Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: 0TLLrGImwIj1KDnocQJB4UUJVWcy43BV2MYYWx82rgY=
Subject key identifier: AA:91:A0:8D:19:79:AE:32:FF:5B:47:AA:61:36:70:C0:38:FD:52:3E
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 019B6DD87FBD3A6C837D2799691F6ACF2306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 0C1D
Signing time: Tue 30 Dec 2025 06:01:03 +0000
Manifest this update: Tue 30 Dec 2025 06:01:03 +0000
Manifest next update: Wed 31 Dec 2025 06:01:03 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: sXdBUo2mJqMpMGOeSEwWgUc3xDr980/K/EvExDw4pzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:d8:7f:bd:3a:6c:83:7d:27:99:69:1f:6a:cf:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Dec 30 06:01:03 2025 GMT
Not After : Dec 31 06:01:03 2025 GMT
Subject: CN=aa91a08d1979ae32ff5b47aa613670c038fd523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:e2:17:97:a4:8b:26:86:71:74:d9:4a:1c:
b7:6a:53:c3:3d:b0:6d:a3:a8:1f:57:62:cb:6c:a2:
b7:9b:58:41:10:fe:90:87:22:8f:3b:91:e4:d3:a7:
2f:8e:1f:d2:ba:ee:e3:e4:ca:05:45:4f:e7:c2:9b:
0f:96:c6:35:75:13:83:b4:37:db:76:36:02:b4:ff:
7f:d4:9d:5c:3b:d1:bd:fc:11:6e:cd:c0:9e:83:61:
9e:c2:34:31:57:35:8e:10:ee:94:a4:d3:c1:ef:b0:
7e:03:7c:2b:dc:00:36:a2:aa:c5:ac:ac:8e:4a:20:
01:a0:0d:73:24:a5:ba:9c:07:32:76:e2:c0:ec:57:
df:d8:44:d5:96:00:e2:66:7d:10:f0:40:c5:57:4d:
3e:a8:0c:7f:bd:66:a0:48:76:9f:8a:85:87:69:83:
11:b3:a1:a0:ac:2c:87:5b:1c:3c:31:4d:9f:31:8b:
a9:df:af:a6:d7:5e:9a:51:5d:95:01:fe:9b:86:99:
21:4e:99:10:04:bb:a3:3a:09:b0:3f:4d:f9:69:1a:
48:b8:79:80:2d:83:7e:08:3b:6e:b0:0d:33:ba:82:
38:82:cf:94:3f:43:9b:80:7b:62:ff:f0:5d:3b:6d:
fe:d8:7a:eb:05:7c:1a:6a:33:54:cc:d9:8d:b6:ad:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:A0:8D:19:79:AE:32:FF:5B:47:AA:61:36:70:C0:38:FD:52:3E
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2a:12:2a:5e:99:f6:70:47:e6:62:33:c2:37:0d:91:92:c0:
9b:9a:88:9e:18:7b:ff:ef:98:40:5f:89:71:33:6b:9e:d4:07:
4f:50:70:97:01:49:43:02:91:26:8c:6d:c8:b3:81:92:3a:c3:
12:3d:24:65:ae:df:4c:39:a2:1c:09:a8:4c:c9:89:6b:56:4c:
56:03:d6:55:f0:67:2a:44:97:53:54:70:36:6a:be:fa:ce:50:
36:6d:d5:eb:97:a8:58:a6:ba:ce:57:08:16:9f:fa:16:c5:e7:
cf:83:d3:a9:02:db:6c:05:9d:9f:b5:6f:82:d4:bb:25:0e:4b:
09:49:ca:56:8c:70:f4:8f:ff:e5:ab:b9:89:47:bf:05:c8:17:
09:cd:5d:f8:0a:42:6e:7e:9b:bc:06:9c:01:8d:fe:18:7a:9e:
be:10:dd:22:30:0d:76:26:97:99:de:8b:77:18:d4:82:3a:9e:
86:d9:9d:d1:3d:ca:0e:77:83:59:c0:40:a0:99:95:c9:86:a0:
a7:41:47:31:3d:d7:3d:0f:84:26:c5:2a:1c:39:28:a2:ef:2a:
77:2a:69:25:f3:e9:95:37:07:ee:10:dc:5f:f5:f0:6f:88:60:
95:33:0a:51:11:f3:8d:cd:3e:1b:41:b3:6f:d8:d1:7a:dc:60:
a4:7c:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:29 2026 by rpki-client