Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: QOH1Ys0JAJOeP1Pctoe6NunSYWUcF64hRVxFv4OfOmg=
Subject key identifier: 42:8A:21:C0:49:BB:10:C3:46:55:96:F9:C3:B2:46:B5:A5:3D:F0:63
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 019B4F9722775B4F4D5122EEFCA163FE194F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 0AD6
Signing time: Wed 24 Dec 2025 09:01:03 +0000
Manifest this update: Wed 24 Dec 2025 09:01:03 +0000
Manifest next update: Thu 25 Dec 2025 09:01:03 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: BF9+c+HaBu6O5LWW5dTfHgp4LU+doDosPAlF6MQsHds=)
2: wBQJvFifdoJgqtUNKdp3wlo8l_8.roa (hash: 5Lsfd9g+UNfdFLBlgH3vEAe0fksX3TCnFsgxtR55Zwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4f:97:22:77:5b:4f:4d:51:22:ee:fc:a1:63:fe:19:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Dec 24 09:01:03 2025 GMT
Not After : Dec 25 09:01:03 2025 GMT
Subject: CN=428a21c049bb10c3465596f9c3b246b5a53df063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:6d:ef:d4:b2:09:c3:7b:a0:8a:cf:ee:7e:
2a:f8:35:97:c0:ac:b0:09:4a:b5:ea:68:31:14:e0:
ea:83:b2:9d:10:f9:0b:a7:6c:14:e1:1a:30:05:e1:
9b:65:67:32:c9:28:24:00:3f:1e:d2:49:a3:be:03:
e6:0b:a7:e8:03:40:dd:f5:1d:8e:d4:7a:10:0e:11:
5a:1b:d0:2d:58:47:31:9e:5b:6c:95:e8:98:7c:8d:
e2:5a:32:cf:0a:e5:25:4e:7e:3d:c9:c8:51:ea:8e:
ad:88:c7:c5:45:c7:3d:4e:85:ed:0c:67:31:4c:d9:
e8:60:ab:79:c0:d6:52:9c:48:72:80:68:8c:7e:44:
f3:9b:80:a5:a4:74:5f:07:99:43:e5:97:e9:df:8b:
00:a9:7c:05:94:1f:4b:f4:00:0d:b6:8c:45:f4:90:
a4:64:8e:b5:34:6c:53:c4:f4:28:b6:42:36:0c:6d:
c2:da:81:70:0b:3d:a6:6c:54:bf:12:6e:fb:95:f5:
20:07:44:0a:10:d0:31:c5:c6:47:5c:fb:53:76:d0:
45:87:85:04:1c:c4:2b:49:09:f7:a4:f6:22:c0:bd:
a1:0e:ab:6e:c1:9b:50:0c:4e:eb:b7:d0:f2:72:b6:
16:6b:f4:b0:79:63:60:92:19:bd:66:a5:ec:69:35:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8A:21:C0:49:BB:10:C3:46:55:96:F9:C3:B2:46:B5:A5:3D:F0:63
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f8:e2:b7:c0:81:be:92:60:3c:28:9b:38:bf:07:c9:c6:94:
43:b5:d8:19:9b:d8:ed:4c:ab:ff:c4:8e:41:0d:c1:a8:38:65:
02:74:c0:b3:bd:0d:8d:49:d4:d5:02:27:7f:a0:13:d8:48:f3:
a6:ed:fc:58:b7:08:cc:3c:8e:89:b6:18:d1:9a:1c:37:9a:7f:
19:e6:cc:88:b0:0c:b1:98:ab:87:b4:4b:b8:0e:05:d9:0a:a5:
5f:8c:c0:ec:f6:9a:3a:b3:de:dc:53:d5:c9:45:25:1a:2e:01:
97:50:55:5d:3d:ba:8a:46:5b:3d:0e:e1:a4:0b:ac:c5:6b:e1:
8c:23:e1:a4:b9:08:9d:d5:16:c8:b3:09:b2:b6:e6:bc:ed:42:
8d:d5:0e:4c:0e:76:fe:a2:64:dc:7c:1a:c1:9e:0f:16:b4:2d:
e7:ed:82:09:43:da:1b:63:ce:4f:8f:f7:96:1d:75:0b:ac:eb:
d6:28:a2:c4:39:5f:c2:81:08:95:ab:9f:7a:6b:fd:f1:23:0f:
d1:57:42:27:36:84:33:ab:9b:64:ae:44:a6:24:99:4b:ca:27:
3e:9c:6a:0a:95:73:26:cc:18:04:45:89:be:2d:b6:e0:4a:c2:
f2:7a:0d:a5:98:19:8d:21:ed:f8:77:00:53:5e:ea:3e:ff:1d:
a7:56:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:23 2026 by rpki-client