Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: kRQw0ViLN11PK5gu4r9SwX8jEgR4tsSAdBuwHmfp1Vg=
Subject key identifier: 7D:08:53:25:04:40:51:A6:C8:27:B5:CC:18:81:7F:3D:B4:70:4A:47
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 019B4AD0919CEA614915A1596741CC938484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1796
Signing time: Tue 23 Dec 2025 10:45:41 +0000
Manifest this update: Tue 23 Dec 2025 10:45:41 +0000
Manifest next update: Wed 24 Dec 2025 10:45:41 +0000
Files and hashes: 1: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: iZMnpS1klrZD0V2Qk4+K+NKfjH0WsK31DORYRJ8Tq6U=)
2: sTPvAVkk0lzn1aqZTa0vE5URnXE.roa (hash: Ca0epwNY4XymM+oI6Swm3+NbQzkrDGz6ZAOkVsfc9rs=)
3: v4SQRLHf5nYkBHaVpXii5dfLZag.roa (hash: x7u2+GIzDIiFV+NfRd1Z38RUJjx62IOURXcAS9yBuRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4a:d0:91:9c:ea:61:49:15:a1:59:67:41:cc:93:84:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Dec 23 10:45:41 2025 GMT
Not After : Dec 24 10:45:41 2025 GMT
Subject: CN=7d085325044051a6c827b5cc18817f3db4704a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:21:ed:da:59:be:af:84:85:2f:fa:d0:6e:
d9:a7:53:71:d8:17:47:e8:3f:7c:6d:57:b1:19:9f:
9b:c8:34:a5:26:35:68:65:27:36:13:ca:2a:8b:94:
c3:6a:5c:35:4c:f7:df:e7:03:7f:35:ee:bb:cc:10:
9c:7a:4e:34:ba:76:b8:41:36:4e:97:a6:41:4b:8c:
2b:f7:de:e1:ba:77:81:5b:c0:27:69:b8:78:1b:42:
0e:55:90:97:84:03:d3:1b:c4:9e:2e:3e:36:3b:ac:
45:29:36:de:76:ab:82:51:48:8e:e4:77:a9:27:19:
7d:44:23:40:f8:c1:54:c2:d5:af:b8:bd:87:ca:20:
15:36:8b:88:b4:d7:cc:3c:bf:32:6f:de:5f:79:50:
15:23:49:5a:2e:77:eb:7e:96:65:62:c6:8d:14:33:
2e:66:98:b3:f9:e4:36:b7:f2:32:22:53:38:c8:ff:
80:a0:9a:90:29:ba:57:90:b7:62:97:70:dc:17:b9:
06:0f:f4:c2:0b:97:5a:ea:db:90:e0:d9:79:a2:94:
d7:c6:9d:bb:ac:8c:c6:9e:59:6b:91:19:b8:2e:21:
d5:af:3f:d9:3d:ab:8e:c6:9b:bf:f3:1b:cb:bd:73:
60:aa:fe:09:5f:8b:be:8e:8d:ba:cb:40:ba:e4:3d:
6e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:53:25:04:40:51:A6:C8:27:B5:CC:18:81:7F:3D:B4:70:4A:47
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bb:94:92:91:89:8e:a6:a2:4e:ec:36:65:aa:5a:c5:19:e9:
38:0d:c7:97:be:30:b6:fa:7a:b5:4c:79:49:45:6a:f7:95:b5:
73:5e:0d:31:1e:6f:7f:33:94:48:10:17:0a:e7:97:28:58:e5:
a8:e5:03:a7:f6:e0:ca:ee:b7:d9:71:a7:e3:4e:02:2b:da:9f:
c0:e2:89:82:fa:de:81:da:be:97:48:c3:73:12:1c:2c:61:91:
6a:22:bd:43:b1:16:cc:ac:70:c9:96:61:55:bf:a1:e8:0b:84:
c6:81:a9:0a:1a:c5:86:99:ce:9d:20:76:04:17:a6:2d:43:4a:
b0:0d:5e:da:37:9b:a7:65:9e:8a:95:ba:ee:82:f5:0f:7f:08:
fd:12:41:61:fd:96:45:84:69:bb:3f:77:14:10:d5:44:f2:ae:
e6:90:5c:06:c8:4a:4e:c1:49:6f:4b:71:75:bd:45:10:00:15:
27:15:07:d0:01:ee:16:85:a1:ec:d0:3b:5f:ee:c5:a1:07:15:
59:be:6f:92:5d:40:42:10:cc:6d:ab:4c:47:95:91:25:1c:1b:
6b:92:66:6d:4b:05:ce:41:14:10:4f:85:c8:e5:83:01:35:bd:
44:96:89:3b:17:b7:5d:e8:b7:89:af:33:c5:c8:58:5d:5c:cf:
4d:3d:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:51 2026 by rpki-client