01:26 2025 GMT
Subject: CN=1a5c3f0f2c66ccaceeffc4ec0139fc10d032e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:83:98:1e:61:4d:b1:07:a5:aa:46:8b:db:
e4:87:69:ef:2e:71:fc:10:79:d3:1a:9d:0e:d4:35:
c8:0e:b1:83:27:d4:6b:81:88:e3:69:ec:17:6f:d0:
24:cb:37:8c:46:57:3b:80:e6:2e:57:cc:b4:72:4b:
0a:f6:70:e7:d9:40:c4:1b:e1:8b:72:3e:94:ee:84:
87:2a:66:86:8c:57:a3:ae:63:a1:87:66:29:4e:fb:
81:5c:ba:ce:c0:5e:8d:83:2c:a9:c1:55:0a:4a:ac:
4f:f8:e7:cb:fa:a8:0c:a2:c7:05:f3:01:80:e1:31:
b1:15:2d:29:bd:c5:cd:c7:e9:fe:f3:25:35:6e:2b:
38:37:0a:8e:b4:f3:65:86:36:a9:62:c7:2b:00:18:
f0:47:e0:a7:9c:f2:5e:e2:c6:bd:dd:4f:77:03:3c:
7b:c0:25:02:8f:cf:04:ec:b2:61:69:e0:c0:86:b5:
ce:6e:34:6a:a0:99:11:22:a5:f6:8a:36:dd:2f:05:
32:de:e6:08:ba:93:ad:af:f4:3b:e5:5a:95:db:83:
13:bf:7e:94:09:3e:4a:df:ed:a7:33:71:82:5c:c2:
1f:1a:bb:bf:f3:3f:30:13:d0:91:87:fd:ba:42:e0:
df:8a:a2:d7:4d:bf:e4:29:ea:cf:96:27:44:46:74:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:3F:0F:2C:66:CC:AC:EE:FF:C4:EC:01:39:FC:10:D0:32:E5:0F
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:f7:7d:e9:74:39:e3:97:e6:3c:96:d9:a9:69:0d:e8:24:74:
fd:0d:e1:dc:7c:a7:76:c2:5a:fb:63:8f:47:ec:b7:d9:9d:66:
71:db:23:a4:5e:f8:28:cf:53:95:88:14:30:05:ee:35:a6:f8:
f5:76:43:63:cf:e0:1b:63:fa:0b:35:44:e4:7f:67:66:f8:56:
24:ce:b8:8c:15:7c:6d:b7:11:1f:50:28:a2:18:47:38:e8:df:
a7:18:3a:9f:42:59:78:a0:a5:fe:a1:4c:b1:16:f2:2f:c1:b5:
7c:21:b1:a8:0a:20:e2:1d:58:8f:20:70:49:59:7f:06:80:90:
b1:e3:79:75:bf:10:51:f7:8f:92:45:ee:8a:03:9f:84:5e:63:
9b:10:21:7f:b8:01:01:57:97:ab:82:51:c0:56:f4:c6:9a:b5:
07:ab:9b:aa:e7:5c:65:7d:63:8a:7c:7a:3d:e2:1f:49:51:e3:
20:11:64:62:a1:37:cc:25:0d:23:6e:97:32:c7:20:57:ae:4b:
42:41:02:26:e9:01:9f:6c:d5:f0:8c:b6:15:39:c0:8d:d8:f4:
32:42:9f:6a:8b:c9:a4:71:a4:4b:ce:1e:3a:a1:22:20:3a:f1:
8e:2d:ef:df:64:56:92:4a:ec:2b:15:f8:fe:bb:dd:21:9a:70:
69:98:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:21 2026 by rpki-client