Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File: wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier: h8mJA8cpKOkymLD/HUE7Q5hVdiIly4hq5FyvceWwKz0=
Subject key identifier: A6:65:2D:37:FA:36:C3:B8:16:C3:13:48:C8:BA:17:30:68:81:C7:38
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer: /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial: 019A958DA77579F4FF740C49630D4B195A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number: 09A4
Signing time: Tue 18 Nov 2025 06:01:19 +0000
Manifest this update: Tue 18 Nov 2025 06:01:19 +0000
Manifest next update: Wed 19 Nov 2025 06:01:19 +0000
Files and hashes: 1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: lhE1NJ8uQviCnlcH5yiIOS6G6UHSjK6TOcNEkajyqLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:95:8d:a7:75:79:f4:ff:74:0c:49:63:0d:4b:19:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Validity
Not Before: Nov 18 06:01:19 2025 GMT
Not After : Nov 19 06:01:19 2025 GMT
Subject: CN=a6652d37fa36c3b816c31348c8ba17306881c738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:c4:b3:41:b8:52:7d:5f:e6:2a:2a:83:a7:
ff:e9:15:49:70:a8:bd:d8:44:d4:a3:0c:09:7d:ea:
25:0f:76:75:0c:f4:be:f8:b3:4f:84:dd:1c:cb:71:
e2:58:8d:f5:b5:f0:b9:dc:0d:0a:48:98:ac:18:ec:
0c:a9:c2:40:25:f3:9c:b8:1d:01:29:c6:07:26:df:
92:f5:6c:c6:bf:e3:c3:25:6a:b6:d3:b8:b7:83:a3:
c0:7d:3c:32:ab:a4:61:76:45:d6:96:7d:0d:57:6f:
0d:66:94:77:ab:1c:9d:40:ca:5a:cf:54:53:50:76:
9f:18:e6:c4:2a:72:ae:0c:3b:65:0e:e7:02:e8:89:
5e:29:2d:e8:a0:f6:d7:ad:24:d6:7c:70:04:19:12:
de:1e:b2:de:bc:3f:f2:55:5b:bd:25:48:f6:3c:e3:
df:71:de:e2:f3:51:b8:38:52:58:aa:39:8f:9c:c1:
6c:14:05:82:ba:69:0e:5b:bf:68:0c:d8:b6:2b:fe:
69:46:0b:dc:19:0c:94:66:df:d1:23:ef:c7:79:f1:
fe:f0:b6:9f:86:b2:59:fb:e9:75:87:14:89:94:98:
23:b2:26:80:14:8d:ff:26:45:13:08:4b:10:56:0c:
12:6c:91:5f:61:a4:3e:47:b7:d8:fc:97:a3:2e:54:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:65:2D:37:FA:36:C3:B8:16:C3:13:48:C8:BA:17:30:68:81:C7:38
X509v3 Authority Key Identifier:
keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c6:71:09:72:91:9d:13:89:2d:cd:33:a0:39:33:38:31:2c:
73:dc:4f:07:03:3e:7c:1e:30:7a:aa:d1:f0:63:25:fb:27:f5:
31:0d:b2:2a:01:9d:fb:df:a8:60:8a:4f:7c:5a:02:f1:75:3b:
10:83:80:0d:6f:92:72:9b:ad:cc:ba:75:06:b6:b4:ab:7d:cd:
fc:80:1f:0c:72:01:18:00:46:91:40:70:cb:f0:7a:fb:cc:63:
e9:b1:b7:af:3a:56:68:d2:11:53:a4:4e:ad:f0:5c:0f:5d:2b:
6c:8e:06:74:27:49:81:b6:c1:da:bb:1d:fc:32:9b:05:9f:86:
12:40:17:c0:8b:97:56:2f:1b:c1:b6:ac:2b:b0:1d:6a:c4:bb:
bb:54:1e:dd:c4:99:23:ca:33:65:84:bb:7a:44:8f:bf:d0:27:
20:09:88:35:f4:dc:21:ab:d8:dc:45:f1:bf:4a:d8:14:82:eb:
37:e6:a9:e2:43:0e:15:d5:10:e5:ca:f5:44:dc:f7:28:33:8c:
d6:a0:cc:52:e4:10:21:ac:18:b5:a5:68:41:28:44:a2:1d:16:
e0:8e:e5:73:a0:4e:11:dd:f9:1a:f0:05:5b:4c:96:11:d9:e5:
85:7e:9b:f1:ad:9e:7b:71:4c:f7:87:3e:6a:1a:c9:3b:ce:d7:
64:79:0f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:24 2026 by rpki-client