Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: Mj0Mn1PHk4WSvLH7S+fC/esVQlSpajmLghLyTW1ZR3c=
Subject key identifier: 4A:56:3C:4F:84:AB:A9:F8:31:D0:65:CD:71:47:F4:73:05:AF:F5:CE
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 019B4994DD27B954EBAF3FD147559F6D2A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 17CB
Signing time: Tue 23 Dec 2025 05:00:51 +0000
Manifest this update: Tue 23 Dec 2025 05:00:51 +0000
Manifest next update: Wed 24 Dec 2025 05:00:51 +0000
Files and hashes: 1: 6ytibQXjOjv-ZANwibgbWAzZG2U.roa (hash: Y/Z/9OvD6QNjfuwrTmUdgOamFL52z6ksqnz9FZTa6JU=)
2: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: a27AMGoEjrMBZtBvKRuJcWfDFQ4fJJ2s9w/AfJoYsGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:49:94:dd:27:b9:54:eb:af:3f:d1:47:55:9f:6d:2a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Dec 23 05:00:51 2025 GMT
Not After : Dec 24 05:00:51 2025 GMT
Subject: CN=4a563c4f84aba9f831d065cd7147f47305aff5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:14:2a:75:a9:e4:09:52:b9:de:e3:71:a1:
ff:c3:29:92:4d:2a:27:c7:01:50:7a:94:5f:ca:f8:
b1:e3:97:22:dd:e3:21:33:59:91:bf:21:ef:b3:f1:
7f:a5:9c:d9:c1:be:71:fe:66:d0:17:23:4c:68:a6:
c3:f7:53:4c:c0:a8:38:2b:24:f1:47:b8:56:5c:75:
06:c1:3a:1f:08:0e:f2:fe:e2:e5:a8:b9:98:3f:97:
6f:66:35:16:4e:d6:f9:79:15:6a:a0:0e:7e:4b:2d:
c3:17:30:e4:c8:e8:f1:ed:3e:b2:9c:fa:88:06:65:
fe:e3:a4:81:1b:3d:ff:ca:3c:39:b6:42:a7:71:f1:
2d:99:69:50:28:c0:1a:37:3e:54:84:32:b2:66:10:
d8:b0:e5:5c:8b:21:b5:48:4a:c9:d9:4d:55:06:f0:
78:03:19:a0:d4:f2:c5:c5:48:3d:65:f4:3e:d3:fd:
f5:33:9a:02:40:c7:10:6f:13:eb:70:b5:76:56:63:
88:7d:6b:ba:36:02:61:fa:bf:b8:e1:74:f3:e1:71:
ac:4c:ef:65:99:89:21:77:f6:9e:03:3d:11:01:e1:
83:d1:24:50:b3:0e:54:c9:d5:fd:38:e0:4c:d2:08:
73:26:b4:5e:b1:b2:6c:ea:e6:dc:cb:e5:ee:d0:47:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:56:3C:4F:84:AB:A9:F8:31:D0:65:CD:71:47:F4:73:05:AF:F5:CE
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:92:fb:45:7c:ea:48:08:f8:d2:5f:bd:35:30:40:c5:ef:f6:
5c:e2:b5:75:be:37:ec:6c:cb:8d:43:e5:3c:81:5e:98:00:49:
df:d9:36:26:4a:ad:f8:50:1f:a3:02:93:83:9c:d3:d2:c7:67:
59:35:a6:45:ab:10:0e:90:19:8d:af:93:a8:6b:5e:5c:0b:9d:
21:9c:2b:85:94:1e:fa:b7:fc:e2:7a:db:65:66:d3:08:f4:41:
9e:ad:ab:94:0d:a0:88:fb:fb:f9:12:56:73:53:6e:35:5a:75:
f9:ee:fc:07:90:f5:87:5f:6c:ce:e0:7a:e1:82:9f:97:22:52:
9a:89:95:a8:7c:1d:07:d7:ab:0a:66:fa:a1:f5:f3:5f:f1:f9:
53:5c:48:50:4d:6a:e0:d3:af:c0:4e:b6:15:33:53:84:80:68:
42:6b:7e:ed:48:e8:3e:68:be:8c:ce:ca:11:11:5a:f0:96:5c:
94:a9:09:7b:41:f6:47:7a:d6:9d:ac:c1:2f:c1:1f:e1:0e:2d:
90:00:2c:38:32:ea:9c:51:86:77:53:fb:ce:c7:e8:86:d7:af:
25:ac:50:9f:dc:c0:a1:27:42:c6:a5:b4:85:81:35:9b:03:99:
9b:7d:5a:4f:d7:4a:bd:e1:9b:8e:19:e5:9d:bf:4e:75:70:66:
58:e6:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:27 2026 by rpki-client