Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: L1ud72jnqbwQzkVEuMEm0ZmA1n/SIyyZiY0o9tXso4k=
Subject key identifier: 1B:BA:30:FB:B3:C3:AB:BE:FD:84:E0:10:D7:D7:99:BA:DF:54:A3:C8
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 019B6E45B6AF7D54D63D88B5EA6F61CBA65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 08A2
Signing time: Tue 30 Dec 2025 08:00:20 +0000
Manifest this update: Tue 30 Dec 2025 08:00:20 +0000
Manifest next update: Wed 31 Dec 2025 08:00:20 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: 58fX7t8gNisBPhQgliRTDH2s4iofaW5pD7zV8SUYeiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6e:45:b6:af:7d:54:d6:3d:88:b5:ea:6f:61:cb:a6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Dec 30 08:00:20 2025 GMT
Not After : Dec 31 08:00:20 2025 GMT
Subject: CN=1bba30fbb3c3abbefd84e010d7d799badf54a3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:f2:2a:63:62:9c:80:96:62:a4:9d:0a:b0:
dd:be:86:55:6f:2e:1d:32:ce:09:d5:0b:6b:b1:68:
14:26:d4:69:6a:a9:d4:f2:08:94:ed:a2:64:97:4e:
f8:84:fc:c8:97:2e:dd:c7:d5:f3:c6:f2:b1:87:88:
be:da:24:d2:8f:30:2c:58:7e:b8:ef:57:b7:cb:2d:
80:48:4c:65:81:e8:85:3d:d8:22:d1:2c:1c:76:0a:
72:03:dc:03:3e:b2:a8:47:d8:94:85:d8:21:9d:f7:
9d:3a:ba:bb:c8:16:3d:89:fe:8b:f1:a8:63:16:ed:
af:47:00:3c:e1:4f:70:58:f1:b1:f8:8a:d8:54:a8:
f2:d2:ee:53:02:cd:d5:7d:9b:93:a2:83:2f:52:5b:
fd:05:57:e2:f7:97:d2:ee:58:9e:88:8d:58:2e:dc:
ce:3d:84:1c:bc:76:ba:06:39:0b:0f:96:c2:4a:ee:
31:f9:16:03:ce:cd:b2:8a:e4:3d:e4:aa:0c:64:21:
2d:d1:c2:e5:7c:89:76:70:6a:49:d2:9c:df:3e:f4:
42:ba:9f:b8:d1:84:42:db:3e:0a:71:f3:f6:b1:03:
be:9a:c3:c5:e9:57:12:df:9d:e8:d8:d6:3d:55:23:
ff:1a:00:b8:3a:70:13:57:dc:9a:b4:46:28:88:12:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BA:30:FB:B3:C3:AB:BE:FD:84:E0:10:D7:D7:99:BA:DF:54:A3:C8
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8f:64:5a:b2:79:65:eb:22:7f:e8:72:ed:42:f5:5c:bb:31:
bc:0c:01:44:fe:e3:c1:a0:46:db:75:08:6d:e5:d5:0b:0c:bb:
1d:49:e9:82:99:37:8b:69:c8:d5:87:23:5a:ac:41:ad:ab:4e:
d1:c7:f4:15:af:50:3b:02:c4:0d:38:b6:f2:41:26:1e:55:a0:
99:27:51:82:a4:27:62:cf:8b:bb:07:af:18:04:60:4c:2a:96:
90:a1:77:b9:05:9d:2d:ed:01:45:da:f8:61:9a:c4:06:6a:5d:
26:7e:84:f4:45:6c:61:8b:7e:db:94:d7:b5:c4:1c:41:f2:04:
c2:22:17:5f:b0:e5:c1:53:74:34:38:62:11:95:dd:bb:5d:cd:
c9:4c:46:10:cd:7a:b8:46:ec:b2:b4:42:33:0f:1a:f8:96:e6:
81:85:bb:54:ff:b7:f9:76:6b:4c:f3:c7:3a:55:bf:ce:c7:87:
aa:94:f9:7a:14:bc:b6:40:e7:46:a6:0e:c5:08:30:b1:bb:e3:
08:83:c2:b7:80:2a:13:a6:73:8b:61:12:5a:7b:5e:d1:e0:10:
d1:33:ad:a2:4c:4f:5a:d4:2d:41:87:5c:0d:82:d0:4a:02:fc:
48:26:37:6e:2a:66:63:d2:bf:cc:12:c3:92:03:e5:a6:ef:12:
1d:a7:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:59 2026 by rpki-client