Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: s10zIfww5Un96G2c4VBfjHMpPbPckCcf9/Flg1a6BSY=
Subject key identifier: F6:DC:BC:54:42:71:12:7B:93:E5:12:1D:27:AA:CC:31:1D:B3:DE:17
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 019B72914AB445B86435D114F0D44024E302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 17A9
Signing time: Wed 31 Dec 2025 04:01:22 +0000
Manifest this update: Wed 31 Dec 2025 04:01:22 +0000
Manifest next update: Thu 01 Jan 2026 04:01:22 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: kgrINreFb8kKUCY/DIeZMgNtLnRE01I3iTQWfz1iKeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:72:91:4a:b4:45:b8:64:35:d1:14:f0:d4:40:24:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Dec 31 04:01:22 2025 GMT
Not After : Jan 1 04:01:22 2026 GMT
Subject: CN=f6dcbc544271127b93e5121d27aacc311db3de17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:f3:77:cf:d5:bf:4a:87:3d:b8:f4:68:64:
1f:23:21:bb:5a:fc:a4:ed:6a:c5:85:a4:a1:62:4b:
83:0f:e1:08:a1:33:61:ba:e1:be:69:a6:aa:73:d4:
c5:aa:44:0b:1f:e3:f4:bb:80:f6:12:8f:14:e1:6f:
1e:1d:e2:8a:58:d9:43:2b:3d:19:f4:0e:3f:d8:75:
b1:76:9b:3d:dc:86:57:ab:27:4d:e7:0e:fa:1e:74:
cd:1b:05:e3:fe:cc:23:20:38:07:b7:a3:b5:5a:b5:
97:bd:ec:d4:d4:71:f3:64:f4:b1:0f:a1:17:77:c6:
21:0c:09:21:69:23:d4:f2:7f:75:be:8e:f8:81:25:
35:e2:44:17:93:2f:78:60:37:2e:cd:5d:eb:e7:b6:
c6:a8:04:f5:91:03:69:7f:4a:60:7a:17:dd:3a:c8:
2e:12:89:4f:67:25:4b:ac:82:82:90:11:3e:7a:c2:
fd:9b:41:5b:ad:01:fc:dc:9f:65:b8:e8:5a:23:0e:
bf:6d:c9:01:da:b3:ef:0f:84:22:da:d0:71:2d:c7:
d6:a8:f6:b4:d5:9d:88:23:4e:81:9b:8e:f1:bf:21:
46:79:9f:9b:2e:7f:7d:d6:a2:b1:77:f5:74:38:72:
42:41:72:6e:01:12:e1:e1:1f:25:1a:a9:8f:53:c0:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DC:BC:54:42:71:12:7B:93:E5:12:1D:27:AA:CC:31:1D:B3:DE:17
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1d:73:2d:b0:ed:ea:cc:1d:ac:12:c7:e3:d2:92:21:7d:55:
87:6f:70:c7:a1:9c:77:eb:a5:a6:7c:f4:48:88:d2:eb:ae:c6:
17:6b:ba:a0:76:8f:95:29:0b:20:8f:ba:ac:6d:f7:be:88:66:
96:1d:7e:c8:1d:ca:b4:42:33:a8:23:4f:68:58:a1:eb:48:44:
8a:31:07:67:0d:82:77:eb:83:73:86:85:c4:29:cd:fe:69:d8:
e4:a1:2c:1d:e9:44:9c:9f:ac:39:01:1c:12:4d:3a:90:b4:0e:
de:f1:6e:e6:a8:93:03:23:52:41:00:58:40:bd:ed:d7:88:e9:
6c:27:6a:e5:f0:a3:6e:a1:45:47:61:39:a7:61:f2:88:ce:03:
76:80:a9:94:ce:67:42:9b:a5:fb:d2:f3:5c:9d:1e:b3:e5:bd:
07:26:db:8b:28:ba:da:b9:4b:5f:a7:cc:d6:42:78:5c:de:8d:
79:88:78:7f:bf:41:1e:77:e2:33:e3:92:6a:49:7e:4c:06:30:
f0:6c:fa:3c:fc:bd:0f:46:f3:59:20:9c:6c:17:fa:f9:b0:20:
89:99:3d:98:57:bf:52:b4:9a:81:0b:b1:09:f8:2c:7e:67:a2:
92:0a:1f:91:44:e2:0b:fe:f1:cf:cb:ca:cc:65:ff:a4:f6:67:
86:77:33:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtykUq0RbhkNdEU8NRAJOMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUxMjMxMDQwMTIyWhcNMjYwMTAxMDQwMTIyWjAzMTEwLwYDVQQD
EyhmNmRjYmM1NDQyNzExMjdiOTNlNTEyMWQyN2FhY2MzMTFkYjNkZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0vzd8/Vv0qHPbj0aGQfIyG7Wvyk
7WrFhaShYkuDD+EIoTNhuuG+aaaqc9TFqkQLH+P0u4D2Eo8U4W8eHeKKWNlDKz0Z
9A4/2HWxdps93IZXqydN5w76HnTNGwXj/swjIDgHt6O1WrWXvezU1HHzZPSxD6EX
d8YhDAkhaSPU8n91vo74gSU14kQXky94YDcuzV3r57bGqAT1kQNpf0pgehfdOsgu
EolPZyVLrIKCkBE+esL9m0FbrQH83J9luOhaIw6/bckB2rPvD4Qi2tBxLcfWqPa0
1Z2II06Bm47xvyFGeZ+bLn991qKxd/V0OHJCQXJuARLh4R8lGqmPU8A1kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbcvFRCcRJ7k+USHSeqzDEds94XMB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx1zLbDt
6swdrBLH49KSIX1Vh29wx6Gcd+ulpnz0SIjS667GF2u6oHaPlSkLII+6rG33vohm
lh1+yB3KtEIzqCNPaFih60hEijEHZw2Cd+uDc4aFxCnN/mnY5KEsHelEnJ+sOQEc
Ek06kLQO3vFu5qiTAyNSQQBYQL3t14jpbCdq5fCjbqFFR2E5p2HyiM4DdoCplM5n
Qpul+9LzXJ0es+W9Bybbiyi62rlLX6fM1kJ4XN6NeYh4f79BHnfiM+OSakl+TAYw
8Gz6PPy9D0bzWSCcbBf6+bAgiZk9mFe/UrSagQuxCfgsfmeikgofkUTiC/7xz8vK
zGX/pPZnhnczCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:23 2026 by rpki-client