Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
File: aG1vVpUAwlBwthJPG4b2CVJnepM.mft (raw, json)
Hash identifier: IrBuQYxvkqDe7w/sWSLSkEw6vO+z8tcW5fb+ERnPrcw=
Subject key identifier: 88:90:6E:AD:D1:33:64:E9:98:CB:C7:83:C3:4F:A5:99:21:3E:9B:5F
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 019B4392D3CF5A7A4BF191277E9C9E7B47CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
Manifest number: 0B2D
Signing time: Mon 22 Dec 2025 01:00:54 +0000
Manifest this update: Mon 22 Dec 2025 01:00:54 +0000
Manifest next update: Tue 23 Dec 2025 01:00:54 +0000
Files and hashes: 1: aG1vVpUAwlBwthJPG4b2CVJnepM.crl (hash: apdUXBfTrAOcYK8EkNg4UIf9nAjgXbntB0h1mp/tH8U=)
2: fbxiLqC9u6GPnCX55z_nk8kAC_0.roa (hash: +zK9lZ5mE/OR0q3eLIL2l12vVLaOOogeu/1os4/yE/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:92:d3:cf:5a:7a:4b:f1:91:27:7e:9c:9e:7b:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Dec 22 01:00:54 2025 GMT
Not After : Dec 23 01:00:54 2025 GMT
Subject: CN=88906eadd13364e998cbc783c34fa599213e9b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:f1:8a:ce:4c:94:30:17:a9:19:de:af:98:
d7:de:84:c5:4c:a9:42:d4:64:3a:94:32:f9:7b:2c:
4a:dc:91:0d:bc:64:c2:1d:2f:37:88:eb:ef:ec:d7:
fd:80:72:e9:58:02:6c:ea:a4:f2:45:78:8e:57:88:
d1:55:8e:ba:45:0f:6d:73:a2:02:84:f7:88:76:dd:
e4:22:b0:d6:c1:b9:d4:e2:00:68:18:bc:0d:c0:38:
ee:28:4b:23:47:8a:03:19:a9:14:93:9a:08:7e:f1:
31:fb:9c:c5:51:b1:f6:f5:58:85:ec:15:e0:8a:06:
38:53:c3:ff:c4:2e:58:6c:4f:33:75:43:f5:54:83:
49:33:ee:48:1f:b4:78:63:f2:6d:63:46:48:3a:3f:
4e:d0:46:bf:51:f4:6b:93:c7:56:e4:77:6b:b5:f1:
8f:b0:b2:9d:fd:ac:9e:a7:ec:0a:6f:7b:ce:6e:5b:
ee:54:28:7f:d6:10:68:86:1b:9f:92:69:ca:fa:85:
58:d9:8c:e5:96:07:2b:e3:03:1e:e9:ac:62:c9:97:
b7:e7:b6:5f:7f:79:6b:78:a8:1c:d5:34:83:24:83:
58:ea:aa:b4:51:aa:b8:51:f2:d8:53:9e:f5:a6:1c:
49:71:7b:33:67:2c:08:b5:75:ef:44:08:e3:46:8a:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:6E:AD:D1:33:64:E9:98:CB:C7:83:C3:4F:A5:99:21:3E:9B:5F
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5c:d3:2a:73:8e:41:a6:a1:63:70:a3:ff:5c:b5:bf:82:48:
c5:b0:50:51:2c:d1:7f:20:07:3e:16:4f:18:8b:e1:2a:05:d5:
84:d2:5e:13:5f:13:1e:56:3d:67:9f:8e:f9:74:5f:9b:9c:18:
11:0e:0b:9c:59:9e:86:58:5e:1e:bd:63:25:89:c1:93:ac:71:
74:71:65:d3:dc:64:8a:64:ce:9a:ec:b9:be:7c:85:89:c5:b2:
f5:3c:1a:77:27:98:db:05:0b:73:77:3f:28:9b:71:a2:12:a4:
7b:1b:18:8b:75:e8:9c:c8:51:6f:f8:f9:a3:f5:b8:51:db:b1:
ac:7e:35:ca:1a:29:ba:a9:e8:27:9c:eb:96:35:2f:f5:02:7d:
79:35:cb:99:fe:63:33:4c:68:01:c1:b7:98:73:3f:b0:e6:04:
cd:35:2c:4f:b7:07:a8:fc:31:84:28:db:08:b5:9b:c3:cc:3f:
2a:6d:5e:cc:43:f7:c7:6a:c2:2c:98:fd:62:2a:f2:72:8d:5d:
9f:93:e8:2c:5c:41:04:97:2e:20:1a:d0:62:be:77:a6:9d:3e:
db:e9:93:ec:a2:fb:c1:fd:27:66:d7:15:97:18:54:53:8c:f0:
aa:4e:61:84:0e:18:44:a4:db:df:d4:eb:12:84:99:e7:39:d7:
c1:ed:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:46 2026 by rpki-client