Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json)
Hash identifier: nJ2KkmZglHip2kqCdaEC3msLu2qGRIpbXvptPqX2LoM=
Subject key identifier: A7:12:4C:92:A2:1F:70:07:CC:C3:42:23:BC:80:71:11:96:C7:BA:81
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 019B714770B233F7FE37CF43FCC9D7755FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
Manifest number: 12C6
Signing time: Tue 30 Dec 2025 22:01:05 +0000
Manifest this update: Tue 30 Dec 2025 22:01:05 +0000
Manifest next update: Wed 31 Dec 2025 22:01:05 +0000
Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: webGcVrHMQZfJvbL/GUXAjonKvsosvl3iRu03gOXUZc=)
2: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=)
3: GE6nRoMuniMWGyv11YMLRPKemVU.roa (hash: RaYbPvfO1sHreb2/JnG9Opl+09YsllUwocY3Ihxf+gE=)
4: LFAtM68_QsypB1yZseRwlLJq2u4.roa (hash: /957wLIuErUNU/cVyq1KNPpSgWYbgRzlgVLc/r/yFdE=)
5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=)
6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=)
7: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=)
8: ghLUfufgx1VoBmbU1sZuk7NLdck.roa (hash: KlUf0BqZgjwHYa7TQ0G1F7PJPcSLF10z1HCqYwcsEU0=)
9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=)
10: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=)
11: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:71:47:70:b2:33:f7:fe:37:cf:43:fc:c9:d7:75:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Dec 30 22:01:05 2025 GMT
Not After : Dec 31 22:01:05 2025 GMT
Subject: CN=a7124c92a21f7007ccc34223bc80711196c7ba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:0a:82:3e:0d:78:bc:3e:04:28:6e:79:e1:
5e:24:b3:51:58:41:bb:70:ec:a5:66:d6:01:75:f1:
43:80:a3:f6:dd:da:b0:3b:11:79:ba:51:3b:4e:f0:
60:94:bd:96:1a:c7:01:a5:ef:1c:78:ec:44:54:c2:
6d:8d:3c:7e:a2:77:df:29:90:c0:fe:36:d8:2b:a7:
b9:42:48:36:83:3f:ad:ce:d4:ec:a6:b6:7d:92:b6:
61:04:6f:14:7e:5d:8a:44:d5:25:26:8d:21:89:c3:
dd:5b:c2:19:c5:98:39:cc:55:43:c5:83:6a:12:9d:
f3:3e:ee:57:b6:85:25:55:c5:b0:a7:b7:2f:25:41:
fe:3c:42:cc:51:be:af:3d:d8:76:df:59:af:2e:30:
e6:1a:34:8a:21:99:91:1e:0f:7a:11:2a:ff:4e:03:
c2:d1:a5:29:b1:87:a6:d8:26:cb:58:6f:44:a1:39:
da:3e:cb:91:02:62:63:d2:e0:e3:e3:5e:74:ba:8e:
3b:12:a7:59:7f:1b:82:2d:f0:ab:5c:89:e4:f0:11:
45:6e:b1:f3:e1:49:94:53:35:72:2e:21:97:ca:8e:
af:75:e3:d6:02:ea:2b:11:fa:43:45:6f:bc:3e:cd:
2e:db:13:af:4b:56:a0:77:a4:e4:cc:a4:d8:1b:7f:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:4C:92:A2:1F:70:07:CC:C3:42:23:BC:80:71:11:96:C7:BA:81
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3c:1c:06:09:34:c5:f7:1e:c7:86:21:e8:41:73:b4:9b:23:
82:a8:9f:f1:6c:f3:6e:73:3f:95:21:86:14:5f:01:1b:dc:2c:
96:12:e3:47:76:26:85:9d:c6:65:af:09:a9:5b:eb:05:72:b7:
18:d2:f2:5f:44:42:4e:b3:e2:df:27:8f:31:62:60:4f:57:e2:
e7:5f:9f:3c:d4:f3:b5:ec:8a:4c:bc:bb:6c:94:6b:a9:d6:bf:
ee:b5:19:f5:f1:8b:7b:9a:c8:70:a1:cd:d1:64:05:76:a3:b1:
0e:97:aa:90:da:77:c1:bb:c6:19:ef:74:e9:bc:0d:2e:3d:57:
fc:02:3e:70:2d:72:01:24:72:38:8d:20:25:64:ce:b7:00:39:
ca:c0:99:98:1f:86:55:63:6d:30:5b:21:a8:b5:94:79:53:54:
2e:26:fb:0d:6a:3e:83:a9:7e:09:ff:1d:ad:ab:cf:36:69:67:
59:0d:b1:44:2c:b4:64:1b:2d:fa:37:eb:bf:a8:58:22:11:48:
69:3f:bf:29:c3:20:3a:84:17:6a:c5:c3:62:9b:a3:57:f2:a0:
05:60:dc:08:76:a7:05:f0:77:b7:bd:f1:05:e9:93:40:52:c3:
eb:ad:bb:ee:83:85:3b:e9:b2:2d:8d:9c:cc:6a:2f:6e:68:66:
8f:c1:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:53 2026 by rpki-client