Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
File: g2CfK50khvNujNKd-ip1akjefFE.mft (raw, json)
Hash identifier: rRF+aT+8h69fldwdXzLSvoHPDL6CpdXDfiAaZ690l8M=
Subject key identifier: BC:ED:BF:EB:93:06:F2:76:F2:76:B3:1C:C6:89:85:5A:72:2C:1B:DA
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 019B440075644B45986039D691AD2BEC47D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
Manifest number: 1793
Signing time: Mon 22 Dec 2025 03:00:39 +0000
Manifest this update: Mon 22 Dec 2025 03:00:39 +0000
Manifest next update: Tue 23 Dec 2025 03:00:39 +0000
Files and hashes: 1: GxR7z8RKcSPGLTL-vNXCK33Iesc.roa (hash: YLGDTkKd+pthF6v4ZZ4TjrJJjHHjvrONsu/e4skdHWA=)
2: g2CfK50khvNujNKd-ip1akjefFE.crl (hash: ayewiZMAs9WQYWJd6GqsAvqYWuYc97rh1hAiCwZaqcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:44:00:75:64:4b:45:98:60:39:d6:91:ad:2b:ec:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: Dec 22 03:00:39 2025 GMT
Not After : Dec 23 03:00:39 2025 GMT
Subject: CN=bcedbfeb9306f276f276b31cc689855a722c1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5c:df:68:59:45:4a:5d:51:8c:b7:71:7b:1a:
4d:2c:c8:79:b0:bc:49:63:11:e2:b2:6e:5b:c8:d4:
2e:a5:d0:c2:a8:5c:06:5b:dd:27:27:87:25:c4:28:
37:c1:3d:2d:75:3a:b7:47:fc:17:af:a5:d8:3f:ff:
c8:52:ef:bb:18:ce:3f:46:d5:b6:35:7e:45:89:be:
6b:91:ff:b4:3a:8d:d0:91:d3:bd:b1:1c:78:0d:ca:
4a:23:c0:1d:60:32:0f:eb:08:da:24:19:0e:e9:fe:
c2:9b:7d:78:e8:83:78:f9:82:73:fa:93:5e:a7:69:
4a:0c:8b:3c:00:68:99:11:1b:b8:3c:4c:82:a2:1b:
27:da:b1:53:8d:54:64:ca:12:70:aa:6f:54:e0:2b:
b3:43:c4:cc:6b:a0:44:08:84:d8:b3:f3:13:1f:74:
de:6b:94:a6:56:69:70:28:a3:4d:de:66:e3:78:f8:
48:65:a9:ff:04:fc:e4:ca:9a:eb:91:c4:cc:8d:b9:
29:88:84:cb:df:60:4f:32:3b:96:9e:a0:e4:98:1a:
fe:98:76:3a:48:d4:ba:3b:29:4a:ce:ab:28:63:6e:
b3:84:ec:24:48:74:ff:56:77:12:c6:ed:d3:1a:96:
a6:c6:f1:eb:69:12:56:6f:0e:61:9a:4f:ac:d6:65:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:BF:EB:93:06:F2:76:F2:76:B3:1C:C6:89:85:5A:72:2C:1B:DA
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8b:68:92:73:95:ec:24:86:79:33:9b:1f:c0:3c:35:40:f3:
45:6d:b8:cc:aa:a1:c8:47:94:e4:f7:fb:cf:8d:d2:30:1d:35:
61:15:a9:ad:e2:50:49:f0:39:2d:bb:6d:b6:7d:be:32:c9:a1:
c7:67:40:83:69:dd:02:df:4f:c4:fd:36:77:77:9e:19:8b:af:
93:f9:f0:6a:89:5f:b1:bc:86:cc:73:4c:62:35:80:86:76:c8:
63:e2:e2:28:ce:e6:d4:0f:16:3f:f1:ac:24:7c:ec:b8:02:a7:
f9:b1:c3:50:be:3b:80:3f:f0:2f:2e:11:99:30:14:75:f3:44:
6a:af:9b:99:7b:8a:60:49:d8:ef:a6:88:a8:51:9d:f7:e4:3d:
ff:5d:94:e7:a9:71:0a:e6:51:29:f4:9e:a8:1e:a7:18:99:5e:
77:e8:fd:34:56:5b:09:2d:6c:06:a9:4f:8e:02:81:ea:07:cf:
13:17:cf:a4:53:f2:da:f5:86:63:6a:59:73:39:c3:3f:96:22:
5e:10:c2:f9:01:1b:65:c7:8d:ca:8d:47:02:83:e1:26:f4:7d:
59:61:19:65:9f:b2:74:81:fc:5a:c1:4b:64:3e:37:cc:1d:8e:
5a:eb:78:58:4e:44:34:65:c6:2d:2f:81:b1:73:d5:89:7f:60:
62:38:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:13 2026 by rpki-client