Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: j9cRLRNm09C15RDLD6kupnO+RAX8qoyJHWOTNH2e8SI=
Subject key identifier: E0:3F:F2:DC:2E:0F:E2:21:DD:75:A5:D2:89:28:56:4A:BE:EB:23:C4
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 019B73A358636EAE64BA382B171BFA0C6CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 1600
Signing time: Wed 31 Dec 2025 09:00:43 +0000
Manifest this update: Wed 31 Dec 2025 09:00:43 +0000
Manifest next update: Thu 01 Jan 2026 09:00:43 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: Ji2TNUthY789IKSzvhCA64DmDMaUr+zk9mn54tsgEiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:73:a3:58:63:6e:ae:64:ba:38:2b:17:1b:fa:0c:6c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Dec 31 09:00:43 2025 GMT
Not After : Jan 1 09:00:43 2026 GMT
Subject: CN=e03ff2dc2e0fe221dd75a5d28928564abeeb23c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:36:0c:9d:a9:23:50:4a:d0:f5:31:d4:f6:
b2:15:90:f6:69:1a:69:4f:89:2d:52:57:cf:7b:d5:
d1:82:5c:e3:52:69:69:65:d9:32:f4:4f:71:1a:83:
39:d9:2b:e4:31:97:ad:7a:0c:4f:49:e9:ac:b0:d1:
a5:cd:2c:fd:19:b1:a9:b0:0f:e6:2f:b7:c2:85:b3:
53:82:f3:4a:24:24:81:81:a8:05:83:20:7f:68:ff:
42:82:0a:28:1f:fc:47:05:76:07:46:a4:cb:0e:28:
08:b7:c6:84:9b:7d:68:73:31:61:4b:1b:4b:af:c1:
a7:c8:61:68:60:64:c2:00:85:73:4d:1d:c1:cf:64:
13:24:1b:f0:31:30:73:30:35:b7:27:c0:6b:09:5c:
fb:9b:d5:c5:9e:54:32:60:e6:2d:66:9b:81:be:22:
26:e8:b4:8c:8e:ce:9f:71:ed:84:59:3d:ef:1d:4b:
94:dd:1d:09:75:87:3e:05:42:2c:6f:be:27:40:80:
7d:29:da:ff:2b:52:7b:c9:b4:12:6d:84:26:74:a0:
7a:e7:0f:45:74:28:88:96:ae:e1:b3:34:4d:04:d5:
8b:fc:ae:bf:4e:db:15:8f:bb:f9:7e:c8:ec:81:ae:
28:b5:43:3a:96:7e:c8:9a:b0:f6:12:8f:a4:ac:79:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:F2:DC:2E:0F:E2:21:DD:75:A5:D2:89:28:56:4A:BE:EB:23:C4
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ed:05:1f:77:08:cc:69:b7:82:83:2a:73:79:68:e3:b6:21:
e7:1d:9c:85:da:da:0a:8b:43:8b:d2:e5:82:a7:9e:e9:40:82:
9d:d3:26:37:68:c2:a8:8d:d0:a6:3d:12:e2:20:ae:01:7a:a0:
1d:fd:2e:27:b3:dd:de:6d:43:48:b9:5a:63:fc:47:9d:dc:06:
4f:a7:12:30:2b:f6:09:ed:19:d8:8d:c1:91:a0:76:10:72:c4:
c6:e7:2d:05:c9:c8:1b:0e:48:57:3f:bc:82:90:95:35:b3:c8:
18:e7:61:58:43:70:97:03:b4:d9:d1:f0:c0:b4:3c:f4:f0:07:
aa:4d:7f:1c:7d:2b:14:ca:28:67:41:7d:5e:d8:b3:ea:35:f4:
49:4e:a8:65:36:b2:30:89:30:82:60:ac:01:7c:2a:e5:22:ae:
fe:93:89:e6:0f:65:60:29:ee:cf:c8:0a:4d:d6:b7:d3:e0:dc:
20:4e:68:98:d7:59:b1:af:8b:f4:10:51:58:94:87:93:e2:22:
14:fc:18:c1:9d:c3:14:69:eb:83:26:b7:c9:d1:f7:68:ae:c6:
b1:48:1d:3c:a3:5f:6a:d2:10:03:4e:e9:ee:5b:fe:07:7e:a9:
4a:c9:06:33:48:af:2e:0c:d3:75:8e:3b:90:c2:b3:f5:9c:ed:
e2:d2:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:55 2026 by rpki-client