Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File: BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier: rTxWSgZoN8CMs8OcP2RgMqNL4vMceQt9COn3S1MPCWw=
Subject key identifier: DA:5D:D2:E3:9E:57:3F:26:C3:F4:A6:CE:08:E8:5C:75:6F:DA:48:37
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer: /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial: 019B73A35B477CB82EBCC1975B2AE7A62E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number: 0AC6
Signing time: Wed 31 Dec 2025 09:00:44 +0000
Manifest this update: Wed 31 Dec 2025 09:00:44 +0000
Manifest next update: Thu 01 Jan 2026 09:00:44 +0000
Files and hashes: 1: A2uu_VkECN7Wivk8Q3Y5wWZgdfA.roa (hash: TKnnwgB4D2OW3syeJW6W6YQDxOjqWLylQxuIymjfrLw=)
2: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: S0+e4imkXrxFzAOhBCPDtVhX2NmHzc6so3enaZvA4fE=)
3: Ka_z-__yfPUNdCEkEmrWJv_gA2o.roa (hash: u3MD0TaHO1ydISnjdsribaPZzm3duPVcA9ePVcYit+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:73:a3:5b:47:7c:b8:2e:bc:c1:97:5b:2a:e7:a6:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Validity
Not Before: Dec 31 09:00:44 2025 GMT
Not After : Jan 1 09:00:44 2026 GMT
Subject: CN=da5dd2e39e573f26c3f4a6ce08e85c756fda4837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:94:3d:83:45:e7:20:02:43:61:24:ef:dc:
23:8f:d3:d3:46:d1:d0:32:25:14:c1:eb:d1:b8:79:
c2:3b:87:2e:2b:f3:f0:24:de:cc:52:09:13:fc:2f:
c8:ef:97:9f:50:1e:02:c5:e2:bc:d6:85:68:e7:18:
6a:f0:e7:b0:a0:51:28:a9:b1:68:24:33:b4:76:dc:
27:3d:0a:08:aa:33:3d:ac:18:a7:11:76:f6:07:07:
fd:06:d7:c1:a6:86:6c:6b:b6:8a:be:cd:c1:3b:a2:
f8:cf:b7:44:c4:9b:85:2e:5f:c9:bd:8e:cf:93:19:
4a:b2:00:56:2d:df:d4:d6:4a:44:d9:f1:a6:b5:05:
32:76:0a:36:77:e6:9c:31:69:83:72:6c:c2:5c:6a:
eb:93:3d:62:b6:fe:15:86:ec:6e:ab:3a:78:82:6e:
76:6c:45:1d:92:75:8e:80:15:c2:8b:d1:0d:ee:3c:
7b:58:44:ea:15:bf:a8:2b:a4:63:d1:fc:b0:18:de:
69:ef:f7:b5:2c:97:15:81:57:ff:7e:08:89:57:84:
b2:de:6b:b6:c5:a9:0c:2d:58:9c:db:5e:5e:e2:cf:
4b:b6:03:27:a2:81:55:77:5a:ca:43:23:85:8d:24:
f3:de:d1:12:2b:74:cf:43:1f:56:28:90:79:7d:aa:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:D2:E3:9E:57:3F:26:C3:F4:A6:CE:08:E8:5C:75:6F:DA:48:37
X509v3 Authority Key Identifier:
keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:74:68:88:8a:76:1f:5c:83:57:a5:6f:1f:58:a1:d9:d4:
2f:ff:d3:bf:aa:58:4d:51:30:ea:f0:a3:63:85:5c:35:ae:cb:
da:d3:23:75:6c:76:c9:39:26:c1:81:e3:7d:87:03:81:ad:2b:
a8:d6:2c:41:f8:a5:ce:e3:75:7b:d6:83:29:9c:54:28:02:78:
a2:50:4e:21:89:d3:8d:3a:df:8c:30:f1:34:da:61:ee:55:7d:
6f:8d:c1:9c:ff:99:65:33:a9:52:d6:78:a6:4e:9e:37:46:5d:
3c:3d:fe:6f:a4:cb:ad:e0:8b:de:bd:0f:31:0d:1e:7b:47:44:
50:8b:90:1c:fb:55:b2:82:a5:49:ff:c7:42:8a:50:a5:78:b8:
f7:39:d2:75:b3:88:2e:3b:55:b5:3b:61:29:e9:18:c9:3e:f1:
e0:3f:1b:24:b2:f1:af:9b:18:23:48:21:59:f3:95:4a:f1:5f:
e8:eb:f8:13:45:e3:36:eb:2f:f7:34:43:b6:8a:ac:86:d6:b3:
cf:72:4e:bb:48:e9:3b:62:68:f4:c7:b2:31:8e:b3:60:e6:b4:
f9:4d:a0:bc:14:97:31:8a:8d:f6:42:0d:55:57:7c:14:ab:ba:
90:ed:05:4a:59:26:ec:30:36:4f:96:a2:41:33:4b:35:48:1d:
4d:6a:5d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:11 2026 by rpki-client